2018 CVEs (page 156)
Page 156 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6318 | High | 7.8 | 2018-02-02 | In Sophos Tester Tool 3.2.0.7 Beta, the driver loads (in the context of the application used to test an exploit or ransomware) the DLL using a payload that run… |
CVE-2018-6317 | Critical | 9.1 | 2018-02-02 | The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attack… |
CVE-2018-5261 | High | 8.1 | 2018-02-02 | An issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext information from the handshake as input for the encryption key u… |
CVE-2018-6581 | Critical | 9.8 | 2018-02-02 | SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter. |
CVE-2018-6580 | Critical | 9.8 | 2018-02-02 | Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request. |
CVE-2018-6579 | Critical | 9.8 | 2018-02-02 | SQL Injection exists in the JEXTN Reverse Auction 3.1.0 component for Joomla! via a view=products&uid= request. |
CVE-2018-6578 | Critical | 9.8 | 2018-02-02 | SQL Injection exists in the JE PayperVideo 3.0.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscriptions request. |
CVE-2018-6577 | Critical | 9.8 | 2018-02-02 | SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscriptions request. |
CVE-2018-6576 | Critical | 9.8 | 2018-02-02 | SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter. |
CVE-2018-6575 | Critical | 9.8 | 2018-02-02 | SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request. |
CVE-2018-6561 | Medium | 6.1 | 2018-02-02 | dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element. |
CVE-2018-6560 | High | 8.8 | 2018-02-02 | In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the s… |
CVE-2018-6551 | Critical | 9.8 | 2018-02-02 | The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly h… |
CVE-2018-6486 | High | 7.3 | 2018-02-02 | XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16… |
CVE-2018-6550 | Medium | 5.4 | 2018-02-02 | Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php. |
CVE-2018-6548 | Critical | 9.8 | 2018-02-02 | A use-after-free issue was discovered in libwebm through 2018-02-02. If a Vp9HeaderParser was initialized once before, its property frame_ would not be changed… |
CVE-2018-6545 | Medium | 6.1 | 2018-02-02 | Ipswitch MoveIt v8.1 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability, as demonstrated by human.aspx. Attackers can leverage this vulnerabili… |
CVE-2018-6544 | Medium | 5.5 | 2018-02-02 | pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows rem… |
CVE-2018-6543 | High | 7.8 | 2018-02-02 | In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size. A crafte… |
CVE-2018-6542 | Medium | 6.5 | 2018-02-02 | In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst funct… |
CVE-2018-6541 | Medium | 6.5 | 2018-02-02 | In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (z… |
CVE-2018-6540 | Medium | 6.5 | 2018-02-02 | In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers coul… |
CVE-2018-6537 | Critical | 9.8 | 2018-02-02 | A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending… |
CVE-2018-6536 | Medium | 5.5 | 2018-02-02 | An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow… |
CVE-2018-6526 | Medium | 5.3 | 2018-02-02 | view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, relat… |
CVE-2018-6525 | High | 7.8 | 2018-02-02 | In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other im… |
CVE-2018-6524 | High | 7.8 | 2018-02-02 | In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other im… |
CVE-2018-6523 | High | 7.8 | 2018-02-02 | In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other im… |
CVE-2018-6522 | High | 7.8 | 2018-02-02 | In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other… |
CVE-2018-6521 | Critical | 9.8 | 2018-02-02 | The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might… |
CVE-2018-6520 | Medium | 6.1 | 2018-02-02 | SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL. |
CVE-2018-6519 | High | 7.5 | 2018-02-02 | The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-… |
CVE-2018-1192 | High | 8.8 | 2018-02-01 | In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to… |
CVE-2018-6485 | Critical | 9.8 | 2018-02-01 | An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause th… |
CVE-2018-6186 | High | 8.8 | 2018-02-01 | Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attack… |
CVE-2018-0511 | Medium | 6.1 | 2018-02-01 | Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2018-0510 | Critical | 9.8 | 2018-02-01 | Buffer overflow in epg search result viewer (kkcald) 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS (denial of serv… |
CVE-2018-0509 | High | 8.8 | 2018-02-01 | Cross-site request forgery (CSRF) vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to hijack the authentication of admi… |
CVE-2018-0508 | Medium | 6.1 | 2018-02-01 | Cross-site scripting vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspec… |
CVE-2018-6470 | Medium | 5.3 | 2018-02-01 | Nibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store information to leak. |
CVE-2018-6484 | Medium | 6.5 | 2018-02-01 | In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage th… |
CVE-2018-6374 | Medium | 6.5 | 2018-01-31 | The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate… |
CVE-2018-6480 | High | 8.8 | 2018-01-31 | A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature (which, for example, helped with l… |
CVE-2018-6479 | High | 7.5 | 2018-01-31 | An issue was discovered on Netwave IP Camera devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to the / U… |
CVE-2018-0136 | High | 8.6 | 2018-01-31 | A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9000 Series could allow an unauthe… |
CVE-2018-6476 | Critical | 9.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating input val… |
CVE-2018-6475 | High | 7.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges. |
CVE-2018-6474 | High | 7.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspeci… |
CVE-2018-6473 | High | 7.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspeci… |
CVE-2018-6472 | High | 7.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspeci… |
CVE-2018-6471 | High | 7.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspeci… |
