2018 CVEs (page 132)
Page 132 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-8974 | High | 7.8 | 2018-04-26 | Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV f… |
CVE-2018-10424 | Low | 2.7 | 2018-04-26 | mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field. |
CVE-2018-10423 | Low | 2.7 | 2018-04-26 | mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes avai… |
CVE-2018-10422 | Medium | 4.8 | 2018-04-26 | An issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content field. |
CVE-2018-10393 | High | 7.5 | 2018-04-26 | bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. |
CVE-2018-10392 | High | 8.8 | 2018-04-26 | mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service… |
CVE-2018-10391 | Medium | 4.8 | 2018-04-26 | An issue was discovered in WUZHI CMS 4.1.0. There is XSS via the email parameter to the index.php?m=member&v=register URI. |
CVE-2018-10381 | Critical | 9.8 | 2018-04-26 | TunnelBear 3.2.0.6 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "TunnelBearMaintenance" service. This service establishes a… |
CVE-2018-8837 | High | 7.8 | 2018-04-25 | Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area a… |
CVE-2018-8835 | High | 7.8 | 2018-04-25 | Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code exec… |
CVE-2018-8833 | High | 7.8 | 2018-04-25 | Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow r… |
CVE-2018-5486 | High | 7.8 | 2018-04-25 | NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled which allows unauthorized local attack… |
CVE-2018-5226 | High | 8.8 | 2018-04-25 | There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permiss… |
CVE-2018-1339 | Medium | 5.5 | 2018-04-25 | A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18. |
CVE-2018-1338 | Medium | 5.5 | 2018-04-25 | A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18. |
CVE-2018-1335 | High | 8.1 | 2018-04-25 | From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line… |
CVE-2018-9104 | Medium | 6.1 | 2018-04-25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (1… |
CVE-2018-9103 | Medium | 6.1 | 2018-04-25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (1… |
CVE-2018-9102 | Medium | 6.5 | 2018-04-25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (1… |
CVE-2018-9101 | Medium | 6.1 | 2018-04-25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (1… |
CVE-2018-8716 | Medium | 5.4 | 2018-04-25 | WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers. |
CVE-2018-10213 | Medium | 5.4 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is XSS in invitation mail received from a different user, who can modify the HTML i… |
CVE-2018-10212 | Medium | 5.4 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via… |
CVE-2018-10211 | Medium | 5.3 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "… |
CVE-2018-10210 | Medium | 5.3 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. Enumeration of users is possible through the password-reset feature. |
CVE-2018-10209 | Medium | 5.4 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the file or folder download pop-up via a crafted file or folder na… |
CVE-2018-10208 | Medium | 6.1 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is anonymous reflected XSS on the error page via a /share/error?message= URI. |
CVE-2018-10207 | Medium | 5.3 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and expo… |
CVE-2018-10206 | Medium | 5.4 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS via the optional message field of a file request. |
CVE-2018-1363 | Medium | 5.4 | 2018-04-25 | IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr… |
CVE-2018-1112 | High | 8.0 | 2018-04-25 | glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from an… |
CVE-2018-8801 | Medium | 6.5 | 2018-04-25 | GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component. |
CVE-2018-10376 | High | 7.5 | 2018-04-25 | An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh (aka SMT), an Ethereum ERC20 token, allows attackers to acco… |
CVE-2018-10375 | Critical | 9.8 | 2018-04-25 | A file uploading vulnerability exists in /include/helpers/upload.helper.php in DedeCMS V5.7 SP2, which can be utilized by attackers to upload and execute arbit… |
CVE-2018-10374 | Medium | 6.1 | 2018-04-25 | EasyCMS 1.3 has XSS via the s POST parameter (aka a search box value) in an index.php?s=/index/search/index.html request. |
CVE-2018-10373 | Medium | 6.5 | 2018-04-25 | concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a d… |
CVE-2018-10372 | Medium | 5.5 | 2018-04-25 | process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) vi… |
CVE-2018-10368 | Medium | 4.8 | 2018-04-25 | An issue was discovered in WUZHI CMS 4.1.0. The "Extension Module -> System Announcement" feature has Stored XSS via an announcement. |
CVE-2018-10367 | Medium | 4.8 | 2018-04-25 | An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section. |
CVE-2018-10366 | Medium | 6.1 | 2018-04-25 | An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the name field. |
CVE-2018-10310 | Medium | 5.4 | 2018-04-25 | A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3.10 for WordPress t… |
CVE-2018-10362 | Critical | 9.8 | 2018-04-25 | An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with '==' instead of '===' in classes/Authorization.php for the user-pro… |
CVE-2018-10361 | High | 7.8 | 2018-04-25 | An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauth_ktexteditor_helper service (as ut… |
CVE-2018-3836 | High | 7.8 | 2018-04-24 | An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can caus… |
CVE-2018-1059 | Medium | 6.1 | 2018-04-24 | The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addr… |
CVE-2018-4832 | High | 7.5 | 2018-04-24 | A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), Ope… |
CVE-2018-7932 | High | 8.8 | 2018-04-24 | Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running vulnerability. An attacker may set up a malicious network environment and trick… |
CVE-2018-7931 | Medium | 4.3 | 2018-04-24 | Huawei AppGallery versions before 8.0.4.301 has a whitelist mechanism bypass vulnerability. An attacker may set up a malicious network environment and trick us… |
