2018 CVEs (page 26)
Page 26 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19488 | Critical | 9.8 | 2019-03-21 | The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_reset_pass() function through the admin-ajax.php file, whi… |
CVE-2018-19487 | High | 7.5 | 2019-03-21 | The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_employer_ajax_profile() function through the admin-ajax.ph… |
CVE-2018-19365 | Critical | 9.1 | 2019-03-21 | The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP req… |
CVE-2018-19276 | Critical | 9.8 | 2019-03-21 | OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the… |
CVE-2018-19191 | Medium | 5.4 | 2019-03-21 | Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall par… |
CVE-2018-19158 | High | 7.5 | 2019-03-21 | ColossusCoinXT through 1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a sm… |
CVE-2018-18898 | High | 7.5 | 2019-03-21 | The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity att… |
CVE-2018-18882 | Medium | 5.4 | 2019-03-21 | A stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware… |
CVE-2018-18881 | Medium | 6.5 | 2019-03-21 | A Denial of Service (DOS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v… |
CVE-2018-18862 | High | 8.8 | 2019-03-21 | BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Detai… |
CVE-2018-18849 | Medium | 5.5 | 2019-03-21 | In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value. |
CVE-2018-18845 | Medium | 6.1 | 2019-03-21 | internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-si… |
CVE-2018-18798 | Critical | 9.8 | 2019-03-21 | Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=vi… |
CVE-2018-18762 | Medium | 6.5 | 2019-03-21 | SaltOS 3.1 r8126 contains a database download vulnerability. |
CVE-2018-18473 | Critical | 9.8 | 2019-03-21 | A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Se… |
CVE-2018-18466 | High | 7.0 | 2019-03-21 | An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credential… |
CVE-2018-18435 | High | 7.8 | 2019-03-21 | KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any user full permission "Everyone: (F)" t… |
CVE-2018-1836 | Medium | 5.4 | 2019-03-21 | IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit… |
CVE-2018-17997 | Medium | 6.1 | 2019-03-21 | LayerBB 1.1.1 allows XSS via the titles of conversations (PMs). |
CVE-2018-17996 | Medium | 6.5 | 2019-03-21 | LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/del… |
CVE-2018-17502 | Medium | 4.0 | 2019-03-21 | The Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the contact.json file. An attacker could exploit… |
CVE-2018-17500 | Low | 2.9 | 2019-03-21 | Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of hardcoded OAuth… |
CVE-2018-17499 | Low | 2.9 | 2019-03-21 | Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of unencrypted dat… |
CVE-2018-17497 | High | 8.4 | 2019-03-21 | eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application. |
CVE-2018-17496 | High | 8.4 | 2019-03-21 | eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode. By visiting the kiosk and typing c… |
CVE-2018-17495 | High | 8.4 | 2019-03-21 | eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the… |
CVE-2018-17494 | High | 8.4 | 2019-03-21 | eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Start Menu. By visiting the k… |
CVE-2018-17493 | High | 8.4 | 2019-03-21 | eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscreen button. By visiting the kiosk and c… |
CVE-2018-17492 | High | 8.4 | 2019-03-21 | EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application. |
CVE-2018-17491 | High | 8.4 | 2019-03-21 | EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing "esc" to exit the program, an attacker… |
CVE-2018-17490 | High | 7.7 | 2019-03-21 | EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local attacker could exploit this vulnerability to… |
CVE-2018-17489 | Low | 2.9 | 2019-03-21 | EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintext. By visiting the… |
CVE-2018-17488 | High | 8.4 | 2019-03-21 | Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and… |
CVE-2018-17487 | High | 8.4 | 2019-03-21 | Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and… |
CVE-2018-17486 | Low | 2.9 | 2019-03-21 | Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visit… |
CVE-2018-17485 | High | 8.4 | 2019-03-21 | Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application. |
CVE-2018-17484 | Medium | 4.0 | 2019-03-21 | Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while in kiosk mode. By us… |
CVE-2018-17483 | Low | 2.9 | 2019-03-21 | Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and… |
CVE-2018-17482 | Medium | 4.0 | 2019-03-21 | Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and… |
CVE-2018-17167 | Medium | 5.4 | 2019-03-21 | PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Machine Host Name" or "Server Serial Number" field in th… |
CVE-2018-16789 | High | 7.5 | 2019-03-21 | libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic. By sending a crafted multipart/form-data HTTP request… |
CVE-2018-16563 | Medium | 5.9 | 2019-03-21 | A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Firmware variant MODBUS TCP for EN100 Ether… |
CVE-2018-16519 | Medium | 6.1 | 2019-03-21 | COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS) via URLs used by "iFrame" widgets. |
