2018 CVEs (page 131)
Page 131 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-5514 | High | 7.5 | 2018-05-02 | On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when th… |
CVE-2018-5512 | High | 7.5 | 2018-05-02 | On F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload (LRO) and SYN cookies are enabled (default settings), undisclosed traffic patterns may cause TMM to re… |
CVE-2018-1468 | Medium | 4.3 | 2018-05-02 | IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details to which they are not authorized. IBM X-… |
CVE-2018-6401 | Critical | 9.8 | 2018-05-02 | Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password. |
CVE-2018-10647 | High | 7.8 | 2018-05-02 | SaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "SaferVPN.Service" service. The "SaferVPN.Service" service executes… |
CVE-2018-10646 | High | 7.8 | 2018-05-02 | CyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "CG6Service" service. This service establishes a NetName… |
CVE-2018-10645 | High | 7.8 | 2018-05-02 | Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "VyprVPN" service. This service establishes a… |
CVE-2018-10642 | High | 7.2 | 2018-05-02 | Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configu… |
CVE-2018-10544 | Critical | 9.8 | 2018-05-02 | Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface. |
CVE-2018-6242 | Medium | 6.8 | 2018-05-01 | Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attacker with physical ac… |
CVE-2018-10260 | High | 8.8 | 2018-05-01 | A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user. |
CVE-2018-10259 | Medium | 5.4 | 2018-05-01 | An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user. |
CVE-2018-10258 | High | 8.8 | 2018-05-01 | A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to inject a command that will be included… |
CVE-2018-10257 | High | 8.8 | 2018-05-01 | A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be in… |
CVE-2018-10256 | High | 8.8 | 2018-05-01 | A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query. |
CVE-2018-10255 | High | 8.8 | 2018-05-01 | A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will b… |
CVE-2018-9336 | High | 7.8 | 2018-05-01 | openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malfor… |
CVE-2018-9232 | High | 7.8 | 2018-05-01 | Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as… |
CVE-2018-6589 | High | 7.5 | 2018-05-01 | CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors. |
CVE-2018-8939 | Critical | 9.8 | 2018-05-01 | An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI exe… |
CVE-2018-8938 | Critical | 9.8 | 2018-05-01 | A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can inject a specially crafted SNMP… |
CVE-2018-10583 | High | 7.5 | 2018-05-01 | An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection e… |
CVE-2018-10365 | Medium | 5.4 | 2018-05-01 | An XSS issue was discovered in the Threads to Link plugin 1.3 for MyBB. When editing a thread, the user is given the option to convert the thread to a link. Th… |
CVE-2018-1502 | Medium | 5.4 | 2018-05-01 | IBM Content Manager Enterprise Edition Resource Manager 8.4.3 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary… |
CVE-2018-10581 | Medium | 5.4 | 2018-05-01 | In Octopus Deploy 3.4.x before 2018.4.7, an authenticated user is able to view/update/save variable values within the Tenant Variables area for Environments th… |
CVE-2018-10371 | Medium | 6.1 | 2018-05-01 | An issue was discovered in the wunderfarm WF Cookie Consent plugin 1.1.3 for WordPress. A persistent cross-site scripting vulnerability has been identified in… |
CVE-2018-10576 | High | 7.8 | 2018-04-30 | An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the native Access Poin… |
CVE-2018-10575 | Critical | 9.8 | 2018-04-30 | An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentials exist for an unprivileged SSH accoun… |
CVE-2018-1000172 | Medium | 4.8 | 2018-04-30 | Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exp… |
CVE-2018-10364 | Medium | 5.4 | 2018-04-30 | BigTree before 4.2.22 has XSS in the Users management page via the name or company field. |
CVE-2018-1277 | Medium | 6.5 | 2018-04-30 | Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an ap… |
CVE-2018-1183 | Critical | 9.8 | 2018-04-30 | In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.8, Dell EMC VA… |
CVE-2018-10574 | Critical | 9.8 | 2018-04-30 | site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class… |
CVE-2018-1102 | High | 8.8 | 2018-04-30 | A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReade… |
