2018 CVEs (page 136)
Page 136 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-10127 | High | 8.8 | 2018-04-16 | An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage&m=Rbac&a=addUser request, resulting in addition of an account with the administrat… |
CVE-2018-5382 | Medium | 4.4 | 2018-04-16 | The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. Bouncy Castle releas… |
CVE-2018-10124 | Medium | 5.5 | 2018-04-16 | The kill_something_info function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local u… |
CVE-2018-0562 | High | 7.8 | 2018-04-16 | Untrusted search path vulnerability in Installer of SoundEngine Free ver.5.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an un… |
CVE-2018-0561 | High | 7.8 | 2018-04-16 | Untrusted search path vulnerability in The installer of PhishWall Client Internet Explorer edition Ver. 3.7.15 and earlier allows an attacker to gain privilege… |
CVE-2018-0560 | Medium | 6.5 | 2018-04-16 | Hatena Bookmark App for iOS Version 3.0 to 3.70 allows remote attackers to spoof the address bar via vectors related to URL display. |
CVE-2018-0551 | Medium | 5.4 | 2018-04-16 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified… |
CVE-2018-0550 | Medium | 4.3 | 2018-04-16 | Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors. |
CVE-2018-0549 | Medium | 5.4 | 2018-04-16 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified… |
CVE-2018-0548 | Medium | 4.3 | 2018-04-16 | Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors. |
CVE-2018-0533 | Medium | 4.9 | 2018-04-16 | Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified… |
CVE-2018-0532 | Low | 2.7 | 2018-04-16 | Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified… |
CVE-2018-0531 | Medium | 4.3 | 2018-04-16 | Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notific… |
CVE-2018-0530 | High | 8.8 | 2018-04-16 | SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. |
CVE-2018-9169 | Medium | 4.8 | 2018-04-16 | Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/plugin_edit.php app_id parameter. The component must be accessed directly by an administrator, or thr… |
CVE-2018-9153 | High | 7.2 | 2018-04-16 | The plugin upload component in Z-BlogPHP 1.5.1 allows remote attackers to execute arbitrary PHP code via the app_id parameter to zb_users/plugin/AppCentre/plug… |
CVE-2018-10122 | High | 7.5 | 2018-04-16 | QingDao Nature Easy Soft Chanzhi Enterprise Portal System (aka chanzhieps) pro1.6 allows remote attackers to read arbitrary files via directory traversal seque… |
CVE-2018-10121 | Medium | 4.8 | 2018-04-16 | plugins/box/pages/pages.admin.php in Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in… |
CVE-2018-10120 | High | 7.8 | 2018-04-16 | The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations… |
CVE-2018-10119 | High | 7.8 | 2018-04-16 | sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows… |
CVE-2018-10118 | Medium | 4.8 | 2018-04-16 | Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins/box/pages/pages.ad… |
CVE-2018-10117 | High | 8.8 | 2018-04-16 | An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an admin account via admincp.php?app=members&do=save&frame=iPHP. |
CVE-2018-10114 | High | 8.8 | 2018-04-16 | An issue was discovered in GEGL through 0.3.32. The gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c allows remote attackers to cause a… |
CVE-2018-10113 | High | 7.5 | 2018-04-16 | An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded memory allocation, leading to a denial of… |
CVE-2018-10112 | High | 8.8 | 2018-04-16 | An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to c… |
CVE-2018-10111 | High | 7.5 | 2018-04-16 | An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial… |
CVE-2018-10109 | Medium | 4.8 | 2018-04-16 | Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in… |
CVE-2018-10108 | Medium | 6.1 | 2018-04-16 | D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the Treturn parameter to /htdocs/webinc/js/bsc_sms_inbox… |
CVE-2018-10107 | Medium | 6.1 | 2018-04-16 | D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php. |
CVE-2018-10106 | Critical | 9.8 | 2018-04-16 | D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission bypass and information disclosure in /htdocs/web/get… |
CVE-2018-10102 | Medium | 6.1 | 2018-04-16 | Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag. |
CVE-2018-10101 | Medium | 6.1 | 2018-04-16 | Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server. |
CVE-2018-10100 | Medium | 6.1 | 2018-04-16 | Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS. |
CVE-2018-10097 | Medium | 6.1 | 2018-04-16 | XSS exists in Domain Trader 2.5.3 via the recoverlogin.php email_address parameter. |
CVE-2018-1000170 | Medium | 5.4 | 2018-04-16 | A cross-site scripting vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in confirmationList.jelly and stopButton.jelly that allows attac… |
CVE-2018-1000169 | Medium | 5.3 | 2018-04-16 | An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that… |
CVE-2018-4173 | Medium | 5.5 | 2018-04-13 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component… |
CVE-2018-6547 | Critical | 9.1 | 2018-04-13 | plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, contains an HTTP mes… |
CVE-2018-6546 | Critical | 9.8 | 2018-04-13 | plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, executes code at a u… |
CVE-2018-10096 | Medium | 4.8 | 2018-04-13 | joyplus-cms 1.6.0 has XSS via the device_name parameter in a manager/admin_ajax.php?action=save flag=add request. |
CVE-2018-6959 | Critical | 9.8 | 2018-04-13 | VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking o… |
CVE-2018-6958 | Medium | 6.1 | 2018-04-13 | VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. Exploitation of this… |
CVE-2018-5511 | High | 7.2 | 2018-04-13 | On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred… |
CVE-2018-5510 | High | 7.5 | 2018-04-13 | On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual servers. |
CVE-2018-5508 | Medium | 5.9 | 2018-04-13 | On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed… |
CVE-2018-5507 | High | 7.5 | 2018-04-13 | On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correct… |
CVE-2018-5506 | Critical | 9.8 | 2018-04-13 | In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible una… |
