2018 CVEs (page 17)
Page 17 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17399 | Critical | 9.8 | 2019-06-19 | SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter. |
CVE-2018-17398 | Critical | 9.8 | 2019-06-19 | SQL Injection exists in the AMGallery 1.2.3 component for Joomla! via the filter_category_id parameter. |
CVE-2018-17393 | Critical | 9.8 | 2019-06-19 | SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php. |
CVE-2018-17389 | High | 8.8 | 2019-06-19 | CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account. |
CVE-2018-15506 | Critical | 9.8 | 2019-06-19 | In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauth… |
CVE-2018-19878 | Medium | 6.5 | 2019-06-19 | An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every successful login request… |
CVE-2018-18863 | Medium | 6.5 | 2019-06-19 | NGA ResourceLink 20.0.2.1 allows local file inclusion. |
CVE-2018-18758 | Critical | 9.8 | 2019-06-19 | Open Faculty Evaluation System 7 for PHP 7 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18757. |
CVE-2018-18757 | Critical | 9.8 | 2019-06-19 | Open Faculty Evaluation System 5.6 for PHP 5.6 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18758. |
CVE-2018-18472 | Critical | 9.8 | 2019-06-19 | Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/l… |
CVE-2018-18471 | Critical | 9.8 | 2019-06-19 | /api/2.0/rest/aggregator/xml in Axentra firmware, used by NETGEAR Stora, Seagate GoFlex Home, and MEDION LifeCloud, has an XXE vulnerability that can be chaine… |
CVE-2018-18425 | Medium | 6.5 | 2019-06-19 | The doAirdrop function of a smart contract implementation for Primeo (PEO), an Ethereum token, does not check the numerical relationship between the amount of… |
CVE-2018-18406 | Critical | 9.9 | 2019-06-19 | An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affected by a blind XXE vulnerability when a… |
CVE-2018-18839 | Medium | 5.3 | 2019-06-18 | An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional. |
CVE-2018-18838 | High | 7.5 | 2019-06-18 | An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry. |
CVE-2018-18837 | Medium | 6.1 | 2019-06-18 | An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web… |
CVE-2018-18836 | Medium | 6.5 | 2019-06-18 | An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api… |
CVE-2018-18802 | High | 8.8 | 2019-06-18 | The Tubigan "Welcome to our Resort" 1.0 software allows CSRF via admin/mod_users/controller.php?action=edit. |
CVE-2018-18878 | High | 7.5 | 2019-06-18 | In firmware version MS_2.6.9900 of Columbia Weather MicroServer, the BACnet daemon does not properly validate input, which could allow a remote attacker to sen… |
CVE-2018-18877 | High | 8.8 | 2019-06-18 | In firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can access an alternative configuration page config_main.php that al… |
CVE-2018-18876 | Medium | 5.3 | 2019-06-18 | In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a readouts_rd.php directory traversal issue makes it possible to read any file present on the… |
CVE-2018-18875 | Medium | 5.4 | 2019-06-18 | In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a stored Cross-site scripting (XSS) vulnerability allows remote authenticated users to inject… |
CVE-2018-18852 | High | 8.8 | 2019-06-18 | Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi… |
CVE-2018-18944 | High | 7.5 | 2019-06-18 | Artha ~ The Open Thesaurus 1.0.3.0 has a Buffer Overflow. |
CVE-2018-18886 | Medium | 6.1 | 2019-06-18 | Helpy v2.1.0 has Stored XSS via the Ticket title. |
CVE-2018-18880 | Medium | 5.4 | 2019-06-18 | In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a networkdiags.php reflected Cross-site scripting (XSS) vulnerability allows remote authentica… |
CVE-2018-18879 | High | 8.8 | 2019-06-18 | In firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can pipe commands directly to the underlying operating system as use… |
CVE-2018-20013 | High | 7.5 | 2019-06-18 | In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::Proce… |
CVE-2018-18958 | Medium | 6.5 | 2019-06-17 | OPNsense 18.7.x before 18.7.7 has Incorrect Access Control. |
CVE-2018-19450 | High | 7.8 | 2019-06-17 | A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action. An attacker can leverage t… |
CVE-2018-19449 | High | 7.8 | 2019-06-17 | A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. A… |
CVE-2018-19448 | High | 7.8 | 2019-06-17 | In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control… |
CVE-2018-19447 | High | 7.8 | 2019-06-17 | A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string. An attacker can l… |
CVE-2018-19446 | High | 7.8 | 2019-06-17 | A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is us… |
CVE-2018-19445 | High | 7.8 | 2019-06-17 | A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is us… |
CVE-2018-19444 | High | 7.8 | 2019-06-17 | A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Profes… |
CVE-2018-19146 | Medium | 4.8 | 2019-06-17 | Concrete5 8.4.3 has XSS because config/concrete.php allows uploads (by administrators) of SVG files that may contain HTML data with a SCRIPT element. |
CVE-2018-1845 | High | 7.1 | 2019-06-17 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacke… |
CVE-2018-10239 | Medium | 6.7 | 2019-06-17 | A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated administrator to te… |
CVE-2018-20472 | Medium | 5.4 | 2019-06-17 | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS. |
CVE-2018-20470 | High | 7.5 | 2019-06-17 | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the web reports module… |
CVE-2018-20469 | Critical | 9.8 | 2019-06-17 | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to h2 SQL injection. This can be exploite… |
CVE-2018-20468 | High | 8.8 | 2019-06-17 | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An… |
CVE-2018-6350 | Critical | 9.8 | 2019-06-14 | An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, Wh… |
