2018 CVEs (page 158)
Page 158 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1044 | Medium | 4.3 | 2018-01-22 | In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings. |
CVE-2018-1043 | Medium | 6.5 | 2018-01-22 | In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames. |
CVE-2018-1042 | Medium | 6.5 | 2018-01-22 | Moodle 3.x has Server Side Request Forgery in the filepicker. |
CVE-2018-5968 | High | 8.1 | 2018-01-22 | FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-75… |
CVE-2018-5962 | Medium | 6.1 | 2018-01-22 | index.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpini_editor module or the email_address par… |
CVE-2018-5961 | Medium | 6.1 | 2018-01-22 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the `module` value of the `index.php` file. |
CVE-2018-5960 | High | 8.8 | 2018-01-22 | Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or admin_boxes.ajax.php in the `Categories - Edit` module. |
CVE-2018-5958 | High | 7.8 | 2018-01-21 | In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact bec… |
CVE-2018-5957 | High | 7.8 | 2018-01-21 | In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact bec… |
CVE-2018-5956 | High | 7.8 | 2018-01-21 | In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact bec… |
CVE-2018-5955 | Critical | 9.8 | 2018-01-21 | An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to t… |
CVE-2018-1362 | Medium | 5.0 | 2018-01-19 | IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted a… |
CVE-2018-5786 | Medium | 5.5 | 2018-01-19 | In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the get_fileinfo function (lrzip.c). Remote attackers could leverage thi… |
CVE-2018-5785 | Medium | 6.5 | 2018-01-19 | In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote attackers c… |
CVE-2018-5784 | Medium | 6.5 | 2018-01-19 | In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerabili… |
CVE-2018-5783 | Medium | 5.5 | 2018-01-19 | In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could lever… |
CVE-2018-5776 | Medium | 6.1 | 2018-01-18 | WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement (under wp-includes/js/mediaelement). |
CVE-2018-5773 | Medium | 6.1 | 2018-01-18 | An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is flaw… |
CVE-2018-5772 | Medium | 5.5 | 2018-01-18 | In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote att… |
CVE-2018-5766 | High | 8.8 | 2018-01-18 | In Libav through 12.2, there is an invalid memcpy in the av_packet_ref function of libavcodec/avpacket.c. Remote attackers could leverage this vulnerability to… |
CVE-2018-0115 | Medium | 6.7 | 2018-01-18 | A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to execute arbit… |
CVE-2018-0111 | Medium | 5.3 | 2018-01-18 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker coul… |
CVE-2018-0110 | High | 8.1 | 2018-01-18 | A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access the remote support account even after it has been disabl… |
CVE-2018-0109 | Low | 2.7 | 2018-01-18 | A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application. An attacker could… |
CVE-2018-0108 | Medium | 5.3 | 2018-01-18 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to collect customer files via an out-of-band XML External Entity… |
CVE-2018-0107 | High | 8.8 | 2018-01-18 | A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unwanted actions on an affected… |
CVE-2018-0106 | Low | 3.3 | 2018-01-18 | A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive informati… |
CVE-2018-0105 | Medium | 5.3 | 2018-01-18 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulner… |
CVE-2018-0102 | High | 7.4 | 2018-01-18 | A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting i… |
CVE-2018-0100 | Medium | 4.4 | 2018-01-18 | A vulnerability in the Profile Editor of the Cisco AnyConnect Secure Mobility Client could allow an unauthenticated, local attacker to have read and write acce… |
CVE-2018-0099 | High | 8.8 | 2018-01-18 | A vulnerability in the web management GUI of the Cisco D9800 Network Transport Receiver could allow an authenticated, remote attacker to perform a command inje… |
CVE-2018-0098 | Medium | 6.1 | 2018-01-18 | A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power over Ethernet (PoE) and WAP361 Wireless-… |
CVE-2018-0097 | Medium | 6.1 | 2018-01-18 | A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page… |
CVE-2018-0096 | Medium | 5.9 | 2018-01-18 | A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to perform a… |
CVE-2018-0095 | High | 7.8 | 2018-01-18 | A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allo… |
CVE-2018-0094 | High | 7.5 | 2018-01-18 | A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (… |
CVE-2018-0093 | Medium | 6.1 | 2018-01-18 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflec… |
CVE-2018-0092 | High | 7.1 | 2018-01-18 | A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenticated, local attacker to improperly del… |
CVE-2018-0091 | Medium | 6.1 | 2018-01-18 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a Docu… |
CVE-2018-0090 | High | 7.5 | 2018-01-18 | A vulnerability in management interface access control list (ACL) configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker… |
CVE-2018-0089 | High | 7.5 | 2018-01-18 | A vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy Suite (CPS) could allow an unauthenticated, remote attacker to access sens… |
CVE-2018-0088 | Medium | 6.7 | 2018-01-18 | A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software could allow an authenti… |
CVE-2018-0086 | High | 8.6 | 2018-01-18 | A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to cause a denial of… |
CVE-2018-2733 | High | 7.6 | 2018-01-18 | Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported version that is affected is 11.1.2.4.007. Di… |
CVE-2018-2732 | Medium | 6.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Financial Services Applications (subcompone… |
CVE-2018-2731 | Medium | 5.4 | 2018-01-18 | Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). Supported versio… |
CVE-2018-2730 | Medium | 6.4 | 2018-01-18 | Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Cross Pillar). The supported version that is aff… |
CVE-2018-2729 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Applications (subcomponent: User Interface). Suppo… |
CVE-2018-2728 | Medium | 6.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Applications (subcomponent: User Interface). Suppo… |
CVE-2018-2727 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Services Applications (subcomponent: User I… |
