2018 CVEs (page 152)
Page 152 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-5473 | Critical | 9.8 | 2018-02-19 | An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in GE D60 Line Distance Relay devices running firmware Version… |
CVE-2018-5439 | Critical | 9.8 | 2018-02-19 | A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior. A remote attacker may be able to execute arbitrary cod… |
CVE-2018-7226 | Critical | 9.8 | 2018-02-19 | An issue was discovered in vcSetXCutTextProc() in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distribution through 0.9.10. Missing sanitizati… |
CVE-2018-7225 | Critical | 9.8 | 2018-02-19 | An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to u… |
CVE-2018-7219 | High | 8.8 | 2018-02-19 | application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/adm… |
CVE-2018-6591 | Medium | 5.3 | 2018-02-19 | Converse.js and Inverse.js through 3.3 allow remote attackers to obtain sensitive information because it is too difficult to determine whether safe publication… |
CVE-2018-1411 | High | 7.8 | 2018-02-19 | IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent… |
CVE-2018-1410 | High | 7.8 | 2018-02-19 | IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent… |
CVE-2018-1409 | High | 7.8 | 2018-02-19 | IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent… |
CVE-2018-5381 | Medium | 6.5 | 2018-02-19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_par… |
CVE-2018-5380 | Medium | 4.3 | 2018-02-19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input. |
CVE-2018-5379 | High | 7.5 | 2018-02-19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unkn… |
CVE-2018-5378 | High | 7.1 | 2018-02-19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Ar… |
CVE-2018-6024 | Critical | 9.8 | 2018-02-18 | SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter. |
CVE-2018-7217 | High | 8.8 | 2018-02-18 | In Bravo Tejari Procurement Portal, uploaded files are not properly validated by the application either on the client or the server side. An attacker can take… |
CVE-2018-7216 | High | 8.0 | 2018-02-18 | Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenticated users to hija… |
CVE-2018-7212 | Medium | 5.3 | 2018-02-18 | An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backsla… |
CVE-2018-7211 | High | 8.1 | 2018-02-18 | An issue was discovered in iDashboards 9.6b. The SSO implementation is affected by a weak obfuscation library, allowing man-in-the-middle attackers to discover… |
CVE-2018-7210 | High | 7.5 | 2018-02-18 | An issue was discovered in iDashboards 9.6b. It allows remote attackers to obtain sensitive information via a direct request for the idb/config?CMD=installLice… |
CVE-2018-7209 | High | 7.5 | 2018-02-18 | An issue was discovered in iDashboards 9.6b. It allows remote attackers to obtain sensitive information via a direct request for the idashboards/config.xml URI… |
CVE-2018-7208 | High | 7.8 | 2018-02-18 | In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not… |
CVE-2018-7206 | High | 8.8 | 2018-02-18 | An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whiteli… |
CVE-2018-7198 | Medium | 6.1 | 2018-02-18 | October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page. |
CVE-2018-7197 | Medium | 6.1 | 2018-02-18 | An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting (XSS) vulnerability allows remote unauthenticated users to inject arbitrary web s… |
CVE-2018-7180 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter. |
CVE-2018-7179 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter. |
CVE-2018-7178 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter. |
CVE-2018-7177 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Saxum Numerology 3.0.4 component for Joomla! via the publicid parameter. |
CVE-2018-6585 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filter_creator or filter_events_cat parameter. |
CVE-2018-6584 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request. |
CVE-2018-6583 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request. |
CVE-2018-6396 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map p… |
CVE-2018-6394 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invites action. |
CVE-2018-6373 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action. |
CVE-2018-6372 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter. |
CVE-2018-6370 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under the all-offers/ URI. |
CVE-2018-6368 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action. |
CVE-2018-6006 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter. |
CVE-2018-6005 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter. |
CVE-2018-6004 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfield[phone] or sess parameter. |
CVE-2018-5994 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume reques… |
CVE-2018-5993 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request. |
CVE-2018-5992 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request. |
CVE-2018-5991 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than C… |
CVE-2018-5990 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter. |
CVE-2018-5989 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099. |
CVE-2018-5987 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pin_id or user_id parameter in a task=getlikeinfo action, the end… |
CVE-2018-5983 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request. |
CVE-2018-5982 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=show_rss_categories&catname= request. |
CVE-2018-5981 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or gallery_id parameter. |
CVE-2018-5980 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action. |
