2018 CVEs (page 13)
Page 13 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18573 | High | 7.2 | 2019-08-22 | osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Remote authenticated administrators can upload new '.htaccess'… |
CVE-2018-18572 | High | 7.2 | 2019-08-22 | osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Because of this filter, script files with certain PHP-related e… |
CVE-2018-20985 | Critical | 9.8 | 2019-08-22 | The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec. |
CVE-2018-20984 | Critical | 9.8 | 2019-08-22 | The patreon-connect plugin before 1.2.2 for WordPress has Object Injection. |
CVE-2018-20983 | Medium | 6.1 | 2019-08-22 | The wp-retina-2x plugin before 5.2.3 for WordPress has XSS. |
CVE-2018-20982 | Medium | 6.1 | 2019-08-22 | The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens. |
CVE-2018-20981 | Critical | 9.1 | 2019-08-22 | The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests. |
CVE-2018-20980 | High | 7.5 | 2019-08-22 | The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering. |
CVE-2018-20979 | Critical | 9.8 | 2019-08-22 | The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type. |
CVE-2018-17791 | High | 7.5 | 2019-08-21 | Newgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side validation" vulnerability where client-side validations are tampered… |
CVE-2018-20977 | Medium | 6.1 | 2019-08-21 | The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page. |
CVE-2018-20970 | Medium | 6.1 | 2019-08-21 | The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues. |
CVE-2018-1796 | High | 7.8 | 2019-08-20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. IBM X-Force ID: 149426. |
CVE-2018-1636 | Medium | 6.7 | 2019-08-20 | Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root… |
CVE-2018-1635 | Medium | 6.7 | 2019-08-20 | Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root… |
CVE-2018-1634 | Medium | 6.7 | 2019-08-20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbo… |
CVE-2018-1633 | Medium | 6.7 | 2019-08-20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbo… |
CVE-2018-1632 | Medium | 6.7 | 2019-08-20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbo… |
CVE-2018-1631 | Medium | 6.7 | 2019-08-20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbo… |
CVE-2018-1630 | Medium | 6.7 | 2019-08-20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbo… |
CVE-2018-18056 | Medium | 4.6 | 2019-08-20 | An issue was discovered in the Texas Instruments (TI) TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory (XOM) implementation prevents c… |
CVE-2018-20978 | Medium | 6.1 | 2019-08-20 | The wp-all-import plugin before 3.4.7 for WordPress has XSS. |
CVE-2018-20975 | Medium | 6.1 | 2019-08-20 | Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb. |
CVE-2018-20976 | High | 7.8 | 2019-08-19 | An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure. |
CVE-2018-20974 | High | 8.8 | 2019-08-16 | The js-jobs plugin before 1.0.7 for WordPress has CSRF. |
CVE-2018-20973 | Critical | 9.8 | 2019-08-16 | The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion. |
CVE-2018-20972 | High | 8.8 | 2019-08-16 | The companion-auto-update plugin before 3.2.1 for WordPress has CSRF. |
CVE-2018-20971 | High | 8.8 | 2019-08-16 | The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan. |
CVE-2018-20969 | High | 7.8 | 2019-08-16 | do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but… |
CVE-2018-14062 | Critical | 9.1 | 2019-08-15 | The COSPAS-SARSAT protocol allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages (… |
CVE-2018-14672 | Medium | 5.3 | 2019-08-15 | In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages. |
CVE-2018-14671 | Critical | 9.8 | 2019-08-15 | In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability. |
CVE-2018-14670 | Critical | 9.8 | 2019-08-15 | Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database. |
CVE-2018-14669 | High | 7.5 | 2019-08-15 | ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary fil… |
CVE-2018-14668 | High | 8.8 | 2019-08-15 | In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "default_database" fields which led to Cross Protoc… |
CVE-2018-17790 | Medium | 5.4 | 2019-08-15 | Prospecta Master Data Online (MDO) 2.0 has Stored XSS. |
CVE-2018-14008 | Medium | 6.5 | 2019-08-15 | Arista EOS through 4.21.0F allows a crash because 802.1x authentication is mishandled. |
CVE-2018-12357 | Medium | 6.5 | 2019-08-15 | Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions. |
CVE-2018-12101 | Medium | 5.4 | 2019-08-15 | CMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User/Resource Group Links fields. |
CVE-2018-19386 | Medium | 6.1 | 2019-08-14 | SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected i… |
CVE-2018-20968 | High | 8.8 | 2019-08-14 | The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF. |
CVE-2018-20967 | High | 8.8 | 2019-08-14 | The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF. |
CVE-2018-20964 | High | 8.8 | 2019-08-13 | The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF. |
CVE-2018-20963 | Medium | 6.1 | 2019-08-13 | The contact-form-to-email plugin before 1.2.66 for WordPress has XSS. |
CVE-2018-20966 | Medium | 6.1 | 2019-08-12 | The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature. |
CVE-2018-20965 | Medium | 6.1 | 2019-08-12 | The ultimate-member plugin before 2.0.4 for WordPress has XSS. |
CVE-2018-20827 | Medium | 5.4 | 2019-08-09 | The activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulner… |
CVE-2018-20826 | Medium | 4.3 | 2019-08-09 | The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation c… |
CVE-2018-20858 | Medium | 6.1 | 2019-08-09 | Recommender before 2018-07-18 allows XSS. |
