2018 CVEs (page 157)
Page 157 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6352 | Medium | 5.5 | 2018-01-27 | In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vul… |
CVE-2018-6015 | High | 7.5 | 2018-01-26 | An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress. Sending an HTTP POST request to a URI with /?es=export at t… |
CVE-2018-5750 | Medium | 5.5 | 2018-01-26 | The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain sensitive address information by readin… |
CVE-2018-0507 | High | 7.8 | 2018-01-26 | Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Applica… |
CVE-2018-0506 | Critical | 9.8 | 2018-01-26 | Nootka 1.4.4 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. |
CVE-2018-6323 | High | 7.8 | 2018-01-26 | The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer… |
CVE-2018-1342 | Critical | 9.8 | 2018-01-26 | A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access… |
CVE-2018-6315 | High | 8.8 | 2018-01-25 | The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which… |
CVE-2018-6313 | Medium | 4.8 | 2018-01-25 | Cross-site scripting (XSS) in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a di… |
CVE-2018-5447 | Critical | 9.8 | 2018-01-25 | An Improper Input Validation issue was discovered in Nari PCS-9611 relay. An improper input validation vulnerability has been identified that affects a service… |
CVE-2018-1051 | High | 8.1 | 2018-01-25 | It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()`… |
CVE-2018-5997 | Critical | 9.8 | 2018-01-25 | An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possi… |
CVE-2018-5973 | Critical | 9.8 | 2018-01-25 | SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or Cate… |
CVE-2018-5965 | Medium | 4.8 | 2018-01-25 | CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_errors parameter. |
CVE-2018-5964 | Medium | 4.8 | 2018-01-25 | CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_messages parameter. |
CVE-2018-5963 | Medium | 4.8 | 2018-01-25 | CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/addbookmark.php via the title parameter. |
CVE-2018-5954 | High | 7.5 | 2018-01-25 | phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands. |
CVE-2018-5748 | High | 7.5 | 2018-01-25 | qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply. |
CVE-2018-4837 | High | 7.5 | 2018-01-25 | A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80/tcp or 443… |
CVE-2018-4836 | High | 8.8 | 2018-01-25 | A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic… |
CVE-2018-4835 | Medium | 5.3 | 2018-01-25 | A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with network access to the TeleControl Server Basic's port 8000/tcp could b… |
CVE-2018-6308 | Critical | 9.8 | 2018-01-25 | Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and modules\Campaigns\uti… |
CVE-2018-6217 | Medium | 5.5 | 2018-01-25 | The WStr::_alloc_iostr_data() function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service (appl… |
CVE-2018-5967 | Medium | 5.4 | 2018-01-25 | Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page. |
CVE-2018-6209 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxCryptMon.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified oth… |
CVE-2018-6208 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified… |
CVE-2018-6207 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified… |
CVE-2018-6206 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified… |
CVE-2018-6205 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified… |
CVE-2018-6204 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (SDActMon.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other… |
CVE-2018-6203 | High | 7.8 | 2018-01-25 | In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other imp… |
CVE-2018-6202 | High | 7.8 | 2018-01-25 | In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other imp… |
CVE-2018-6201 | High | 7.8 | 2018-01-25 | In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other imp… |
CVE-2018-6200 | Medium | 6.1 | 2018-01-25 | vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter. |
CVE-2018-6198 | Medium | 4.7 | 2018-01-25 | w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to… |
CVE-2018-6197 | High | 7.5 | 2018-01-25 | w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c. |
CVE-2018-6196 | High | 7.5 | 2018-01-25 | w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative inde… |
CVE-2018-5445 | Medium | 5.3 | 2018-01-25 | A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory s… |
CVE-2018-5443 | Medium | 5.3 | 2018-01-25 | A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. WebAccess/SCADA does not properly sanitize its inputs for SQ… |
CVE-2018-1048 | High | 7.5 | 2018-01-24 | It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOW_ENCODED_SLASH option and thus allow the the slash / a… |
CVE-2018-1047 | Medium | 5.5 | 2018-01-24 | A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method… |
CVE-2018-1000006 | High | 8.8 | 2018-01-24 | GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron ap… |
CVE-2018-1000007 | Critical | 9.8 | 2018-01-24 | libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will s… |
CVE-2018-1000005 | Critical | 9.1 | 2018-01-24 | libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) t… |
CVE-2018-6193 | Medium | 4.7 | 2018-01-24 | A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl. |
CVE-2018-6192 | Medium | 5.5 | 2018-01-24 | In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation violation and appl… |
CVE-2018-6191 | Medium | 5.5 | 2018-01-24 | The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. |
CVE-2018-6190 | Medium | 5.4 | 2018-01-24 | Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page. |
CVE-2018-5759 | Medium | 5.5 | 2018-01-24 | jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of ser… |
CVE-2018-5705 | Medium | 6.1 | 2018-01-24 | Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search engine (the t parameter to the /search URI). Since there is an user… |
CVE-2018-4834 | Critical | 9.8 | 2018-01-24 | A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All versions < V5.0.171), Desigo PXC00-E.D V5… |
CVE-2018-6018 | Critical | 9.1 | 2018-01-24 | Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic. |
CVE-2018-6017 | Critical | 9.1 | 2018-01-24 | Unencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to extract private sensitive information by sniffing network tra… |
