2018 CVEs (page 144)
Page 144 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7513 | Medium | 5.3 | 2018-03-21 | In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow. |
CVE-2018-3710 | High | 7.8 | 2018-03-21 | Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execu… |
CVE-2018-1230 | High | 8.8 | 2018-03-21 | Pivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection. A remote unauthenticated user could craft a malicious site th… |
CVE-2018-1229 | Medium | 6.1 | 2018-03-21 | Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access… |
CVE-2018-8074 | High | 8.1 | 2018-03-21 | Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elastics… |
CVE-2018-8073 | Critical | 9.8 | 2018-03-21 | Yii 2.x before 2.0.15 allows remote attackers to execute arbitrary LUA code via a variant of the CVE-2018-7269 attack in conjunction with the Redis extension. |
CVE-2018-7269 | Critical | 9.8 | 2018-03-21 | The findByCondition function in framework/db/ActiveRecord.php in Yii 2.x before 2.0.15 allows remote attackers to conduct SQL injection attacks via a findOne()… |
CVE-2018-1347 | Medium | 5.3 | 2018-03-21 | The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting. |
CVE-2018-1346 | Low | 3.1 | 2018-03-21 | Addresses denial of service attack to eDirectory versions prior to 9.1. |
CVE-2018-1345 | Medium | 5.9 | 2018-03-21 | NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack. |
CVE-2018-1344 | Low | 3.1 | 2018-03-21 | Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1 |
CVE-2018-8883 | High | 7.8 | 2018-03-20 | Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the parse_line function in asm/parser.c via uncontrolled access to nasm_reg_flags. |
CVE-2018-8882 | High | 7.8 | 2018-03-20 | Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr in asm/float.c via a large shift value. |
CVE-2018-8881 | High | 7.3 | 2018-03-20 | Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string. |
CVE-2018-8876 | High | 7.8 | 2018-03-20 | In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact be… |
CVE-2018-8875 | High | 7.8 | 2018-03-20 | In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact be… |
CVE-2018-8874 | High | 7.8 | 2018-03-20 | In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact be… |
CVE-2018-8873 | High | 7.8 | 2018-03-20 | In 2345 Security Guard 3.6, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other imp… |
CVE-2018-8832 | Medium | 4.8 | 2018-03-20 | enhavo 0.4.0 has XSS via a user-group that contains executable JavaScript code in the user-group name. The XSS attack launches when a victim visits the admin u… |
CVE-2018-8828 | Critical | 9.8 | 2018-03-20 | A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malfor… |
CVE-2018-3626 | Medium | 4.7 | 2018-03-20 | Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptible to a side channel potentially allowing… |
CVE-2018-5768 | Critical | 9.8 | 2018-03-20 | A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE heade… |
CVE-2018-1141 | High | 7.0 | 2018-03-20 | When installing Nessus to a directory outside of the default location, Nessus versions prior to 7.0.3 did not enforce secure permissions for sub-directories. T… |
CVE-2018-8822 | High | 7.8 | 2018-03-20 | Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux kernel through 4.15.11, and in drivers/staging/ncpfs/… |
CVE-2018-5438 | Medium | 6.3 | 2018-03-20 | Philips ISCV application prior to version 2.3.0 has an insufficient session expiration vulnerability where an attacker could reuse the session of a previously… |
CVE-2018-1322 | Medium | 4.9 | 2018-03-20 | An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be… |
CVE-2018-1321 | High | 7.2 | 2018-03-20 | An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x whic… |
CVE-2018-1294 | High | 7.5 | 2018-03-20 | If a user of Apache Commons Email (typically an application programmer) passes unvalidated input as the so-called "Bounce Address", and that input contains lin… |
CVE-2018-8088 | Critical | 9.8 | 2018-03-20 | org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted d… |
CVE-2018-7511 | Medium | 5.3 | 2018-03-20 | In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in turn, may allow rem… |
CVE-2018-5770 | Critical | 9.8 | 2018-03-20 | An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet, creating a telnetd service on the devic… |
CVE-2018-5717 | High | 7.5 | 2018-03-20 | Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the… |
