2018 CVEs (page 130)
Page 130 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-10771 | Critical | 9.8 | 2018-05-07 | Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application cra… |
CVE-2018-10768 | Medium | 6.5 | 2018-05-06 | There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to… |
CVE-2018-10767 | Medium | 6.5 | 2018-05-06 | There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it doe… |
CVE-2018-0494 | Medium | 6.5 | 2018-05-06 | GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line. |
CVE-2018-10686 | Medium | 6.1 | 2018-05-06 | An issue was discovered in Vesta Control Panel 0.9.8-20. There is Reflected XSS via $_REQUEST['path'] to the view/file/index.php URI, which can lead to remote… |
CVE-2018-10723 | Critical | 9.8 | 2018-05-05 | Directus 6.4.9 has a hardcoded admin password for the Admin account because of an INSERT statement in api/schema.sql. |
CVE-2018-10758 | Medium | 6.5 | 2018-05-05 | The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles. |
CVE-2018-10757 | Critical | 9.8 | 2018-05-05 | CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a login attempt. |
CVE-2018-10753 | Critical | 9.8 | 2018-05-05 | Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (applicat… |
CVE-2018-10752 | Medium | 4.8 | 2018-05-05 | The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action. |
CVE-2018-9154 | High | 7.5 | 2018-05-04 | There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack… |
CVE-2018-10251 | Critical | 9.8 | 2018-05-04 | A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X, MP70, and MP70E rou… |
CVE-2018-10229 | Medium | 4.8 | 2018-05-04 | A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript WebGL API. |
CVE-2018-7509 | High | 8.8 | 2018-05-04 | WPLSoft in Delta Electronics versions 2.45.0 and prior writes data from a file outside the bounds of the intended buffer space, which could cause memory corrup… |
CVE-2018-7507 | High | 8.8 | 2018-05-04 | WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where a value larger than the buffer can be read from a file into th… |
CVE-2018-7494 | High | 8.8 | 2018-05-04 | WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be read from a file into t… |
CVE-2018-5448 | Medium | 4.8 | 2018-05-04 | Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker to read files on the… |
CVE-2018-5446 | Medium | 4.9 | 2018-05-04 | Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format. |
CVE-2018-10750 | High | 8.8 | 2018-05-04 | An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi'… |
CVE-2018-10749 | High | 8.8 | 2018-05-04 | An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' bin… |
CVE-2018-10748 | High | 8.8 | 2018-05-04 | An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binar… |
CVE-2018-10747 | High | 8.8 | 2018-05-04 | An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as an 'unset' parameter to the '/userfs/bin/tcapi' bin… |
CVE-2018-10746 | High | 8.8 | 2018-05-04 | An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary… |
CVE-2018-10740 | Critical | 9.8 | 2018-05-04 | Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code (contained in the webkeywords parameter) into the cmsconfig.php file. |
CVE-2018-9063 | High | 7.8 | 2018-05-04 | MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attac… |
CVE-2018-8872 | High | 8.1 | 2018-05-04 | In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program ar… |
CVE-2018-8869 | Critical | 9.8 | 2018-05-04 | In Lantech IDS 2102 2.0 and prior, nearly all input fields allow for arbitrary input on the device. A CVSS v3 base score of 9.8 has been calculated; the CVSS v… |
CVE-2018-8865 | Critical | 9.8 | 2018-05-04 | In Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been identified which may allow remote code execution. A CVSS v3 base score… |
CVE-2018-8861 | High | 8.7 | 2018-05-04 | Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance i… |
CVE-2018-8857 | High | 7.8 | 2018-05-04 | Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and… |
CVE-2018-8853 | High | 8.8 | 2018-05-04 | Philips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft Windows operating system. Windows boots by default with eleva… |
CVE-2018-7522 | Medium | 6.7 | 2018-05-04 | In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. M… |
CVE-2018-10739 | Medium | 5.5 | 2018-05-04 | An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe allows local users to bypass intended process protections, and consequently term… |