CVE-2018-5778 | Critical | 9.8 | 2018-01-24 | An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Multiple SQL injection vulnerabilities are present in the legacy .ASP pages, wh… |
CVE-2018-5777 | Critical | 9.8 | 2018-01-24 | An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Remote clients can take advantage of a misconfiguration in the TFTP server that… |
CVE-2018-5319 | High | 7.5 | 2018-01-24 | RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request. |
CVE-2018-1000018 | High | 7.8 | 2018-01-24 | An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file. |
CVE-2018-6187 | Medium | 5.5 | 2018-01-24 | In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do_pdf_save_document function in the pdf/pdf-write.c file. Remote attackers… |
CVE-2018-6184 | High | 7.5 | 2018-01-24 | ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace. |
CVE-2018-5988 | Critical | 9.8 | 2018-01-24 | SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php. |
CVE-2018-5986 | Critical | 9.8 | 2018-01-24 | SQL Injection exists in Easy Car Script 2014 via the s_order or s_row parameter to site_search.php. |
CVE-2018-5985 | Critical | 9.8 | 2018-01-24 | SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request. |
CVE-2018-5984 | Critical | 9.8 | 2018-01-24 | SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH_INFO to the category/ URI. |
CVE-2018-5979 | Critical | 9.8 | 2018-01-24 | SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field. |
CVE-2018-5978 | Critical | 9.8 | 2018-01-24 | SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field. |
CVE-2018-5977 | Critical | 9.8 | 2018-01-24 | SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price_type=range&price= request. |
CVE-2018-5976 | High | 8.8 | 2018-01-24 | Cross Site Request Forgery (CSRF) exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password. |
CVE-2018-5972 | Critical | 9.8 | 2018-01-24 | SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI. |
CVE-2018-5969 | High | 8.8 | 2018-01-24 | Cross Site Request Forgery (CSRF) exists in Photography CMS 1.0 via clients/resources/ajax/ajax_new_admin.php, as demonstrated by adding an admin account. |
CVE-2018-5749 | Critical | 9.8 | 2018-01-23 | install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database… |
CVE-2018-5683 | Medium | 6.0 | 2018-01-23 | The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveragin… |
CVE-2018-5359 | High | 8.1 | 2018-01-23 | The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer Overf… |
CVE-2018-5950 | Medium | 6.1 | 2018-01-23 | Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-optio… |
CVE-2018-1000015 | Medium | 4.8 | 2018-01-23 | On Jenkins instances with Authorize Project plugin, the authentication associated with a build may lack the Computer/Build permission on some agents. This did… |
CVE-2018-1000014 | High | 8.8 | 2018-01-23 | Jenkins Translation Assistance Plugin 1.15 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing at… |
CVE-2018-1000013 | High | 8.8 | 2018-01-23 | Jenkins Release Plugin 2.9 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to trigg… |
CVE-2018-1000012 | High | 8.8 | 2018-01-23 | Jenkins Warnings Plugin 4.64 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissi… |
CVE-2018-1000011 | High | 8.8 | 2018-01-23 | Jenkins FindBugs Plugin 4.71 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissi… |
CVE-2018-1000010 | High | 8.8 | 2018-01-23 | Jenkins DRY Plugin 2.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions i… |
CVE-2018-1000009 | High | 8.8 | 2018-01-23 | Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permis… |
CVE-2018-1000008 | High | 8.8 | 2018-01-23 | Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions i… |
CVE-2018-6029 | High | 7.5 | 2018-01-23 | The copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote attackers to access the content of internal and external network r… |
CVE-2018-6022 | Medium | 6.5 | 2018-01-23 | Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitrary files… |
CVE-2018-6014 | Medium | 6.5 | 2018-01-23 | Subsonic v6.1.3 has an insecure allow-access-from domain="*" Flash cross-domain policy that allows an attacker to retrieve sensitive user information via a rea… |
CVE-2018-6013 | Medium | 5.4 | 2018-01-23 | Cross-site scripting (XSS) in BigTree 4.2.19 allows any remote users to inject arbitrary web script or HTML via the directory parameter. This issue exists in c… |
CVE-2018-0862 | High | 8.8 | 2018-01-22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
CVE-2018-0849 | High | 8.8 | 2018-01-22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
CVE-2018-0848 | High | 8.8 | 2018-01-22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
CVE-2018-0845 | High | 7.8 | 2018-01-22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
CVE-2018-6010 | High | 7.5 | 2018-01-22 | In Yii Framework 2.x before 2.0.14, remote attackers could obtain potentially sensitive information from exception messages, or exploit reflected XSS on the er… |
CVE-2018-6009 | High | 8.8 | 2018-01-22 | In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity. |
CVE-2018-6003 | High | 7.5 | 2018-01-22 | An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stac… |
CVE-2018-6002 | Medium | 6.1 | 2018-01-22 | The Soundy Background Music plugin 3.9 and below for WordPress has Cross-Site Scripting via soundy-background-music\templates\front-end.php (war_soundy_preview… |
CVE-2018-6001 | Medium | 6.1 | 2018-01-22 | The Soundy Audio Playlist plugin 4.6 and below for WordPress has Cross-Site Scripting via soundy-audio-playlist\templates\front-end.php (war_sdy_pl_preview par… |
CVE-2018-6000 | Critical | 9.8 | 2018-01-22 | An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for s… |
CVE-2018-5999 | Critical | 9.8 | 2018-01-22 | An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even… |
CVE-2018-1000003 | Low | 3.7 | 2018-01-22 | Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some… |
CVE-2018-1000002 | Low | 3.7 | 2018-01-22 | Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny exis… |
CVE-2018-5761 | High | 8.1 | 2018-01-22 | A man-in-the-middle vulnerability related to vCenter access was found in Rubrik CDM 3.x and 4.x before 4.0.4-p2. This vulnerability might expose Rubrik user cr… |
CVE-2018-1045 | Medium | 5.4 | 2018-01-22 | In Moodle 3.x, there is XSS via a calendar event name. |