CVE-2018-4844 | Medium | 6.7 | 2018-03-20 | A vulnerability has been identified in SIMATIC WinCC OA UI for Android (All versions < V3.15.10), SIMATIC WinCC OA UI for iOS (All versions < V3.15.10). Insuff… |
CVE-2018-4843 | Medium | 6.5 | 2018-03-20 | A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3)… |
CVE-2018-1000135 | High | 7.5 | 2018-03-20 | GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries… |
CVE-2018-8821 | Medium | 5.5 | 2018-03-20 | windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file. |
CVE-2018-8815 | Medium | 4.6 | 2018-03-20 | Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote attackers to inject arbitrary web script or HTML via a… |
CVE-2018-8811 | High | 8.8 | 2018-03-20 | Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authen… |
CVE-2018-8810 | Medium | 5.5 | 2018-03-20 | In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c. Remote attackers could leverage this vulnerability… |
CVE-2018-8809 | Medium | 5.5 | 2018-03-20 | In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c. Remote attackers could leverage this vulnerability to caus… |
CVE-2018-8808 | Medium | 5.5 | 2018-03-20 | In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm.c. Remote attackers could leverage this vulnerability to caus… |
CVE-2018-8807 | Medium | 6.5 | 2018-03-20 | In libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c. Remote attackers could leverage this vulnerability to cause a… |
CVE-2018-8806 | Medium | 6.5 | 2018-03-20 | In libming 0.4.8, there is a use-after-free in the decompileArithmeticOp function of decompile.c. Remote attackers could use this vulnerability to cause a deni… |
CVE-2018-8805 | Medium | 6.1 | 2018-03-20 | Yxcms building system (compatible cell phone) v1.4.7 has XSS via the content parameter to protected\apps\default\view\default\extend_guestbook.php or protected… |
CVE-2018-8804 | High | 8.8 | 2018-03-20 | WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application… |
CVE-2018-7445 | Critical | 9.8 | 2018-03-19 | A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service… |
CVE-2018-7262 | High | 7.5 | 2018-03-19 | In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, al… |
CVE-2018-5233 | Medium | 6.1 | 2018-03-19 | Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web scrip… |
CVE-2018-8732 | Medium | 5.4 | 2018-03-19 | Cross-site scripting (XSS) vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtual_del parameter. |
CVE-2018-1221 | High | 8.1 | 2018-03-19 | In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers… |
CVE-2018-1218 | High | 7.5 | 2018-03-19 | In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes a buffer overflow c… |
CVE-2018-1197 | High | 8.5 | 2018-03-19 | In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A… |
CVE-2018-1196 | Medium | 5.9 | 2018-03-19 | Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Sp… |
CVE-2018-1195 | High | 8.8 | 2018-03-19 | In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tok… |
CVE-2018-1171 | High | 7.0 | 2018-03-19 | This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker m… |
CVE-2018-5552 | Low | 2.9 | 2018-03-19 | Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pe… |
CVE-2018-5551 | Critical | 9.0 | 2018-03-19 | Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contain three credentials with known passwords: QD… |
CVE-2018-8761 | High | 7.5 | 2018-03-19 | protected\apps\member\controller\shopcarController.php in Yxcms building system (compatible cell phone) v1.4.7 has a logic flaw allowing attackers to modify a… |
CVE-2018-7422 | High | 7.5 | 2018-03-19 | A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_pat… |
CVE-2018-6843 | High | 7.2 | 2018-03-19 | Kentico 10 before 10.0.50 and 11 before 11.0.3 has SQL injection in the administration interface. |
CVE-2018-6842 | Medium | 5.4 | 2018-03-19 | Kentico 10 before 10.0.50 and 11 before 11.0.3 has XSS in which a crafted URL results in improper construction of a system page. |
CVE-2018-8770 | Medium | 5.3 | 2018-03-18 | Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/po… |
CVE-2018-8769 | High | 7.8 | 2018-03-18 | elfutils 0.170 has a buffer over-read in the ebl_dynamic_tag_name function of libebl/ebldynamictagname.c because SYMTAB_SHNDX is unsupported. |
CVE-2018-8768 | High | 7.8 | 2018-03-18 | In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, inval… |
CVE-2018-8767 | Medium | 4.8 | 2018-03-18 | joyplus-cms 1.6.0 has XSS in manager/admin_ajax.php?action=save&tab={pre}vod_type via the t_name parameter. |
