2018 CVEs (page 18)
Page 18 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19465 | Medium | 6.1 | 2019-06-07 | Maccms through 8.0 allows XSS via the site_keywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/system_config.html, relate… |
CVE-2018-19462 | High | 7.2 | 2019-06-07 | admin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code via SQL injection that uses a .php filename in a SELECT INTO… |
CVE-2018-19461 | Medium | 4.8 | 2019-06-07 | admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php. |
CVE-2018-19452 | High | 7.8 | 2019-06-07 | A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Pro… |
CVE-2018-19451 | High | 7.8 | 2019-06-07 | A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field… |
CVE-2018-5264 | Medium | 5.9 | 2019-06-07 | Ubiquiti UniFi 52 devices, when Hotspot mode is used, allow remote attackers to bypass intended restrictions on "free time" Wi-Fi usage by sending a /guest/s/d… |
CVE-2018-20523 | Medium | 5.3 | 2019-06-07 | Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-part… |
CVE-2018-20135 | High | 8.1 | 2019-06-07 | Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle at… |
CVE-2018-20091 | Critical | 9.9 | 2019-06-07 | An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allow any authenticated user to run arbitrar… |
CVE-2018-20014 | High | 7.5 | 2019-06-07 | In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFi… |
CVE-2018-6185 | Medium | 4.9 | 2019-06-07 | In Cloudera Navigator Key Trustee KMS 5.12 and 5.13, incorrect default ACL values allow remote access to purge and undelete API calls on encryption zone keys… |
CVE-2018-5798 | Medium | 6.1 | 2019-06-07 | This CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager. |
CVE-2018-5265 | High | 7.2 | 2019-06-07 | Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg… |
CVE-2018-9839 | Medium | 6.5 | 2019-06-06 | An issue was discovered in MantisBT through 1.3.14, and 2.0.0. Using a crafted request on bug_report_page.php (modifying the 'm_id' parameter), any user with R… |
CVE-2018-8047 | Medium | 6.1 | 2019-06-06 | vtiger CRM 7.0.1 is affected by one reflected Cross-Site Scripting (XSS) vulnerability affecting version 7.0.1 and probably prior versions. This vulnerability… |
CVE-2018-2028 | Medium | 6.5 | 2019-06-06 | IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain high… |
CVE-2018-10171 | Critical | 9.8 | 2019-06-05 | Kromtech MacKeeper 3.20.4 suffers from a root privilege escalation vulnerability through its `com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPrivilegedHelper` comp… |
CVE-2018-7125 | Medium | 6.3 | 2019-06-05 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. |
CVE-2018-7124 | Critical | 9.8 | 2019-06-05 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. |
CVE-2018-7123 | High | 7.5 | 2019-06-05 | A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. |
CVE-2018-7122 | Medium | 5.3 | 2019-06-05 | A remote disclosure of information vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. |
CVE-2018-7121 | Critical | 9.8 | 2019-06-05 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. |
CVE-2018-18571 | Critical | 9.1 | 2019-06-05 | An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An at… |
CVE-2018-13384 | Medium | 6.1 | 2019-06-04 | A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HT… |
CVE-2018-13382 | Critical | 9.1 | 2019-06-04 | An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1… |
CVE-2018-13381 | Medium | 5.3 | 2019-06-04 | A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier… |
CVE-2018-13380 | Medium | 4.7 | 2019-06-04 | A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FortiProxy 2.0.0, 1… |
CVE-2018-13379 | Critical | 9.1 | 2019-06-04 | An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and Fo… |
CVE-2018-5406 | High | 8.8 | 2019-06-03 | The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows a remote attacker to exploit the misconfigured Cross-Origin Resource Sharing (CORS) mechanism… |
CVE-2018-5405 | Medium | 5.4 | 2019-06-03 | The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated least privileged user with 'User Console Only' rights to potentially inject… |
CVE-2018-5404 | Medium | 6.5 | 2019-06-03 | The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated, remote attacker with least privileges ('User Console Only' role) to potenti… |
CVE-2018-20815 | Critical | 9.8 | 2019-05-31 | In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk. |
CVE-2018-14425 | Medium | 6.1 | 2019-05-30 | There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite (ZCS) Zimbra Web Client (ZWC) 8.8.8 before 8.8.8 Patch… |
CVE-2018-10948 | Medium | 4.8 | 2019-05-30 | Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs. |
CVE-2018-9193 | High | 7.8 | 2019-05-30 | A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabili… |
CVE-2018-9191 | High | 7.8 | 2019-05-30 | A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe… |
CVE-2018-4048 | High | 7.8 | 2019-05-30 | An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows 64-bit In… |
CVE-2018-13368 | High | 7.8 | 2019-05-30 | A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attacker to execute unauthorized code or commands via the command inj… |
CVE-2018-8029 | High | 8.8 | 2019-05-30 | In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run arbitrary commands a… |
CVE-2018-20840 | High | 8.6 | 2019-05-30 | An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party… |
CVE-2018-15131 | Medium | 5.3 | 2019-05-30 | An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 b… |
CVE-2018-12130 | Medium | 5.9 | 2019-05-30 | Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to p… |
CVE-2018-12127 | Medium | 5.6 | 2019-05-30 | Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to poten… |
CVE-2018-12126 | Medium | 5.6 | 2019-05-30 | Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to… |
CVE-2018-20160 | Critical | 9.8 | 2019-05-29 | ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks… |
CVE-2018-18631 | Medium | 6.1 | 2019-05-29 | mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8 before 8.8.10 Patch 2 has Persistent XSS. |
CVE-2018-14013 | Medium | 6.1 | 2019-05-29 | Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients. |
