2018 CVEs (page 151)
Page 151 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7440 | Critical | 9.8 | 2018-02-23 | An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command injection via a $(command) approach in the gplot rootname argu… |
CVE-2018-7439 | High | 8.8 | 2018-02-23 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function read_mini_biff_next_record. |
CVE-2018-7438 | High | 8.8 | 2018-02-23 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parse_unicode_string function. |
CVE-2018-7437 | High | 8.8 | 2018-02-23 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parse_SST function. |
CVE-2018-7436 | High | 8.8 | 2018-02-23 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parse_SST function. |
CVE-2018-7435 | High | 8.8 | 2018-02-23 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function. |
CVE-2018-6859 | Critical | 9.8 | 2018-02-23 | SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter. |
CVE-2018-6764 | High | 7.8 | 2018-02-23 | util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container p… |
CVE-2018-0520 | High | 8.8 | 2018-02-23 | Cross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to hijack the authentication of administrato… |
CVE-2018-0519 | Medium | 4.8 | 2018-02-23 | Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified ve… |
CVE-2018-0518 | Medium | 5.9 | 2018-02-23 | LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain s… |
CVE-2018-7339 | High | 8.8 | 2018-02-23 | The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a… |
CVE-2018-6868 | Medium | 5.4 | 2018-02-23 | Cross Site Scripting (XSS) exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter. |
CVE-2018-6867 | Medium | 5.4 | 2018-02-23 | Cross Site Scripting (XSS) exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter. |
CVE-2018-6866 | Medium | 5.4 | 2018-02-23 | Cross Site Scripting (XSS) exists in PHP Scripts Mall Learning and Examination Management System Script 2.3.1 via a crafted message. |
CVE-2018-6489 | Critical | 9.8 | 2018-02-22 | XML External Entity (XXE) vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML… |
CVE-2018-6488 | High | 8.1 | 2018-02-22 | Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitra… |
CVE-2018-0015 | Critical | 9.8 | 2018-02-22 | A malicious user with unrestricted access to the AppFormix application management platform may be able to access a Python debug console and execute system comm… |
CVE-2018-7319 | Critical | 9.8 | 2018-02-22 | SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the cooling_system1, heating_system1, or laundry parameter. |
CVE-2018-7318 | Critical | 9.8 | 2018-02-22 | SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, description_search, or filter_order parameter. |
CVE-2018-7317 | High | 7.5 | 2018-02-22 | Backup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a .sql file under backup/. |
CVE-2018-7316 | Critical | 9.8 | 2018-02-22 | Arbitrary File Upload exists in the Proclaim 9.1.1 component for Joomla! via a mediafileform action. |
CVE-2018-7315 | Critical | 9.8 | 2018-02-22 | SQL Injection exists in the Ek Rishta 2.9 component for Joomla! via the gender, age1, age2, religion, mothertounge, caste, or country parameter. |
CVE-2018-7314 | Critical | 9.8 | 2018-02-22 | SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429. |
CVE-2018-7312 | Critical | 9.8 | 2018-02-22 | SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter. |
CVE-2018-7301 | Critical | 9.8 | 2018-02-22 | eQ-3 AG HomeMatic CCU2 2.29.22 devices have an open XML-RPC port without authentication. This can be exploited by sending arbitrary XML-RPC requests to control… |
CVE-2018-7300 | Critical | 9.8 | 2018-02-22 | Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote at… |
CVE-2018-7299 | High | 8.0 | 2018-02-22 | Remote Code Execution in the addon installation process in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows authenticated attackers to create or overwrite arbi… |
CVE-2018-7298 | High | 8.1 | 2018-02-22 | In /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software update packages are downloaded via the HTTP protocol, which d… |
CVE-2018-7297 | Critical | 9.8 | 2018-02-22 | Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execut… |
CVE-2018-7296 | Medium | 5.3 | 2018-02-22 | Directory Traversal / Arbitrary File Read in User.getLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to read the first lin… |
CVE-2018-6890 | Medium | 4.8 | 2018-02-22 | Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3. |
