2018 CVEs (page 135)
Page 135 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-2746 | High | 7.1 | 2018-04-19 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-2742 | High | 7.3 | 2018-04-19 | Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Framework). Supported versions that are… |
CVE-2018-2739 | Critical | 9.3 | 2018-04-19 | Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10… |
CVE-2018-2738 | Medium | 6.5 | 2018-04-19 | Vulnerability in the Oracle Retail Central Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13… |
CVE-2018-2737 | Medium | 6.5 | 2018-04-19 | Vulnerability in the Oracle Retail Returns Management component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected ar… |
CVE-2018-2718 | High | 7.5 | 2018-04-19 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). Supported versions that are affected are 10 and 11.3. Easily e… |
CVE-2018-2628 | Critical | 9.8 | 2018-04-19 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are… |
CVE-2018-2587 | Medium | 6.5 | 2018-04-19 | Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10… |
CVE-2018-2572 | Medium | 6.1 | 2018-04-19 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: Installation). Suppor… |
CVE-2018-2563 | Medium | 4.2 | 2018-04-19 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Library). Supported versions that are affected are 10 and 11.3… |
CVE-2018-1167 | High | 8.8 | 2018-04-19 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Spotify Music Player 1.0.69.336. User interaction is requir… |
CVE-2018-1035 | Medium | 5.3 | 2018-04-19 | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerabil… |
CVE-2018-10204 | High | 8.8 | 2018-04-18 | PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, t… |
CVE-2018-10194 | High | 7.8 | 2018-04-18 | The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-po… |
CVE-2018-10110 | Medium | 4.8 | 2018-04-18 | D-Link DIR-615 T1 devices allow XSS via the Add User feature. |
CVE-2018-8840 | Critical | 9.8 | 2018-04-18 | A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior vers… |
CVE-2018-7762 | High | 7.5 | 2018-04-18 | A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 whic… |
CVE-2018-7761 | Critical | 9.8 | 2018-04-18 | A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbi… |
CVE-2018-7760 | Critical | 9.8 | 2018-04-18 | An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions… |
CVE-2018-7759 | High | 7.5 | 2018-04-18 | A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerabilit… |
CVE-2018-7758 | Medium | 6.5 | 2018-04-18 | A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Eth… |
CVE-2018-7246 | Critical | 9.8 | 2018-04-18 | A cleartext transmission of sensitive information vulnerability exists in Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UP… |
CVE-2018-7245 | Critical | 9.1 | 2018-04-18 | An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integ… |
CVE-2018-7244 | Medium | 5.3 | 2018-04-18 | An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integ… |
CVE-2018-7243 | Critical | 9.8 | 2018-04-18 | An authorization bypass vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integra… |
CVE-2018-7242 | Critical | 9.8 | 2018-04-18 | Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the com… |
CVE-2018-7241 | Critical | 9.8 | 2018-04-18 | Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communicati… |
CVE-2018-7240 | High | 8.8 | 2018-04-18 | A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP… |
CVE-2018-1325 | Medium | 6.1 | 2018-04-18 | In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display. |
CVE-2018-1000167 | High | 7.8 | 2018-04-18 | OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: conf… |
CVE-2018-1000165 | High | 7.5 | 2018-04-18 | LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can… |
CVE-2018-1000164 | High | 7.5 | 2018-04-18 | gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/… |
CVE-2018-1000163 | Medium | 6.1 | 2018-04-18 | Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript injections into the web… |
CVE-2018-1000162 | Medium | 6.1 | 2018-04-18 | Parsedown version prior to 1.7.0 contains a Cross Site Scripting (XSS) vulnerability in `setMarkupEscaped` for escaping HTML that can result in JavaScript code… |
CVE-2018-1000161 | Medium | 5.7 | 2018-04-18 | nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can resu… |