CVE-2018-13365 | Medium | 5.3 | 2019-05-29 | An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via… |
CVE-2018-19978 | High | 8.0 | 2019-05-29 | A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker (au… |
CVE-2018-19977 | High | 8.0 | 2019-05-29 | A command injection (missing input validation, escaping) in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows… |
CVE-2018-16221 | High | 8.0 | 2019-05-29 | The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) does not validate (escape) the path information (path trave… |
CVE-2018-16218 | High | 8.8 | 2019-05-29 | A CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware version 66.83.0.35 allows a remote attacker t… |
CVE-2018-16217 | High | 8.8 | 2019-05-29 | The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) allows a remote authenticated attacker to trigger… |
CVE-2018-13383 | Medium | 4.3 | 2019-05-29 | A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and… |
CVE-2018-20008 | Medium | 6.8 | 2019-05-28 | iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials (plain t… |
CVE-2018-13375 | Medium | 6.1 | 2019-05-28 | An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DH… |
CVE-2018-17198 | Critical | 9.8 | 2019-05-28 | Server-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2.0 and earlier unsupported versions relies on Java SAX Parser… |
CVE-2018-17843 | Critical | 9.8 | 2019-05-24 | SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0… |
CVE-2018-12624 | Medium | 6.1 | 2019-05-24 | An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter. |
CVE-2018-19613 | Medium | 6.5 | 2019-05-24 | Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF. |
CVE-2018-19612 | High | 8.8 | 2019-05-24 | The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code. |
CVE-2018-18060 | Medium | 5.3 | 2019-05-24 | An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd parser that results from a lack of proper… |
CVE-2018-18059 | Medium | 5.3 | 2019-05-24 | An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper val… |
CVE-2018-18058 | Medium | 5.3 | 2019-05-24 | An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of proper val… |
CVE-2018-13925 | Critical | 9.8 | 2019-05-24 | Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free issu… |
CVE-2018-13920 | High | 7.8 | 2019-05-24 | Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon Consumer IOT, Snapd… |
CVE-2018-13899 | High | 7.8 | 2019-05-24 | Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2018-13895 | High | 7.8 | 2019-05-24 | Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access to phone in Snapdra… |
CVE-2018-13887 | Critical | 9.8 | 2019-05-24 | Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industr… |
CVE-2018-13886 | Critical | 9.8 | 2019-05-24 | Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Con… |
CVE-2018-13885 | Medium | 5.5 | 2019-05-24 | Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn… |
CVE-2018-12013 | High | 7.8 | 2019-05-24 | Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electr… |
CVE-2018-12012 | High | 7.8 | 2019-05-24 | While updating blacklisting region shared buffered memory region is not validated against newly updated black list, causing boot-up to be compromised in Snapdr… |
CVE-2018-12005 | Medium | 5.5 | 2019-05-24 | An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT… |
CVE-2018-12004 | Medium | 5.5 | 2019-05-24 | Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Con… |
CVE-2018-11976 | Medium | 5.5 | 2019-05-24 | ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CVE-2018-11968 | High | 7.8 | 2019-05-24 | Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electro… |
CVE-2018-11967 | High | 7.8 | 2019-05-24 | Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocat… |
CVE-2018-11953 | Critical | 9.8 | 2019-05-24 | While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer E… |
CVE-2018-11949 | Critical | 9.8 | 2019-05-24 | Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… |
CVE-2018-11940 | Critical | 9.8 | 2019-05-24 | Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2018-11937 | Critical | 9.8 | 2019-05-24 | Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr… |
CVE-2018-11936 | Critical | 9.8 | 2019-05-24 | Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memory access. in Snapd… |
CVE-2018-11930 | Critical | 9.8 | 2019-05-24 | Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in… |
CVE-2018-11928 | High | 7.8 | 2019-05-24 | Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… |
CVE-2018-11927 | High | 7.8 | 2019-05-24 | Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find event from firmware in Snapdrag… |
CVE-2018-11925 | High | 7.8 | 2019-05-24 | Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2018-11924 | High | 7.8 | 2019-05-24 | Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer El… |
CVE-2018-11923 | High | 7.8 | 2019-05-24 | Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, Snapdragon Compute… |
CVE-2018-11271 | Critical | 9.8 | 2019-05-24 | Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec… |
CVE-2018-10815 | Medium | 6.5 | 2019-05-24 | An issue was discovered in Cloudera Manager before 5.13.4, 5.14.x before 5.14.4, and 5.15.x before 5.15.1. A read-only user can access sensitive cluster inform… |
CVE-2018-19614 | Medium | 6.1 | 2019-05-23 | XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers. |
CVE-2018-15664 | High | 7.5 | 2019-05-23 | In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving… |
CVE-2018-7857 | High | 7.5 | 2019-05-22 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a… |
CVE-2018-7856 | High | 7.5 | 2019-05-22 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a… |
CVE-2018-7855 | High | 7.5 | 2019-05-22 | A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a D… |
CVE-2018-7854 | High | 7.5 | 2019-05-22 | A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a d… |
CVE-2018-7853 | High | 7.5 | 2019-05-22 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause de… |
CVE-2018-7844 | High | 7.5 | 2019-05-22 | A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause… |
CVE-2018-7803 | Medium | 5.9 | 2019-05-22 | A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TriStation Emulator V1.2.0, which could cause the emulator to c… |