CVE-2018-2726 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Market Risk component of Oracle Financial Services Applications (subcomponent: User Interface). The supported ve… |
CVE-2018-2725 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations component of Oracle Financial Services Applications (subcomponent: User Int… |
CVE-2018-2724 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications (subcomponent: User I… |
CVE-2018-2723 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Asset Liability Management component of Oracle Financial Services Applications (subcomponent: User Interface). S… |
CVE-2018-2722 | Medium | 6.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Price Creation and Discovery component of Oracle Financial Services Applications (subcomponent: User Interface)… |
CVE-2018-2721 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Price Creation and Discovery component of Oracle Financial Services Applications (subcomponent: User Interface)… |
CVE-2018-2720 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Liquidity Risk Management component of Oracle Financial Services Applications (subcomponent: User Interface). Th… |
CVE-2018-2719 | Medium | 6.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations component of Oracle Financial Services Applications (subcomponent: User Int… |
CVE-2018-2717 | Medium | 6.6 | 2018-01-18 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SPARC Platform). Supported versions that are affected are 10 and 11… |
CVE-2018-2716 | Medium | 6.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Services Applications (subcomponent: User I… |
CVE-2018-2715 | Medium | 6.5 | 2018-01-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: BI Platform Security). Supported vers… |
CVE-2018-2714 | Medium | 6.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Market Risk component of Oracle Financial Services Applications (subcomponent: User Interface). The supported ve… |
CVE-2018-2713 | High | 8.2 | 2018-01-18 | Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). Supported versions that are af… |
CVE-2018-2712 | Medium | 6.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications (subcomponent: User I… |
CVE-2018-2711 | High | 8.2 | 2018-01-18 | Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: Security Framework). Supported versions that are affected are 11.1… |
CVE-2018-2710 | High | 7.5 | 2018-01-18 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 10. Easily exploi… |
CVE-2018-2709 | Medium | 5.3 | 2018-01-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-2708 | Medium | 5.3 | 2018-01-18 | Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are aff… |
CVE-2018-2707 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-2706 | High | 8.8 | 2018-01-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-2705 | High | 8.8 | 2018-01-18 | Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are aff… |
CVE-2018-2704 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are aff… |
CVE-2018-2703 | Medium | 6.5 | 2018-01-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.6.38 and… |
CVE-2018-2702 | Medium | 6.5 | 2018-01-18 | Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affec… |
CVE-2018-2701 | High | 7.6 | 2018-01-18 | Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The sup… |
CVE-2018-2700 | High | 7.5 | 2018-01-18 | Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The sup… |
CVE-2018-2699 | Medium | 6.1 | 2018-01-18 | Vulnerability in the Application Express component of Oracle Database Server. The supported version that is affected is Prior to 5.1.4.00.08. Easily exploitabl… |
CVE-2018-2698 | High | 8.8 | 2018-01-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and… |
CVE-2018-2697 | Critical | 9.1 | 2018-01-18 | Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The sup… |
CVE-2018-2696 | High | 7.5 | 2018-01-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.6.38 and… |
CVE-2018-2695 | Medium | 6.5 | 2018-01-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are… |
CVE-2018-2694 | High | 8.8 | 2018-01-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and… |
CVE-2018-2693 | High | 8.2 | 2018-01-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Guest Additions). Supported versions that are affected are Prior to… |
CVE-2018-2692 | Medium | 6.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Asset Liability Management component of Oracle Financial Services Applications (subcomponent: User Interface). S… |
CVE-2018-2691 | Medium | 5.4 | 2018-01-18 | Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Proxy User Delegation). Supported versions that are affected ar… |
CVE-2018-2690 | High | 8.6 | 2018-01-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and… |
CVE-2018-2689 | High | 8.6 | 2018-01-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and… |
CVE-2018-2688 | High | 8.6 | 2018-01-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and… |
CVE-2018-2687 | High | 8.6 | 2018-01-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and… |
CVE-2018-2686 | High | 8.6 | 2018-01-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and… |
CVE-2018-2685 | High | 8.6 | 2018-01-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and… |
CVE-2018-2684 | Medium | 4.9 | 2018-01-18 | Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Registration Process). Supported versions that are affected are… |
CVE-2018-2683 | High | 7.5 | 2018-01-18 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that are affected are 2.7… |
CVE-2018-2682 | Medium | 6.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Liquidity Risk Management component of Oracle Financial Services Applications (subcomponent: User Interface). Th… |
CVE-2018-2681 | Medium | 5.4 | 2018-01-18 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is… |
CVE-2018-2680 | High | 8.3 | 2018-01-18 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Difficult to exploi… |
CVE-2018-2679 | High | 8.1 | 2018-01-18 | Vulnerability in the Oracle Financial Services Profitability Management component of Oracle Financial Services Applications (subcomponent: User Interface). Sup… |
CVE-2018-2678 | Medium | 4.3 | 2018-01-18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u1… |
CVE-2018-2677 | Medium | 4.3 | 2018-01-18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161… |
CVE-2018-2676 | High | 8.2 | 2018-01-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and… |