CVE-2018-1000160 | Medium | 6.1 | 2018-04-18 | RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in isXss() function in lib/rules/xss.js that can result in da… |
CVE-2018-1000159 | Medium | 5.9 | 2018-04-18 | tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vu… |
CVE-2018-1000158 | High | 8.8 | 2018-04-18 | cmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of send_recovery_email in the line "$url = $config['admin_url']… |
CVE-2018-8831 | Medium | 6.1 | 2018-04-18 | A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim… |
CVE-2018-1274 | High | 7.5 | 2018-04-18 | Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited r… |
CVE-2018-1240 | High | 8.0 | 2018-04-18 | Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Lin… |
CVE-2018-1088 | High | 8.1 | 2018-04-18 | A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster st… |
CVE-2018-6413 | High | 7.5 | 2018-04-18 | There is a buffer overflow in the Hikvision Camera DS-2CD9111-S of V4.1.2 build 160203 and before, and this vulnerability allows remote attackers to launch a d… |
CVE-2018-10199 | Critical | 9.8 | 2018-04-18 | In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::File#initilialize_copy(). An attacker that can cause Ruby co… |
CVE-2018-9999 | Medium | 5.4 | 2018-04-18 | In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the (default) LOCAL_UPLOADS_DIR storage backend. |
CVE-2018-9990 | Medium | 6.1 | 2018-04-18 | In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead. |
CVE-2018-9987 | Medium | 6.1 | 2018-04-18 | In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications. |
CVE-2018-9986 | Medium | 6.1 | 2018-04-18 | In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor. |
CVE-2018-8092 | Critical | 9.8 | 2018-04-18 | Mautic before 2.13.0 allows CSV injection. |
CVE-2018-8071 | Medium | 6.1 | 2018-04-18 | Mautic before v2.13.0 has stored XSS via a theme config file. |
CVE-2018-5342 | High | 7.2 | 2018-04-18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: network services (Desktop Central and PostgreSQL) running with a superuser… |
CVE-2018-5341 | Critical | 9.8 | 2018-04-18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: a missing server-side check on the file type/extension when uploading and m… |
CVE-2018-5340 | High | 7.2 | 2018-04-18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: database access using a superuser account (specifically, an account with pe… |
CVE-2018-5339 | Critical | 9.8 | 2018-04-18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: insufficient enforcement of database query type restrictions. |
CVE-2018-5338 | Critical | 9.8 | 2018-04-18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: missing authentication/authorization for a database query mechanism. |
CVE-2018-5337 | Critical | 9.8 | 2018-04-18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: directory traversal in the SCRIPT_NAME field when modifying existing script… |
CVE-2018-8736 | High | 8.8 | 2018-04-18 | A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escalating to root. |
CVE-2018-8735 | High | 8.8 | 2018-04-18 | Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target syst… |
CVE-2018-8734 | Critical | 9.8 | 2018-04-18 | SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via… |
CVE-2018-8733 | Critical | 9.8 | 2018-04-18 | Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make config… |
CVE-2018-10193 | High | 7.5 | 2018-04-18 | LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of on… |
CVE-2018-8838 | Medium | 6.5 | 2018-04-17 | A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier… |
CVE-2018-10192 | Critical | 9.8 | 2018-04-17 | IPVanish 3.0.11 for macOS suffers from a root privilege escalation vulnerability. The `com.ipvanish.osx.vpnhelper` LaunchDaemon implements an insecure XPC serv… |
CVE-2018-10191 | Critical | 9.8 | 2018-04-17 | In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the presence of deep scope n… |
CVE-2018-7539 | Critical | 9.8 | 2018-04-17 | On Appear TV XC5000 and XC5100 devices with firmware 3.26.217, it is possible to read OS files with a specially crafted HTTP request (such as GET /../../../../… |
CVE-2018-6913 | Critical | 9.8 | 2018-04-17 | Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count. |