CVE-2018-1417 | High | 8.1 | 2018-02-22 | Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elev… |
CVE-2018-1415 | Medium | 5.4 | 2018-02-22 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus al… |
CVE-2018-1414 | High | 8.8 | 2018-02-22 | IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the at… |
CVE-2018-1392 | Low | 3.1 | 2018-02-22 | IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command… |
CVE-2018-1391 | Medium | 6.5 | 2018-02-22 | IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command… |
CVE-2018-7409 | Critical | 9.8 | 2018-02-22 | In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c. |
CVE-2018-7408 | High | 7.8 | 2018-02-22 | An issue was discovered in an npm 5.7.0 2018-02-21 pre-release (marked as "next: 5.7.0" and therefore automatically installed by an "npm upgrade -g npm" comman… |
CVE-2018-7313 | Critical | 9.8 | 2018-02-22 | SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter. |
CVE-2018-7287 | Medium | 5.9 | 2018-02-22 | An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of siz… |
CVE-2018-7286 | Medium | 6.5 | 2018-02-22 | An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. res_pjsip allows… |
CVE-2018-7285 | High | 7.5 | 2018-02-22 | A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desire… |
CVE-2018-7284 | High | 7.5 | 2018-02-22 | A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. W… |
CVE-2018-0206 | Medium | 6.1 | 2018-02-22 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a refl… |
CVE-2018-0205 | Medium | 6.1 | 2018-02-22 | A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cr… |
CVE-2018-0204 | High | 7.5 | 2018-02-22 | A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of serv… |
CVE-2018-0203 | Medium | 5.3 | 2018-02-22 | A vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated, remote attacker to send unsolicited email messages, aka a Mail Rela… |
CVE-2018-0201 | Medium | 5.4 | 2018-02-22 | A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a u… |
CVE-2018-0200 | Medium | 6.1 | 2018-02-22 | A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a reflected cross-site scr… |
CVE-2018-0199 | Medium | 6.1 | 2018-02-22 | A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… |
CVE-2018-0148 | High | 8.8 | 2018-02-22 | A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Controller (IMC) Supervisor Software could… |
CVE-2018-0146 | Medium | 5.4 | 2018-02-22 | A vulnerability in the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a cross-site request forger… |
CVE-2018-0145 | Medium | 6.1 | 2018-02-22 | A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker… |
CVE-2018-0139 | High | 8.6 | 2018-02-22 | A vulnerability in the Interactive Voice Response (IVR) management connection interface for Cisco Unified Customer Voice Portal (CVP) could allow an unauthenti… |
CVE-2018-0130 | Critical | 9.8 | 2018-02-22 | A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, rem… |
CVE-2018-0124 | Critical | 9.8 | 2018-02-22 | A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated pr… |
CVE-2018-0121 | Critical | 9.8 | 2018-02-22 | A vulnerability in the authentication functionality of the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticate… |
CVE-2018-7311 | High | 8.8 | 2018-02-21 | PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability. The software installs a privileged helper tool that runs as the root user… |
CVE-2018-7281 | High | 8.8 | 2018-02-21 | CactusVPN 5.3.6 for macOS contains a root privilege escalation vulnerability through a setuid root binary called runme. The binary takes a single command line… |
CVE-2018-6936 | Medium | 5.4 | 2018-02-21 | Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account. |
CVE-2018-7308 | High | 8.8 | 2018-02-21 | A CSRF issue was found in var/www/html/files.php in DanWin hosting through 2018-02-11 that allows arbitrary remote users to add/delete/modify any files in any… |
CVE-2018-7305 | Medium | 4.9 | 2018-02-21 | MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts. |
CVE-2018-7304 | High | 8.8 | 2018-02-21 | Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection attack can open a CMD.EXE or Calculator window on the victim machi… |
CVE-2018-7303 | Medium | 5.4 | 2018-02-21 | The Calendar component in Tiki 17.1 allows HTML injection. |
CVE-2018-7302 | Medium | 5.4 | 2018-02-21 | Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS. |