CVE-2018-6349 | Critical | 9.8 | 2019-06-14 | When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affe… |
CVE-2018-6339 | Critical | 9.8 | 2019-06-14 | When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant… |
CVE-2018-5913 | High | 7.8 | 2019-06-14 | A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… |
CVE-2018-5911 | High | 7.8 | 2019-06-14 | Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn… |
CVE-2018-5903 | High | 7.8 | 2019-06-14 | Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IO… |
CVE-2018-5883 | High | 7.8 | 2019-06-14 | Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT… |
CVE-2018-3583 | High | 7.8 | 2019-06-14 | A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT… |
CVE-2018-20655 | Critical | 9.8 | 2019-06-14 | When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects… |
CVE-2018-13919 | High | 7.8 | 2019-06-14 | Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Snapdragon Auto, Snapd… |
CVE-2018-13911 | Critical | 9.8 | 2019-06-14 | Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapd… |
CVE-2018-13910 | High | 7.8 | 2019-06-14 | Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Co… |
CVE-2018-13909 | High | 7.0 | 2019-06-14 | Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon… |
CVE-2018-13908 | High | 7.8 | 2019-06-14 | Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2018-13907 | Medium | 5.3 | 2019-06-14 | While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations are invoked in Snap… |
CVE-2018-13906 | Critical | 9.1 | 2019-06-14 | The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Aut… |
CVE-2018-13902 | High | 7.5 | 2019-06-14 | Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdr… |
CVE-2018-13901 | Medium | 5.5 | 2019-06-14 | Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto, Snapdragon Connectivi… |
CVE-2018-13898 | Critical | 9.8 | 2019-06-14 | Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon… |
CVE-2018-11955 | Critical | 9.8 | 2019-06-14 | Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Sn… |
CVE-2018-11947 | Medium | 5.5 | 2019-06-14 | The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity… |
CVE-2018-11942 | Medium | 5.5 | 2019-06-14 | Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory to FW in Snapdragon… |
CVE-2018-11939 | High | 7.8 | 2019-06-14 | Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CVE-2018-11934 | High | 7.8 | 2019-06-14 | Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connec… |
CVE-2018-11929 | High | 7.8 | 2019-06-14 | Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago… |
CVE-2018-11819 | High | 7.8 | 2019-06-14 | Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CVE-2018-10947 | Low | 3.1 | 2019-06-13 | An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is rebooted. |
CVE-2018-10946 | Medium | 6.8 | 2019-06-13 | An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the admin user's password… |
CVE-2018-3702 | High | 7.8 | 2019-06-13 | Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authenticated user to pote… |
CVE-2018-12147 | Medium | 6.7 | 2019-06-13 | Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted… |
CVE-2018-20841 | Critical | 9.8 | 2019-06-11 | HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parame… |
CVE-2018-11801 | Critical | 9.8 | 2019-06-11 | SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a m_center data related table. |
CVE-2018-11800 | Critical | 9.8 | 2019-06-11 | SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on the GroupSummaryCounts related ta… |
CVE-2018-20356 | Critical | 9.8 | 2019-06-10 | An invalid read of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded We… |
CVE-2018-20355 | Critical | 9.8 | 2019-06-10 | An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded W… |
CVE-2018-20354 | Critical | 9.8 | 2019-06-10 | An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Emb… |
CVE-2018-20353 | Critical | 9.8 | 2019-06-10 | An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose… |
CVE-2018-20352 | High | 8.8 | 2019-06-10 | Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial o… |
CVE-2018-10703 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any iss… |
CVE-2018-10702 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any iss… |
CVE-2018-10701 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any iss… |
CVE-2018-10700 | Medium | 6.1 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same… |
CVE-2018-10699 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator can upload a certifica… |
CVE-2018-10698 | Critical | 9.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able t… |
CVE-2018-10697 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls to check i… |
CVE-2018-10696 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interf… |
CVE-2018-10695 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there a… |
CVE-2018-10694 | High | 8.1 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not use any encryption mechanism by default… |
CVE-2018-10693 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network i… |
CVE-2018-10692 | Medium | 6.1 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who is able to… |
CVE-2018-10691 | High | 7.5 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log (the system log). However, the same fun… |
CVE-2018-10690 | High | 8.1 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user… |
CVE-2018-19999 | High | 7.8 | 2019-06-07 | The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the… |
CVE-2018-19860 | High | 8.8 | 2019-06-07 | Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly rest… |
CVE-2018-19802 | High | 7.5 | 2019-06-07 | aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference. |
CVE-2018-19801 | High | 7.5 | 2019-06-07 | aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid n_filters. |
CVE-2018-19800 | Critical | 9.8 | 2019-06-07 | aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo. |