CVE-2018-5234 | High | 8.0 | 2018-04-30 | The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary co… |
CVE-2018-9310 | High | 7.8 | 2018-04-30 | An issue was discovered in MagniComp SysInfo before 10-H82 if setuid root (the default). This vulnerability allows any local user on a Linux/UNIX system to run… |
CVE-2018-10573 | High | 8.8 | 2018-04-30 | interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter. |
CVE-2018-10572 | Medium | 6.5 | 2018-04-30 | interface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the newtemplatename and… |
CVE-2018-10571 | Medium | 6.1 | 2018-04-30 | Multiple reflected cross-site scripting (XSS) vulnerabilities in OpenEMR before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1)… |
CVE-2018-10570 | Medium | 4.8 | 2018-04-30 | Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field. |
CVE-2018-8839 | High | 7.8 | 2018-04-30 | Delta PMSoft versions 2.10 and prior have multiple stack-based buffer overflow vulnerabilities where a .ppm file can introduce a value larger than is readable… |
CVE-2018-7891 | High | 8.1 | 2018-04-30 | The Milestone XProtect Video Management Software (Corporate, Expert, Professional+, Express+, Essential+) 2016 R1 (10.0.a) to 2018 R1 (12.1a) contains .NET Rem… |
CVE-2018-7901 | Medium | 4.4 | 2018-04-30 | RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129… |
CVE-2018-1430 | Medium | 5.4 | 2018-04-30 | IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2018-1389 | Medium | 6.5 | 2018-04-30 | IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using the BelongsTo/HasMany relationship allowing unauthorized modif… |
CVE-2018-0711 | Medium | 6.1 | 2018-04-30 | Cross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315, and their earlier versions could allow remote attackers to… |
CVE-2018-10550 | High | 7.5 | 2018-04-30 | In Octopus Deploy before 2018.4.7, target and tenant tag variable scopes were not checked against the list of tenants the user has access to. |
CVE-2018-10554 | Medium | 5.4 | 2018-04-30 | An issue was discovered in Nagios XI 5.4.13. There is XSS exploitable via CSRF in (1) the Schedule New Report screen via the hour, minute, or ampm parameter, r… |
CVE-2018-10553 | Medium | 6.5 | 2018-04-30 | An issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal to read local files, as demonstrated by URIs beginning with i… |
CVE-2018-10549 | High | 8.8 | 2018-04-29 | An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has an out-of… |
CVE-2018-10548 | High | 7.5 | 2018-04-29 | An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to c… |
CVE-2018-10547 | Medium | 6.1 | 2018-04-29 | An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XS… |
CVE-2018-10546 | High | 7.5 | 2018-04-29 | An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c be… |
CVE-2018-10545 | Medium | 4.7 | 2018-04-29 | An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing op… |
CVE-2018-9845 | Critical | 9.8 | 2018-04-29 | Etherpad Lite before 1.6.4 is exploitable for admin access. |
CVE-2018-10540 | Medium | 5.5 | 2018-04-29 | An issue was discovered in WavPack 5.1.0 and earlier for W64 input. Out-of-bounds writes can occur because ParseWave64HeaderConfig in wave64.c does not validat… |
CVE-2018-10539 | Medium | 5.5 | 2018-04-29 | An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input. Out-of-bounds writes can occur because ParseDsdiffHeaderConfig in dsdiff.c does not vali… |
CVE-2018-10538 | Medium | 5.5 | 2018-04-29 | An issue was discovered in WavPack 5.1.0 and earlier for WAV input. Out-of-bounds writes can occur because ParseRiffHeaderConfig in riff.c does not validate th… |
CVE-2018-10537 | High | 7.8 | 2018-04-29 | An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser component contains a vulnerability that allows writing to memory because ParseWave64Header… |
CVE-2018-10536 | High | 7.8 | 2018-04-29 | An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderCo… |
CVE-2018-10535 | Medium | 5.5 | 2018-04-29 | The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the o… |
CVE-2018-10534 | Medium | 5.5 | 2018-04-29 | The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2… |
CVE-2018-10529 | High | 8.8 | 2018-04-29 | An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx… |
CVE-2018-10528 | High | 8.8 | 2018-04-29 | An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in libraw_cxx.cpp. |
CVE-2018-10527 | Medium | 5.4 | 2018-04-28 | EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/inde… |
CVE-2018-10468 | High | 7.5 | 2018-04-28 | The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an Ethereum ERC20 token, allows attackers to steal assets (e.g… |