CVE-2018-7289 | Low | 3.3 | 2018-02-21 | An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2. Malware with filenames containing pure UTF-16 characters can bypas… |
CVE-2018-7280 | Medium | 6.1 | 2018-02-21 | The Ninja Forms plugin before 3.2.14 for WordPress has XSS. |
CVE-2018-7261 | Medium | 5.4 | 2018-02-21 | There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev… |
CVE-2018-7260 | Medium | 5.4 | 2018-02-21 | Cross-site scripting (XSS) vulnerability in db_central_columns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script… |
CVE-2018-5716 | High | 8.1 | 2018-02-21 | An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can… |
CVE-2018-1168 | High | 7.8 | 2018-02-21 | This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3. An attacker must first obtain… |
CVE-2018-1166 | High | 7.8 | 2018-02-21 | This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker m… |
CVE-2018-1165 | High | 7.0 | 2018-02-21 | This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker m… |
CVE-2018-1164 | Critical | 9.8 | 2018-02-21 | This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router 1.00(AWG.3)D5. Auth… |
CVE-2018-7278 | Medium | 6.1 | 2018-02-21 | An issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices. Persistent XSS exists in the web server. Remote attackers can inject maliciou… |
CVE-2018-7277 | Medium | 6.1 | 2018-02-21 | An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using… |
CVE-2018-7276 | High | 7.5 | 2018-02-21 | An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via… |
CVE-2018-7274 | Medium | 6.1 | 2018-02-21 | Yab Quarx through 2.4.3 is prone to multiple persistent cross-site scripting vulnerabilities: Blog (Title), FAQ (Question), Pages (Title), Widgets (Name), and… |
CVE-2018-7273 | Medium | 5.5 | 2018-02-21 | In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function sho… |
CVE-2018-7272 | Medium | 6.5 | 2018-02-21 | The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID val… |
CVE-2018-7271 | High | 8.1 | 2018-02-21 | An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/config_db.php configuration file filtering is not rigo… |
CVE-2018-7265 | Medium | 6.1 | 2018-02-20 | Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS. |
CVE-2018-7263 | Critical | 9.8 | 2018-02-20 | The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double… |
CVE-2018-6487 | Critical | 9.8 | 2018-02-20 | Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11… |
CVE-2018-5477 | Medium | 5.8 | 2018-02-20 | An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Application Version 7.1 and prior, netCADOPS… |
CVE-2018-7205 | Medium | 4.8 | 2018-02-20 | Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote attackers to execute malicious JavaScrip… |
CVE-2018-7046 | High | 7.2 | 2018-02-20 | Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic .N… |
CVE-2018-6941 | High | 8.8 | 2018-02-20 | A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with XS… |
CVE-2018-6940 | Medium | 6.1 | 2018-02-20 | A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with CSR… |
CVE-2018-6459 | Medium | 5.3 | 2018-02-20 | The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service… |
CVE-2018-6356 | Medium | 6.5 | 2018-02-20 | Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin re… |
CVE-2018-7259 | Critical | 9.8 | 2018-02-20 | The FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X sends a user's Google account credentials to http://installLog.flightsimlabs.com/LogHandler3.ash… |
CVE-2018-7254 | High | 7.8 | 2018-02-19 | The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or… |
CVE-2018-7253 | High | 7.8 | 2018-02-19 | The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (heap-based buffer over-re… |
CVE-2018-7251 | Critical | 9.8 | 2018-02-19 | An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error (s… |
CVE-2018-5763 | Medium | 5.9 | 2018-02-19 | An issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1. By entering specially crafted URLs, an attacker is able to bring th… |
CVE-2018-6592 | High | 7.8 | 2018-02-19 | Unisys Stealth 3.3 Windows endpoints before 3.3.016.1 allow local users to gain access to Stealth-enabled devices by leveraging improper cleanup of memory used… |
CVE-2018-7247 | Critical | 9.8 | 2018-02-19 | An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3. Unsanitized input (rootname) can overflow a buffer, leading potential… |
CVE-2018-5475 | Critical | 9.8 | 2018-02-19 | A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-based buffer o… |