CVE-2018-6798 | High | 7.5 | 2018-04-17 | An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potential… |
CVE-2018-6797 | Critical | 9.8 | 2018-04-17 | An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written. |
CVE-2018-10190 | High | 7.8 | 2018-04-17 | A vulnerability in London Trust Media Private Internet Access (PIA) VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable… |
CVE-2018-10189 | High | 7.5 | 2018-04-17 | An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact… |
CVE-2018-10187 | Medium | 5.5 | 2018-04-17 | In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this vulnerabil… |
CVE-2018-10186 | Medium | 5.5 | 2018-04-17 | In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c). Remote attackers could leverage this vulnerability to… |
CVE-2018-8834 | High | 7.8 | 2018-04-17 | Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol ve… |
CVE-2018-7530 | High | 7.8 | 2018-04-17 | Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol ve… |
CVE-2018-7514 | High | 7.8 | 2018-04-17 | Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol ve… |
CVE-2018-10185 | High | 8.8 | 2018-04-17 | An issue was discovered in TuziCMS v2.0.6. There is a CSRF vulnerability that can add an admin account, as demonstrated by a history.pushState call. |
CVE-2018-5431 | Medium | 6.3 | 2018-04-17 | The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for… |
CVE-2018-5430 | High | 8.8 | 2018-04-17 | The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMa… |
CVE-2018-5429 | High | 8.8 | 2018-04-17 | A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO Jasp… |
CVE-2018-1445 | Medium | 5.4 | 2018-04-17 | IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c… |
CVE-2018-1371 | Medium | 6.5 | 2018-04-17 | An IBM WebSphere MQ 8.0.0.8, 9.0.0.2, and 9.0.4 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. IBM… |
CVE-2018-10183 | Medium | 6.1 | 2018-04-17 | An issue was discovered in BigTree 4.2.22. There is cross-site scripting (XSS) in /core/inc/lib/less.php/test/index.php because of a $_SERVER['REQUEST_URI'] ec… |
CVE-2018-5190 | Critical | 9.8 | 2018-04-17 | PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pc_… |
CVE-2018-10178 | Medium | 5.3 | 2018-04-17 | The FromDocToPDF extension before 13.611.13.2303 for Chrome allows remote attackers to discover visited web sites via vectors involving a mostVisitedSites comm… |
CVE-2018-10177 | Medium | 6.5 | 2018-04-16 | In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability… |
CVE-2018-10172 | High | 8.8 | 2018-04-16 | 7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privileg… |
CVE-2018-10170 | Critical | 9.8 | 2018-04-16 | NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-service" service. This service establishes an NetNam… |
CVE-2018-10169 | Critical | 9.8 | 2018-04-16 | ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Service" service. This service establishes an NetNa… |
CVE-2018-10070 | High | 7.5 | 2018-04-16 | A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a craft… |
CVE-2018-10138 | Medium | 6.1 | 2018-04-16 | The CATALooK.netStore module through 7.2.8 for DNN (formerly DotNetNuke) allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /Ima… |
CVE-2018-10137 | High | 8.8 | 2018-04-16 | iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI. |
CVE-2018-10136 | Medium | 6.1 | 2018-04-16 | iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI. |
CVE-2018-10135 | Medium | 6.1 | 2018-04-16 | iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel. |
CVE-2018-0737 | Medium | 5.9 | 2018-04-16 | The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cac… |
CVE-2018-3849 | High | 8.8 | 2018-04-16 | In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data… |
CVE-2018-3848 | High | 8.8 | 2018-04-16 | In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data… |
CVE-2018-3846 | High | 8.8 | 2018-04-16 | In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting ar… |
CVE-2018-10133 | Critical | 9.8 | 2018-04-16 | PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel function in \app… |
CVE-2018-10132 | High | 8.8 | 2018-04-16 | PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the recontent parameter. |
CVE-2018-10128 | Medium | 6.1 | 2018-04-16 | An issue was discovered in XYHCMS 3.5. It has XSS via the test parameter to index.php. |