2018 CVEs (page 16)
Page 16 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6176 | High | 7.8 | 2019-06-27 | Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process… |
CVE-2018-6171 | Medium | 5.7 | 2019-06-27 | Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentia… |
CVE-2018-6168 | Medium | 6.5 | 2019-06-27 | Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memo… |
CVE-2018-6161 | High | 8.8 | 2019-06-27 | Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page. |
CVE-2018-6159 | Medium | 6.5 | 2019-06-27 | Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information f… |
CVE-2018-6157 | High | 8.8 | 2019-06-27 | Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. |
CVE-2018-6156 | High | 8.8 | 2019-06-27 | Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a… |
CVE-2018-6155 | Medium | 6.5 | 2019-06-27 | Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a cr… |
CVE-2018-6154 | High | 8.8 | 2019-06-27 | Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2018-6150 | Medium | 6.5 | 2019-06-27 | Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2018-6149 | High | 8.8 | 2019-06-27 | Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. |
CVE-2018-6148 | Medium | 6.5 | 2019-06-27 | Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a cr… |
CVE-2018-6145 | Medium | 6.1 | 2019-06-27 | Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass same origin policy via a crafted HTML pa… |
CVE-2018-6142 | Medium | 6.5 | 2019-06-27 | Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF fil… |
CVE-2018-6138 | High | 8.1 | 2019-06-27 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extens… |
CVE-2018-6136 | Medium | 6.5 | 2019-06-27 | Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
CVE-2018-6134 | Medium | 6.5 | 2019-06-27 | Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. |
CVE-2018-6132 | Medium | 4.3 | 2019-06-27 | Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information from process memory v… |
CVE-2018-6131 | High | 8.8 | 2019-06-27 | Object lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2018-6130 | Medium | 6.5 | 2019-06-27 | Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory a… |
CVE-2018-6129 | Medium | 6.5 | 2019-06-27 | Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a… |
CVE-2018-6128 | Medium | 6.1 | 2019-06-27 | Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2018-6121 | High | 8.8 | 2019-06-27 | Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation via a crafted HTML… |
CVE-2018-6118 | High | 8.8 | 2019-06-27 | A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had… |
CVE-2018-20073 | Medium | 5.5 | 2019-06-27 | Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem. |
CVE-2018-17479 | High | 8.8 | 2019-06-27 | Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via… |
CVE-2018-17478 | High | 8.8 | 2019-06-27 | Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a cr… |
CVE-2018-17460 | Medium | 6.5 | 2019-06-27 | Insufficient data validation in filesystem URIs in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar)… |
CVE-2018-16086 | Medium | 5.4 | 2019-06-27 | Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extens… |
CVE-2018-16077 | Medium | 6.5 | 2019-06-27 | Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a crafted HTML page. |
CVE-2018-16075 | Medium | 5.3 | 2019-06-27 | Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a crafted HTML page. |
CVE-2018-16074 | Medium | 6.5 | 2019-06-27 | Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML… |
CVE-2018-16073 | Medium | 6.5 | 2019-06-27 | Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML… |
CVE-2018-16070 | High | 8.8 | 2019-06-27 | Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2018-16069 | Medium | 6.5 | 2019-06-27 | Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a cr… |
CVE-2018-16064 | Medium | 6.5 | 2019-06-27 | Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension… |
CVE-2018-15557 | High | 8.8 | 2019-06-27 | An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 devices. An attacker can statically set his/her IP to anything… |
CVE-2018-15556 | Critical | 9.8 | 2019-06-27 | The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level access with the user "root" and an empty password by using th… |
CVE-2018-1893 | Medium | 5.4 | 2019-06-27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… |
CVE-2018-1892 | Medium | 5.4 | 2019-06-27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… |
CVE-2018-1828 | Medium | 5.4 | 2019-06-27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… |
CVE-2018-1827 | Medium | 5.4 | 2019-06-27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… |
CVE-2018-1826 | Medium | 5.4 | 2019-06-27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… |
CVE-2018-1760 | Medium | 5.4 | 2019-06-27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… |
CVE-2018-1758 | Medium | 5.4 | 2019-06-27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… |
CVE-2018-1734 | Medium | 4.3 | 2019-06-27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to o… |
CVE-2018-20847 | High | 8.8 | 2019-06-26 | An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an i… |
CVE-2018-20846 | Medium | 6.5 | 2019-06-26 | Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG thro… |
CVE-2018-20845 | Medium | 6.5 | 2019-06-26 | Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers… |
CVE-2018-2013 | Medium | 5.3 | 2019-06-25 | IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in further attacks against the system. IB… |
CVE-2018-2011 | Medium | 5.3 | 2019-06-25 | IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an attac… |
CVE-2018-1858 | High | 8.8 | 2019-06-25 | IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… |
CVE-2018-20843 | High | 7.5 | 2019-06-24 | In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM a… |
CVE-2018-15735 | Medium | 5.5 | 2019-06-21 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the outpu… |
CVE-2018-15734 | Medium | 5.5 | 2019-06-21 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the outpu… |