CVE-2018-10733 | Medium | 6.5 | 2018-05-04 | There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial… |
CVE-2018-10726 | Medium | 5.4 | 2018-05-04 | A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an in… |
CVE-2018-10641 | High | 8.1 | 2018-05-04 | D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext. |
CVE-2018-10562 | Critical | 9.8 | 2018-05-04 | An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Fo… |
CVE-2018-10561 | Critical | 9.8 | 2018-05-04 | An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that require… |
CVE-2018-10722 | High | 7.8 | 2018-05-04 | In Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges because users have Modify access to the %PROGRAMFILES%\Cylance\D… |
CVE-2018-8003 | Medium | 5.3 | 2018-05-03 | Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides… |
CVE-2018-10718 | Critical | 10.0 | 2018-05-03 | Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute arbitrary code via c… |
CVE-2018-10168 | High | 8.8 | 2018-05-03 | TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-privilege u… |
CVE-2018-10167 | High | 7.5 | 2018-05-03 | The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows is encrypted with a hard-coded cryptogr… |
CVE-2018-10166 | High | 8.8 | 2018-05-03 | The web management interface in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows does not have Anti-CSRF tokens in any form… |
CVE-2018-10165 | Medium | 5.4 | 2018-05-03 | Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated at… |
CVE-2018-10164 | Medium | 5.4 | 2018-05-03 | Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated at… |
CVE-2018-10717 | High | 8.8 | 2018-05-03 | The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of the pixels data structure, which allows remote attackers to caus… |
CVE-2018-10716 | Medium | 5.5 | 2018-05-03 | An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended proc… |
CVE-2018-10713 | High | 8.8 | 2018-05-03 | An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binar… |
CVE-2018-4849 | High | 7.4 | 2018-05-03 | A vulnerability has been identified in Siveillance VMS Video for Android (All versions < V12.1a (2018 R1)), Siveillance VMS Video for iOS (All versions < V12.1… |
CVE-2018-10689 | Medium | 5.5 | 2018-05-03 | blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because th… |
CVE-2018-10666 | High | 7.5 | 2018-05-03 | The Owned smart contract implementation for Aurora IDEX Membership (IDXM), an Ethereum ERC20 token, allows attackers to acquire contract ownership because the… |
CVE-2018-10685 | Critical | 9.8 | 2018-05-02 | In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the lzma_decompress_buf function of stream.c, which allows remote attackers to cause a denial… |
CVE-2018-0288 | Medium | 5.3 | 2018-05-02 | A vulnerability in Cisco WebEx Recording Format (WRF) Player could allow an unauthenticated, remote attacker to access sensitive data about the application. An… |
CVE-2018-0287 | High | 8.8 | 2018-05-02 | A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker to execut… |
CVE-2018-0286 | Medium | 5.3 | 2018-05-02 | A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… |
CVE-2018-0285 | Medium | 6.5 | 2018-05-02 | A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny service to the user interface. The vul… |
CVE-2018-0283 | Medium | 5.8 | 2018-05-02 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort… |
CVE-2018-0281 | Medium | 5.8 | 2018-05-02 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort… |
CVE-2018-0278 | Medium | 6.5 | 2018-05-02 | A vulnerability in the management console of Cisco Firepower System Software could allow an unauthenticated, remote attacker to access sensitive data about the… |
CVE-2018-0264 | Critical | 9.6 | 2018-05-02 | A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker to execut… |
CVE-2018-0262 | High | 8.1 | 2018-05-02 | A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to components of, or sensitive information… |
CVE-2018-0258 | Critical | 9.8 | 2018-05-02 | A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directo… |
CVE-2018-0253 | Critical | 9.8 | 2018-05-02 | A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary co… |
CVE-2018-0252 | High | 8.6 | 2018-05-02 | A vulnerability in the IP Version 4 (IPv4) fragment reassembly function of Cisco 3500, 5500, and 8500 Series Wireless LAN Controller Software could allow an un… |