CVE-2018-6465 | Medium | 6.1 | 2018-01-31 | The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php. |
CVE-2018-6464 | Medium | 6.1 | 2018-01-31 | Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1. |
CVE-2018-6462 | High | 7.8 | 2018-01-31 | Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead o… |
CVE-2018-5996 | High | 7.8 | 2018-01-31 | Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within t… |
CVE-2018-5701 | Critical | 9.8 | 2018-01-31 | In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values… |
CVE-2018-6460 | High | 7.5 | 2018-01-31 | Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server uses JSONP and hosts sensitive information including configurat… |
CVE-2018-6384 | High | 7.8 | 2018-01-31 | Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged local users to execute arbitrary code with elevated privileges o… |
CVE-2018-1000001 | High | 7.8 | 2018-01-31 | In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffe… |
CVE-2018-6412 | High | 7.5 | 2018-01-31 | In the function sbusfb_ioctl_helper() in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary informati… |
CVE-2018-6408 | High | 8.8 | 2018-01-30 | An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. CSRF exists in hy-cgi/user.cgi, as demonstrated by changing an administrator passwor… |
CVE-2018-6407 | High | 7.5 | 2018-01-30 | An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a device by sending a POST request with a huge… |
CVE-2018-6406 | High | 8.8 | 2018-01-30 | The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .web… |
CVE-2018-6405 | Medium | 6.5 | 2018-01-30 | In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. T… |
CVE-2018-6195 | High | 7.2 | 2018-01-30 | admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows authenticated (administrator… |
CVE-2018-6194 | Medium | 4.8 | 2018-01-30 | A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 f… |
CVE-2018-5441 | High | 7.8 | 2018-01-30 | An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal… |
CVE-2018-6380 | Medium | 6.1 | 2018-01-30 | In Joomla! before 3.8.4, lack of escaping in the module chromes leads to XSS vulnerabilities in the module system. |
CVE-2018-6379 | Medium | 6.1 | 2018-01-30 | In Joomla! before 3.8.4, inadequate input filtering in the Uri class (formerly JUri) leads to an XSS vulnerability. |
CVE-2018-6377 | Medium | 6.1 | 2018-01-30 | In Joomla! before 3.8.4, inadequate input filtering in com_fields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox |
CVE-2018-6376 | Critical | 9.8 | 2018-01-30 | In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message. |
CVE-2018-6355 | Medium | 6.1 | 2018-01-30 | /goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site Scripting via the lang parameter. |
CVE-2018-6398 | Critical | 9.8 | 2018-01-30 | SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action. |
CVE-2018-6397 | High | 7.5 | 2018-01-30 | Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter. |
CVE-2018-6395 | Critical | 9.8 | 2018-01-30 | SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action. |
CVE-2018-6382 | Low | 3.3 | 2018-01-30 | MantisBT 2.10.0 allows local users to conduct SQL Injection attacks via the vendor/adodb/adodb-php/server.php sql parameter in a request to the 127.0.0.1 IP ad… |
CVE-2018-6393 | High | 7.2 | 2018-01-29 | FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2) allow post-authentication SQL injection via the order parameter. NOTE: the vendor disputes this is… |
CVE-2018-3835 | High | 8.8 | 2018-01-29 | An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present… |
CVE-2018-0101 | Critical | 10.0 | 2018-01-29 | A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, rem… |
CVE-2018-6392 | Medium | 6.5 | 2018-01-29 | The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array access) via… |
CVE-2018-6391 | High | 8.8 | 2018-01-29 | A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation… |
CVE-2018-6390 | Medium | 6.5 | 2018-01-29 | The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an _copy c… |
CVE-2018-6388 | High | 8.8 | 2018-01-29 | iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping t… |
CVE-2018-6387 | Critical | 9.8 | 2018-01-29 | iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices have a hardcoded password of admin for the admin account, a hardcoded password of support for the suppor… |
CVE-2018-6383 | High | 8.8 | 2018-01-29 | Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php (and similar) file extensions but not the .pht or .phar extension, which… |
CVE-2018-6381 | Medium | 6.5 | 2018-01-29 | In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused b… |
CVE-2018-1364 | High | 8.2 | 2018-01-29 | IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this… |
CVE-2018-6367 | Critical | 9.8 | 2018-01-29 | SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parameter or the /search_events.php category… |
CVE-2018-6365 | Critical | 9.8 | 2018-01-29 | SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /page_new.php. |
CVE-2018-6364 | Critical | 9.8 | 2018-01-29 | SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter. |
CVE-2018-6363 | Critical | 9.8 | 2018-01-29 | SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter. |
CVE-2018-6008 | High | 7.5 | 2018-01-29 | Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter. |
CVE-2018-6007 | High | 8.8 | 2018-01-29 | CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket. |
CVE-2018-5720 | High | 8.8 | 2018-01-29 | An issue was discovered on DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 devices. A Cross-site request forgery (CSRF) vulner… |
CVE-2018-6360 | High | 8.8 | 2018-01-28 | mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and acc… |
CVE-2018-6359 | High | 8.8 | 2018-01-27 | The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service… |
CVE-2018-6358 | High | 8.8 | 2018-01-27 | The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a den… |
CVE-2018-6357 | High | 8.8 | 2018-01-27 | The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray para… |
CVE-2018-6354 | Medium | 6.1 | 2018-01-27 | templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the _next parameter. |
CVE-2018-6353 | High | 7.8 | 2018-01-27 | The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a… |