CVE-2018-15733 | Medium | 5.5 | 2019-06-21 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a NULL Pointer Dereference vulnerability due to not validating t… |
CVE-2018-15732 | Medium | 5.5 | 2019-06-21 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the outpu… |
CVE-2018-15731 | Medium | 5.5 | 2019-06-21 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the outp… |
CVE-2018-15730 | Medium | 5.5 | 2019-06-21 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the outp… |
CVE-2018-15729 | Medium | 5.5 | 2019-06-21 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the outp… |
CVE-2018-15665 | Medium | 5.3 | 2019-06-21 | An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0. Unauthenticated users can get a list of user accounts. |
CVE-2018-15868 | Critical | 9.8 | 2019-06-21 | SQL injection vulnerability in ChronoScan version 1.5.4.3 and earlier allows an unauthenticated attacker to execute arbitrary SQL commands via the wcr_machinei… |
CVE-2018-15747 | Critical | 9.8 | 2019-06-21 | The default configuration of glot-www through 2018-05-19 allows remote attackers to execute arbitrary code because glot-code-runner supports os.system within a… |
CVE-2018-15737 | Medium | 5.5 | 2019-06-21 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the outp… |
CVE-2018-15736 | Medium | 5.5 | 2019-06-21 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the outp… |
CVE-2018-15913 | Medium | 6.1 | 2019-06-20 | An issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera Manager uses a 'returnUrl' parameter to redirect the user to anoth… |
CVE-2018-16118 | High | 8.1 | 2019-06-20 | A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to execu… |
CVE-2018-16117 | High | 8.8 | 2019-06-20 | A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitr… |
CVE-2018-16116 | High | 8.8 | 2019-06-20 | SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary SQ… |
CVE-2018-15892 | Medium | 4.3 | 2019-06-20 | FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page. |
CVE-2018-15891 | Medium | 4.8 | 2019-06-20 | An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able t… |
CVE-2018-15890 | Critical | 9.8 | 2019-06-20 | An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization in ois.readObject in mine/Ethash.java and decoder.readObject in crypto/ECKey.java… |
CVE-2018-16248 | Medium | 6.1 | 2019-06-20 | b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of "articleTags" stored in the "tag" JSON field, which allows remote at… |
CVE-2018-16247 | Medium | 5.4 | 2019-06-20 | YzmCMS 5.1 has XSS via the admin/system_manage/user_config_add.html title parameter. |
CVE-2018-16119 | High | 7.2 | 2019-06-20 | Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious Medi… |
CVE-2018-16553 | High | 7.2 | 2019-06-20 | In Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after logging in as web admin. |
CVE-2018-16514 | Medium | 4.7 | 2019-06-20 | A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) and Edit Filter page (manage_filter_edit_page.php) in MantisBT 2.1… |
CVE-2018-16251 | Medium | 4.3 | 2019-06-20 | A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin… |
CVE-2018-16250 | Medium | 5.4 | 2019-06-20 | The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name"… |
CVE-2018-16249 | Medium | 4.8 | 2019-06-20 | In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, and executes a payloa… |
CVE-2018-9564 | Medium | 6.5 | 2019-06-19 | In llcp_util_parse_link_params of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information discl… |
CVE-2018-9563 | Medium | 6.5 | 2019-06-19 | In llcp_util_parse_cc of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure wit… |
CVE-2018-9561 | Medium | 6.5 | 2019-06-19 | In llcp_util_parse_connect of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2018-16595 | Medium | 6.5 | 2019-06-19 | The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow. |
CVE-2018-16594 | High | 8.1 | 2019-06-19 | The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal. |
CVE-2018-16593 | High | 8.8 | 2019-06-19 | The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection. |
CVE-2018-17388 | Critical | 9.8 | 2019-06-19 | SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to login_check.php, or the id parameter to add_email.php or ed… |
CVE-2018-17387 | High | 8.8 | 2019-06-19 | CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account. |
CVE-2018-17386 | Critical | 9.8 | 2019-06-19 | SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH_INFO to mydeals/ or listdeals/. |
CVE-2018-17381 | Critical | 9.8 | 2019-06-19 | SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order parameter. |
CVE-2018-17374 | Critical | 9.8 | 2019-06-19 | SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter. |
CVE-2018-17148 | Critical | 9.8 | 2019-06-19 | An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configuration snapshot page) in Nagios XI before… |
CVE-2018-17146 | Medium | 5.4 | 2019-06-19 | A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page. Exploitation of this vulner… |
CVE-2018-17079 | Medium | 6.1 | 2019-06-19 | An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area. |
CVE-2018-16618 | Critical | 9.8 | 2019-06-19 | VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x se… |
CVE-2018-16613 | Critical | 9.8 | 2019-06-19 | An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalate privilege to the f… |
CVE-2018-17842 | Critical | 9.8 | 2019-06-19 | SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels h_room_type parameter. |
CVE-2018-17841 | Critical | 9.8 | 2019-06-19 | SQL injection exists in Scriptzee Flippa Marketplace Clone 1.0 via the site-search sortBy or sortDir parameter. |
CVE-2018-17840 | Critical | 9.8 | 2019-06-19 | SQL injection exists in Scriptzee Education Website 1.0 via the college_list.html subject, city, or country parameter. |
CVE-2018-17423 | Medium | 4.8 | 2019-06-19 | An issue was discovered in e107 v2.1.9. There is a XSS attack on e107_admin/comment.php. |