CVE-2018-5228 | Medium | 6.1 | 2018-04-24 | The /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross sit… |
CVE-2018-7751 | Medium | 6.5 | 2018-04-24 | The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML… |
CVE-2018-10329 | Medium | 6.1 | 2018-04-24 | app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter. |
CVE-2018-10328 | High | 7.4 | 2018-04-24 | Momentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account, which allows remote attackers to view the RTSP video stream. |
CVE-2018-10323 | Medium | 5.5 | 2018-04-24 | The xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_bmap… |
CVE-2018-10322 | Medium | 5.5 | 2018-04-24 | The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_a… |
CVE-2018-10321 | Medium | 4.8 | 2018-04-24 | Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings. |
CVE-2018-10320 | Medium | 4.8 | 2018-04-24 | Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout. |
CVE-2018-10319 | Medium | 4.8 | 2018-04-24 | Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet. |
CVE-2018-10318 | Medium | 4.8 | 2018-04-24 | Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata. |
CVE-2018-10316 | Medium | 5.5 | 2018-04-24 | Netwide Assembler (NASM) 2.14rc0 has an endless while loop in the assemble_file function of asm/nasm.c because of a globallineno integer overflow. |
CVE-2018-10313 | Medium | 5.4 | 2018-04-24 | WUZHI CMS 4.1.0 allows persistent XSS via the form%5Bqq_10%5D parameter to the /index.php?m=member&f=index&v=profile&set_iframe=1 URI. |
CVE-2018-10312 | High | 8.8 | 2018-04-24 | index.php?m=member&v=pw_reset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common member. |
CVE-2018-10311 | Medium | 6.1 | 2018-04-24 | A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tag[piny… |
CVE-2018-10309 | Medium | 5.4 | 2018-04-24 | The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS. |
CVE-2018-10305 | Critical | 9.8 | 2018-04-24 | The MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15 does not properly use the possible_users variable in a query, w… |
CVE-2018-6491 | High | 8.1 | 2018-04-24 | Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability c… |
CVE-2018-10303 | High | 8.8 | 2018-04-23 | A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y0nqfutlf3. |
CVE-2018-1106 | Medium | 5.5 | 2018-04-23 | An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local… |
CVE-2018-8781 | High | 7.8 | 2018-04-23 | The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability all… |
CVE-2018-10302 | High | 7.8 | 2018-04-23 | A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-jyb51g3mv9. |
CVE-2018-9921 | Medium | 5.3 | 2018-04-23 | In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the web-site installation d… |
CVE-2018-8880 | High | 7.5 | 2018-04-23 | Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to… |
CVE-2018-10301 | Medium | 6.1 | 2018-04-23 | Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitr… |
CVE-2018-10300 | Medium | 6.1 | 2018-04-23 | Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web… |
CVE-2018-4847 | Medium | 4.6 | 2018-04-23 | A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions < V1.4). Insufficient protection of sensitive information (e.g. session… |
CVE-2018-3850 | High | 8.8 | 2018-04-23 | An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF documen… |
CVE-2018-10234 | Medium | 4.8 | 2018-04-23 | Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input fiel… |
CVE-2018-10233 | High | 8.8 | 2018-04-23 | The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a structural… |
CVE-2018-10299 | High | 7.5 | 2018-04-23 | An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), the Ethereum ERC20 token used in the Beau… |
CVE-2018-10298 | Medium | 5.4 | 2018-04-22 | Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the co… |
CVE-2018-10297 | Medium | 5.4 | 2018-04-22 | Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote image… |
CVE-2018-10296 | Medium | 6.1 | 2018-04-22 | MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter. |
CVE-2018-10295 | High | 8.8 | 2018-04-22 | ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account. |
CVE-2018-9245 | Critical | 9.8 | 2018-04-22 | The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that allows users to bypass the login page an… |
CVE-2018-10286 | High | 8.8 | 2018-04-22 | The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to lo… |
CVE-2018-10285 | Critical | 9.8 | 2018-04-22 | The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might… |
CVE-2018-10289 | Medium | 5.5 | 2018-04-22 | In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to ca… |
CVE-2018-10268 | Medium | 5.4 | 2018-04-22 | An issue was discovered in FastAdmin V1.0.0.20180417_beta. There is XSS via the application\api\controller\User.php avatar parameter. |
CVE-2018-10267 | High | 8.8 | 2018-04-22 | WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=add_post URI. |
CVE-2018-10266 | High | 8.8 | 2018-04-22 | BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI. |
CVE-2018-10265 | High | 8.8 | 2018-04-22 | An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI. |
CVE-2018-10126 | Medium | 6.5 | 2018-04-21 | ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdcti… |
CVE-2018-10284 | Critical | 9.8 | 2018-04-21 | Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp eve_cod parameter. |
CVE-2018-10283 | Critical | 9.8 | 2018-04-21 | CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action. |
CVE-2018-10254 | High | 7.8 | 2018-04-21 | Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this vulne… |
CVE-2018-10253 | High | 7.5 | 2018-04-21 | Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls. |
CVE-2018-9059 | Critical | 9.8 | 2018-04-20 | Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum… |
CVE-2018-7747 | Medium | 4.8 | 2018-04-20 | Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web… |
CVE-2018-10176 | Medium | 6.5 | 2018-04-20 | Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue. |
CVE-2018-10175 | Medium | 6.5 | 2018-04-20 | Digital Guardian Management Console 7.1.2.0015 has an XXE issue. |
CVE-2018-10174 | Medium | 6.5 | 2018-04-20 | Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to int… |