CVE-2018-0250 | Medium | 4.1 | 2018-05-02 | A vulnerability in Central Web Authentication (CWA) with FlexConnect Access Points (APs) for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800… |
CVE-2018-0249 | Medium | 4.3 | 2018-05-02 | A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point (APs) on Qualcomm Atheros (QCA) based hardware pl… |
CVE-2018-0247 | Medium | 4.7 | 2018-05-02 | A vulnerability in Web Authentication (WebAuth) clients for the Cisco Wireless LAN Controller (WLC) and Aironet Access Points running Cisco IOS Software could… |
CVE-2018-0245 | Medium | 5.3 | 2018-05-02 | A vulnerability in the REST API of Cisco 5500 and 8500 Series Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view sy… |
CVE-2018-0235 | High | 7.4 | 2018-05-02 | A vulnerability in the 802.11 frame validation functionality of the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to ca… |
CVE-2018-0234 | High | 8.6 | 2018-05-02 | A vulnerability in the implementation of Point-to-Point Tunneling Protocol (PPTP) functionality in Cisco Aironet 1810, 1830, and 1850 Series Access Points coul… |
CVE-2018-0226 | High | 7.5 | 2018-05-02 | A vulnerability in the assignment and management of default user accounts for Secure Shell (SSH) access to Cisco Aironet 1800, 2800, and 3800 Series Access Poi… |
CVE-2018-9919 | Critical | 9.8 | 2018-05-02 | A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive information, attack in… |
CVE-2018-8900 | Medium | 6.1 | 2018-05-02 | The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web… |
CVE-2018-10578 | Critical | 9.8 | 2018-05-02 | An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. Incorrect… |
CVE-2018-10577 | High | 8.8 | 2018-05-02 | An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. File uplo… |
CVE-2018-10568 | Medium | 6.1 | 2018-05-02 | XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7. |
CVE-2018-10567 | Medium | 6.1 | 2018-05-02 | XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7. |
CVE-2018-10566 | Medium | 6.1 | 2018-05-02 | XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7. |
CVE-2018-10565 | Medium | 6.1 | 2018-05-02 | XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7. |
CVE-2018-10564 | Medium | 6.1 | 2018-05-02 | XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7. |
CVE-2018-10563 | Medium | 6.1 | 2018-05-02 | An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7). |
CVE-2018-10294 | Medium | 6.1 | 2018-05-02 | Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS. |
CVE-2018-10115 | High | 7.8 | 2018-05-02 | Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a… |
CVE-2018-8115 | High | 8.6 | 2018-05-02 | A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to properly validate input while importing a co… |
CVE-2018-1104 | High | 8.8 | 2018-05-02 | Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on… |
CVE-2018-10680 | Medium | 6.1 | 2018-05-02 | Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web site settings --> Basic setting --> Websi… |
CVE-2018-10677 | High | 8.8 | 2018-05-02 | The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial o… |
CVE-2018-1101 | High | 7.2 | 2018-05-02 | Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administ… |
CVE-2018-10676 | Critical | 9.8 | 2018-05-02 | CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential informatio… |
CVE-2018-10675 | High | 7.8 | 2018-05-02 | The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly… |
CVE-2018-10665 | Medium | 6.1 | 2018-05-02 | ILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third-party demo files. |
CVE-2018-10657 | High | 7.5 | 2018-05-02 | Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to feder… |
CVE-2018-9302 | Critical | 9.1 | 2018-05-02 | SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read arbitrary files or send TCP traffic… |
CVE-2018-5520 | Medium | 4.4 | 2018-05-02 | On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell (tmsh) may allow an administrative use… |
CVE-2018-5519 | Medium | 4.9 | 2018-05-02 | On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldump utility to write… |
CVE-2018-5518 | Medium | 5.4 | 2018-05-02 | On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests run… |
CVE-2018-5517 | High | 7.5 | 2018-05-02 | On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plan… |
CVE-2018-5516 | Medium | 4.7 | 2018-05-02 | On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and… |
CVE-2018-5515 | Medium | 4.4 | 2018-05-02 | On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover even… |