CVE-2018-10087 | Medium | 5.5 | 2018-04-13 | The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to c… |
CVE-2018-10066 | High | 8.1 | 2018-04-13 | An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of interc… |
CVE-2018-10086 | High | 7.2 | 2018-04-13 | CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the admin dashboard because the implementation uses "eval('function… |
CVE-2018-10085 | Critical | 9.8 | 2018-04-13 | CMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call in the _get_data function of \lib\classes\internal\class.Login… |
CVE-2018-10084 | High | 8.8 | 2018-04-13 | CMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within… |
CVE-2018-10083 | High | 7.5 | 2018-04-13 | CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val par… |
CVE-2018-10082 | Medium | 5.3 | 2018-04-13 | CMS Made Simple (CMSMS) through 2.2.7 allows physical path leakage via an invalid /index.php?page= value, a crafted URI starting with /index.php?mact=Search, o… |
CVE-2018-10081 | Critical | 9.8 | 2018-04-13 | CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beg… |
CVE-2018-10080 | High | 8.6 | 2018-04-13 | Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunc… |
CVE-2018-6935 | Medium | 5.4 | 2018-04-12 | PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to list_student.php. |
CVE-2018-6934 | High | 8.8 | 2018-04-12 | CSRF exists in student/personal-info in PHP Scripts Mall Online Tutoring Script 2.0.3. |
CVE-2018-6904 | Medium | 5.4 | 2018-04-12 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action. |
CVE-2018-6903 | High | 8.8 | 2018-04-12 | PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to mod… |
CVE-2018-6902 | Medium | 5.4 | 2018-04-12 | PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action. |
CVE-2018-6900 | Medium | 5.4 | 2018-04-12 | PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page. |
CVE-2018-6879 | High | 8.8 | 2018-04-12 | PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registe… |
CVE-2018-6870 | Medium | 6.1 | 2018-04-12 | Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature. |
CVE-2018-5254 | High | 7.5 | 2018-04-12 | Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDATE message. |
CVE-2018-3889 | High | 7.8 | 2018-04-12 | A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image… |
CVE-2018-3868 | High | 7.8 | 2018-04-12 | A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF ima… |
CVE-2018-3862 | High | 7.8 | 2018-04-12 | A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting |
CVE-2018-3861 | High | 7.8 | 2018-04-12 | A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF ima… |
CVE-2018-10063 | High | 7.8 | 2018-04-12 | The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads fi… |
CVE-2018-10074 | Medium | 5.5 | 2018-04-12 | The hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel before 4.16 allows local users to cause a denial of service (… |
CVE-2018-10073 | Medium | 4.8 | 2018-04-12 | joyplus-cms 1.6.0 has XSS in manager/admin_vod.php via the keyword parameter. |
CVE-2018-10072 | Medium | 5.5 | 2018-04-12 | windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953827bf DeviceIoControl call. |
CVE-2018-10071 | Medium | 5.5 | 2018-04-12 | windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953826DB DeviceIoControl call. |
CVE-2018-10068 | Medium | 6.1 | 2018-04-12 | The jDownloads extension before 3.2.59 for Joomla! has XSS. |
CVE-2018-1084 | High | 7.5 | 2018-04-12 | corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c. |
CVE-2018-1079 | High | 8.7 | 2018-04-12 | pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did… |
CVE-2018-1086 | Medium | 4.3 | 2018-04-12 | pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debu… |
CVE-2018-10061 | Medium | 5.4 | 2018-04-12 | Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib… |
CVE-2018-10060 | Medium | 5.4 | 2018-04-12 | Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/functions.php. |
CVE-2018-10059 | Medium | 5.4 | 2018-04-12 | Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER['PHP_SELF'] instead of $_SERVER['SCRIPT_NAME'] to det… |
CVE-2018-9843 | Critical | 9.8 | 2018-04-12 | The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET ob… |
CVE-2018-9842 | Medium | 5.3 | 2018-04-12 | CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replaying a logon message. |
CVE-2018-9155 | Medium | 5.4 | 2018-04-12 | Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of… |
CVE-2018-9118 | High | 7.5 | 2018-04-12 | exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename… |
CVE-2018-9860 | High | 7.5 | 2018-04-12 | An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when processing malformed TLS-CBC ciphertext could cause the receiving s… |
CVE-2018-8117 | Medium | 6.8 | 2018-04-12 | A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keys… |
CVE-2018-8116 | Medium | 5.5 | 2018-04-12 | A denial of service vulnerability exists in the way that Windows handles objects in memory, aka "Microsoft Graphics Component Denial of Service Vulnerability."… |
CVE-2018-1037 | Medium | 4.3 | 2018-04-12 | An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program databas… |
CVE-2018-1034 | Medium | 5.4 | 2018-04-12 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Share… |
CVE-2018-1032 | Medium | 5.4 | 2018-04-12 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Share… |
CVE-2018-1030 | High | 8.8 | 2018-04-12 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office R… |
CVE-2018-1029 | High | 7.8 | 2018-04-12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
CVE-2018-1028 | High | 8.8 | 2018-04-12 | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Grap… |
CVE-2018-1027 | High | 7.8 | 2018-04-12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
CVE-2018-1026 | High | 8.8 | 2018-04-12 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office R… |
CVE-2018-1023 | High | 7.5 | 2018-04-12 | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerabilit… |
CVE-2018-1020 | High | 7.5 | 2018-04-12 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerabili… |
CVE-2018-1019 | High | 7.5 | 2018-04-12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
CVE-2018-1018 | High | 7.5 | 2018-04-12 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerabili… |