CVE-2018-20960 | High | 8.1 | 2019-08-08 | Nespresso Prodigio devices lack Bluetooth connection security. |
CVE-2018-20957 | High | 8.8 | 2019-08-08 | The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay attacks. |
CVE-2018-20956 | Medium | 5.5 | 2019-08-08 | Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31. |
CVE-2018-20955 | Critical | 9.8 | 2019-08-08 | Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31. |
CVE-2018-20954 | High | 7.5 | 2019-08-08 | The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys. |
CVE-2018-20962 | Medium | 6.1 | 2019-08-08 | The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type. |
CVE-2018-19855 | Medium | 5.5 | 2019-08-08 | UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features. |
CVE-2018-20961 | Critical | 9.8 | 2019-08-07 | In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may… |
CVE-2018-14383 | High | 7.5 | 2019-08-07 | The Transition Technologies "The Scheduler" app 5.1.3 for Jira allows XXE due to a weakly configured/parameterized XML parser. It was fixed in the versions 5.2… |
CVE-2018-20959 | High | 8.1 | 2019-08-07 | Jura E8 devices lack Bluetooth connection security. |
CVE-2018-20958 | Medium | 6.5 | 2019-08-07 | The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived fr… |
CVE-2018-1987 | High | 7.8 | 2019-08-02 | IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain te… |
CVE-2018-20953 | Medium | 6.1 | 2019-08-01 | cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389). |
CVE-2018-20952 | Medium | 6.5 | 2019-08-01 | cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388). |
CVE-2018-20951 | Medium | 6.1 | 2019-08-01 | cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387). |
CVE-2018-20950 | Medium | 6.1 | 2019-08-01 | cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386). |
CVE-2018-20949 | Medium | 6.1 | 2019-08-01 | cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385). |
CVE-2018-20948 | Medium | 6.1 | 2019-08-01 | cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383). |
CVE-2018-20947 | Medium | 5.5 | 2019-08-01 | cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356). |
CVE-2018-20946 | Low | 3.3 | 2019-08-01 | cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archive_sync_zones script (SEC-355). |
CVE-2018-20945 | Medium | 5.7 | 2019-08-01 | bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354). |
CVE-2018-20944 | Low | 3.3 | 2019-08-01 | cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test (SEC-353). |
CVE-2018-20943 | Low | 2.5 | 2019-08-01 | cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon a post-update task (SEC-352). |
CVE-2018-20942 | Low | 2.5 | 2019-08-01 | cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon configuring crontab (SEC-351). |
CVE-2018-20941 | Medium | 5.6 | 2019-08-01 | cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin (SEC-349). |
CVE-2018-20940 | Low | 3.3 | 2019-08-01 | cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon the enabling of backups (SEC-342). |
CVE-2018-20939 | Low | 3.3 | 2019-08-01 | cPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by that user) by leveraging backups (SEC-339). |
CVE-2018-20938 | Low | 2.7 | 2019-08-01 | cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324). |
CVE-2018-20937 | Medium | 4.3 | 2019-08-01 | cPanel before 68.0.27 does not validate database and dbuser names during renames (SEC-321). |
CVE-2018-20936 | Low | 3.3 | 2019-08-01 | cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf (SEC-308). |
CVE-2018-20935 | Medium | 5.4 | 2019-08-01 | cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412). |
CVE-2018-20934 | Medium | 6.5 | 2019-08-01 | cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411). |
CVE-2018-20933 | Medium | 5.4 | 2019-08-01 | cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410). |
CVE-2018-20932 | Low | 2.7 | 2019-08-01 | cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406). |
CVE-2018-20931 | Medium | 6.3 | 2019-08-01 | cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405). |
CVE-2018-20930 | Medium | 6.5 | 2019-08-01 | cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401). |
CVE-2018-20929 | Medium | 6.1 | 2019-08-01 | cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392). |
CVE-2018-20928 | Medium | 6.1 | 2019-08-01 | cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391). |
CVE-2018-20927 | Low | 3.8 | 2019-08-01 | cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382). |
CVE-2018-20926 | Medium | 6.7 | 2019-08-01 | cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380). |
CVE-2018-20925 | Medium | 6.7 | 2019-08-01 | cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379). |
CVE-2018-20924 | Medium | 5.5 | 2019-08-01 | cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378). |
CVE-2018-20923 | Medium | 6.1 | 2019-08-01 | cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377). |
CVE-2018-20922 | Medium | 6.1 | 2019-08-01 | cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376). |
CVE-2018-20921 | Medium | 6.1 | 2019-08-01 | cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375). |
CVE-2018-20920 | Medium | 6.1 | 2019-08-01 | cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374). |
CVE-2018-20919 | Medium | 6.1 | 2019-08-01 | cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373). |
CVE-2018-20918 | Medium | 6.1 | 2019-08-01 | cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372). |
CVE-2018-20917 | Medium | 5.5 | 2019-08-01 | cPanel before 70.0.23 allows any user to disable Solr (SEC-371). |
CVE-2018-20916 | Medium | 5.4 | 2019-08-01 | cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370). |
CVE-2018-20915 | Medium | 5.4 | 2019-08-01 | cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369). |