CVE-2018-5975 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the Smart Shoutbox 3.0.0 component for Joomla! via the shoutauthor parameter to the archive URI. |
CVE-2018-5974 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter. |
CVE-2018-5971 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter. |
CVE-2018-5970 | Critical | 9.8 | 2018-02-17 | SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or campaign_countries parameter. |
CVE-2018-6218 | High | 7.0 | 2018-02-16 | A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system. |
CVE-2018-3609 | High | 8.1 | 2018-02-16 | A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access s… |
CVE-2018-1049 | Medium | 5.9 | 2018-02-16 | In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd res… |
CVE-2018-7188 | Medium | 5.4 | 2018-02-16 | An XSS vulnerability (via an SVG image) in Tiki before 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page w… |
CVE-2018-7187 | High | 8.8 | 2018-02-16 | The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only checks for "://" an… |
CVE-2018-0516 | High | 7.8 | 2018-02-16 | Untrusted search path vulnerability in FLET'S v4 / v6 address selection tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified dir… |
CVE-2018-0515 | High | 7.8 | 2018-02-16 | Untrusted search path vulnerability in "FLET'S Azukeru Backup Tool" version 1.5.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in… |
CVE-2018-7186 | Critical | 9.8 | 2018-02-16 | Leptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf or sscanf, which allows remote attackers to cause a denial of… |
CVE-2018-6944 | Medium | 6.1 | 2018-02-16 | core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitiz… |
CVE-2018-6943 | Medium | 6.1 | 2018-02-16 | core/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly saniti… |
CVE-2018-7176 | High | 8.8 | 2018-02-16 | FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php (aka the "add user" feature of the User Permissions pa… |
CVE-2018-6324 | Medium | 6.1 | 2018-02-16 | F-Secure Radar (on-premises) before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login. |
CVE-2018-6189 | Medium | 6.1 | 2018-02-16 | F-Secure Radar (on-premises) before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/la… |
CVE-2018-1000068 | Medium | 5.3 | 2018-02-16 | An improper input validation vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to access plugin r… |
CVE-2018-1000067 | Medium | 5.3 | 2018-02-16 | An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submi… |
CVE-2018-6316 | High | 7.5 | 2018-02-15 | Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and a… |
CVE-2018-5767 | Critical | 9.8 | 2018-02-15 | An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted… |
CVE-2018-7175 | Medium | 5.5 | 2018-02-15 | An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero comp… |
CVE-2018-7174 | Medium | 5.5 | 2018-02-15 | An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for table… |
CVE-2018-7173 | Medium | 5.5 | 2018-02-15 | A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding. |
CVE-2018-7169 | Medium | 5.3 | 2018-02-15 | An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2… |
CVE-2018-7054 | Critical | 9.8 | 2018-02-15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issu… |
CVE-2018-7053 | Critical | 9.8 | 2018-02-15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are received in an unexpected order. |
CVE-2018-7052 | High | 7.5 | 2018-02-15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer der… |
CVE-2018-7051 | High | 7.5 | 2018-02-15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings. |
CVE-2018-7050 | High | 7.5 | 2018-02-15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an "empty" nick. |
CVE-2018-1041 | High | 7.5 | 2018-02-15 | A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this… |
CVE-2018-7057 | Medium | 6.1 | 2018-02-15 | RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter. |
CVE-2018-7056 | Medium | 5.3 | 2018-02-15 | RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action. |
CVE-2018-7055 | High | 7.5 | 2018-02-15 | GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter. |
CVE-2018-5440 | Critical | 9.8 | 2018-02-15 | A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers r… |
CVE-2018-0869 | Medium | 5.4 | 2018-02-15 | SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vul… |
CVE-2018-0866 | High | 7.5 | 2018-02-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511… |
CVE-2018-0864 | Medium | 5.4 | 2018-02-15 | SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Mi… |
CVE-2018-0861 | High | 7.5 | 2018-02-15 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in mem… |
CVE-2018-0860 | High | 7.5 | 2018-02-15 | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
CVE-2018-0859 | High | 7.5 | 2018-02-15 | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
CVE-2018-0858 | High | 7.5 | 2018-02-15 | ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerab… |
CVE-2018-0857 | High | 7.5 | 2018-02-15 | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
CVE-2018-0856 | High | 7.5 | 2018-02-15 | Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, ak… |
CVE-2018-0855 | Medium | 4.3 | 2018-02-15 | The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the W… |
CVE-2018-0853 | Low | 3.3 | 2018-02-15 | Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information discl… |
CVE-2018-0852 | High | 8.8 | 2018-02-15 | Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (… |
CVE-2018-0851 | High | 8.8 | 2018-02-15 | Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft… |
CVE-2018-0850 | Medium | 6.5 | 2018-02-15 | Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of pr… |