CVE-2018-10523 | Medium | 5.3 | 2018-04-27 | CMS Made Simple (CMSMS) through 2.2.7 contains a physical path leakage Vulnerability via /modules/DesignManager/action.ajax_get_templates.php, /modules/DesignM… |
CVE-2018-10522 | Medium | 4.9 | 2018-04-27 | In CMS Made Simple (CMSMS) through 2.2.7, the "file view" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploitab… |
CVE-2018-10521 | Low | 2.7 | 2018-04-27 | In CMS Made Simple (CMSMS) through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS… |
CVE-2018-10520 | Medium | 6.5 | 2018-04-27 | In CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause… |
CVE-2018-10519 | High | 8.8 | 2018-04-27 | CMS Made Simple (CMSMS) 2.2.7 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE… |
CVE-2018-10518 | Medium | 6.5 | 2018-04-27 | In CMS Made Simple (CMSMS) through 2.2.7, the "file delete" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause D… |
CVE-2018-10517 | High | 7.2 | 2018-04-27 | In CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard contains a remote code execution vulnerability, exploitable by a… |
CVE-2018-10516 | Medium | 6.5 | 2018-04-27 | In CMS Made Simple (CMSMS) through 2.2.7, the "file rename" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploit… |
CVE-2018-10515 | High | 7.2 | 2018-04-27 | In CMS Made Simple (CMSMS) through 2.2.7, the "file unpack" operation in the admin dashboard contains a remote code execution vulnerability exploitable by an a… |
CVE-2018-7669 | High | 7.5 | 2018-04-27 | An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal… |
CVE-2018-10504 | High | 7.8 | 2018-04-27 | The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection. |
CVE-2018-10503 | High | 8.8 | 2018-04-27 | An issue was discovered in index.php in baijiacms V4 v4_1_4_20170105. CSRF allows adding an administrator account via op=edituser, changing the administrator p… |
CVE-2018-1479 | High | 8.8 | 2018-04-27 | IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmi… |
CVE-2018-1475 | Critical | 9.8 | 2018-04-27 | IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force I… |
CVE-2018-1473 | Medium | 6.1 | 2018-04-27 | IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus al… |
CVE-2018-10472 | Medium | 5.6 | 2018-04-27 | An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion o… |
CVE-2018-10471 | Medium | 6.5 | 2018-04-27 | An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via u… |
CVE-2018-10469 | Critical | 9.8 | 2018-04-27 | b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI. |
CVE-2018-10237 | Medium | 5.9 | 2018-04-26 | Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that d… |
CVE-2018-7527 | Medium | 5.3 | 2018-04-26 | A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: Novemb… |
CVE-2018-3855 | High | 7.8 | 2018-04-26 | In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting… |
CVE-2018-3851 | High | 8.8 | 2018-04-26 | In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack-based buffer overflow exists in the DOC-to-HTML conversion func… |
CVE-2018-3845 | High | 8.8 | 2018-04-26 | In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting… |
CVE-2018-3844 | High | 8.8 | 2018-04-26 | In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted DOCX document can lead to a use-after-free resulting in direct code execut… |
CVE-2018-7465 | Medium | 5.4 | 2018-04-26 | An XSS issue was discovered in VirtueMart before 3.2.14. All the textareas in the backend of the plugin can be closed by simply adding </textarea> to the value… |
CVE-2018-1074 | High | 7.7 | 2018-04-26 | ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleart… |
CVE-2018-10431 | High | 7.2 | 2018-04-26 | D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen. |
CVE-2018-10430 | Medium | 4.8 | 2018-04-26 | An issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting->site setting" of admi… |
CVE-2018-10429 | Critical | 9.8 | 2018-04-26 | Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php. |
CVE-2018-8072 | High | 8.8 | 2018-04-26 | An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcam_cgi binary contains a stack-based… |
CVE-2018-6518 | Medium | 4.8 | 2018-04-26 | Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php. |
CVE-2018-1418 | High | 8.8 | 2018-04-26 | IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. IBM X-Force ID: 138824. |
CVE-2018-10425 | High | 7.8 | 2018-04-26 | An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended proc… |
CVE-2018-9113 | High | 7.8 | 2018-04-26 | Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV f… |