CVE-2018-8766 | Critical | 9.8 | 2018-03-18 | joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary File Upload issue in manager/editor/upload.php, related to manager/admin_vod.php?action=… |
CVE-2018-8765 | High | 7.8 | 2018-03-18 | In 2345 Security Guard 3.6, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other imp… |
CVE-2018-8756 | High | 7.2 | 2018-03-18 | Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in the POST da… |
CVE-2018-8754 | Medium | 5.5 | 2018-03-18 | The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user S… |
CVE-2018-8741 | High | 8.8 | 2018-03-17 | A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hosting server, related… |
CVE-2018-8737 | Medium | 5.4 | 2018-03-17 | Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note (aka custName and custNote)… |
CVE-2018-8740 | High | 7.5 | 2018-03-17 | In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and… |
CVE-2018-3561 | High | 7.0 | 2018-03-16 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in diag_ioctl_lsm_deinit() lea… |
CVE-2018-3560 | High | 7.8 | 2018-03-16 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Double Free vulnerability exists in Audio Dri… |
CVE-2018-1200 | Medium | 6.5 | 2018-03-16 | Apps Manager for PCF (Pivotal Application Service 1.11.x before 1.11.26, 1.12.x before 1.12.14, and 2.0.x before 2.0.5) allows unprivileged remote file read in… |
CVE-2018-1199 | Medium | 5.3 | 2018-03-16 | Spring Security (Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x before 5.0… |
CVE-2018-1078 | Critical | 9.8 | 2018-03-16 | OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or shoul… |
CVE-2018-8739 | Critical | 9.8 | 2018-03-16 | VPN Unlimited 4.2.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XP… |
CVE-2018-1068 | Medium | 6.7 | 2018-03-16 | A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a li… |
CVE-2018-7544 | Critical | 9.1 | 2018-03-16 | A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5. When this interface is enabled over TCP without a passwor… |
CVE-2018-1000134 | Critical | 9.8 | 2018-03-16 | UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was repo… |
CVE-2018-1000133 | High | 7.5 | 2018-03-16 | Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A standard unprivileged… |
CVE-2018-1324 | Medium | 5.5 | 2018-03-16 | A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveI… |
CVE-2018-5476 | High | 7.8 | 2018-03-15 | A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. Stack-based buffer overf… |
CVE-2018-7033 | Critical | 9.8 | 2018-03-15 | SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD. |
CVE-2018-1319 | Medium | 6.1 | 2018-03-15 | In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If a victim goes to a maliciously crafted URL, unwanted results m… |
CVE-2018-6957 | Medium | 5.3 | 2018-03-15 | VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by openi… |
CVE-2018-6231 | Critical | 9.8 | 2018-03-15 | A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and below could allow remo… |
CVE-2018-6230 | Medium | 6.8 | 2018-03-15 | A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to upl… |
CVE-2018-6229 | Critical | 9.8 | 2018-03-15 | A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and e… |
CVE-2018-6228 | Critical | 9.8 | 2018-03-15 | A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload and execute… |
CVE-2018-6227 | Medium | 5.4 | 2018-03-15 | A stored cross-site scripting (XSS) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into vulner… |
CVE-2018-6226 | Medium | 5.4 | 2018-03-15 | Reflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject clie… |
CVE-2018-6225 | Medium | 4.3 | 2018-03-15 | An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protect… |
CVE-2018-6224 | High | 8.8 | 2018-03-15 | A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit authenticate… |
CVE-2018-6223 | Critical | 9.8 | 2018-03-15 | A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to manipulate the registr… |
CVE-2018-6222 | High | 7.8 | 2018-03-15 | Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulated to execute arbit… |
CVE-2018-6221 | High | 8.1 | 2018-03-15 | An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle attacker to tamper with an update file… |
CVE-2018-6220 | Critical | 9.8 | 2018-03-15 | An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining c… |
CVE-2018-6219 | Medium | 6.5 | 2018-03-15 | An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdrop and tamper with certain types of upd… |