CVE-2018-15906 | High | 7.2 | 2019-03-21 | SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file. |
CVE-2018-15818 | High | 7.5 | 2019-03-21 | An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicio… |
CVE-2018-15532 | Low | 3.8 | 2019-03-21 | SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed kernel addresses. |
CVE-2018-15508 | High | 7.5 | 2019-03-21 | Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to… |
CVE-2018-15498 | High | 8.1 | 2019-03-21 | YSoft SafeQ Server 6 allows a replay attack. |
CVE-2018-14745 | High | 8.8 | 2019-03-21 | Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code… |
CVE-2018-14724 | Medium | 5.4 | 2019-03-21 | In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the ba… |
CVE-2018-14575 | High | 8.8 | 2019-03-21 | Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CSRF) via a post subject. |
CVE-2018-14486 | Medium | 6.1 | 2019-03-21 | DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML. |
CVE-2018-13104 | Medium | 5.4 | 2019-03-21 | OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID) |
CVE-2018-13103 | Medium | 5.4 | 2019-03-21 | OX App Suite 7.8.4 and earlier allows SSRF. |
CVE-2018-12638 | Medium | 6.1 | 2019-03-21 | An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execut… |
CVE-2018-12572 | High | 7.8 | 2019-03-21 | Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping Avast… |
CVE-2018-12023 | High | 7.5 | 2019-03-21 | An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific… |
CVE-2018-12022 | High | 7.5 | 2019-03-21 | An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific… |
CVE-2018-11789 | High | 7.5 | 2019-03-21 | When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any file on the host. Example woule be modifyi… |
CVE-2018-11767 | High | 7.4 | 2019-03-21 | In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default gro… |
CVE-2018-11747 | Critical | 9.8 | 2019-03-21 | Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be genera… |
CVE-2018-10093 | High | 8.8 | 2019-03-21 | AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution. |
CVE-2018-10091 | Medium | 4.8 | 2019-03-21 | AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow XSS. |
CVE-2018-15509 | Critical | 9.8 | 2019-03-18 | Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2). |
CVE-2018-20806 | Medium | 6.1 | 2019-03-17 | Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter). |
CVE-2018-20106 | Medium | 6.5 | 2019-03-15 | In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or siml… |
CVE-2018-18205 | High | 7.5 | 2019-03-15 | Topvision CC8800 CMTS C-E devices allow remote attackers to obtain sensitive information via a direct request for /WebContent/startup.tar.gz with userName=admi… |
CVE-2018-17956 | High | 7.8 | 2019-03-15 | In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provisio… |
CVE-2018-17955 | Low | 2.2 | 2019-03-15 | In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection |
CVE-2018-17882 | High | 7.5 | 2019-03-15 | An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle (CBTB), an Ethereum token. This… |
CVE-2018-20182 | Critical | 9.8 | 2019-03-15 | rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamless_process_line() that results in memory… |
CVE-2018-20181 | Critical | 9.8 | 2019-03-15 | rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamless_process() and res… |
CVE-2018-20180 | Critical | 9.8 | 2019-03-15 | rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbg_process() and re… |
CVE-2018-20179 | Critical | 9.8 | 2019-03-15 | rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_process() and result… |
CVE-2018-20178 | High | 7.5 | 2019-03-15 | rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that results in a Denial of Service (segfaul… |
CVE-2018-20177 | Critical | 9.8 | 2019-03-15 | rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results… |
CVE-2018-20176 | High | 7.5 | 2019-03-15 | rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (segfault). |
CVE-2018-20175 | High | 7.5 | 2019-03-15 | rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Deni… |
CVE-2018-20174 | High | 7.5 | 2019-03-15 | rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that results in an information leak. |
CVE-2018-19394 | Medium | 4.8 | 2019-03-15 | Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was exploitable by acquir… |
CVE-2018-19393 | High | 7.5 | 2019-03-15 | Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was e… |
CVE-2018-19392 | Critical | 9.8 | 2019-03-15 | Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modification of any user accou… |
CVE-2018-19391 | Medium | 6.1 | 2019-03-15 | Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?p… |
CVE-2018-18256 | High | 7.8 | 2019-03-15 | An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges if they run any whitelisted application t… |
CVE-2018-18255 | High | 7.8 | 2019-03-15 | An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe communicate with this server through named… |
CVE-2018-18254 | High | 7.8 | 2019-03-15 | An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in the Custom App Launcher (CAL) database, a… |
CVE-2018-18253 | High | 7.0 | 2019-03-15 | An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local… |
CVE-2018-18252 | High | 7.8 | 2019-03-15 | An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe provides "NT AUTHORITY\SYSTEM" access to unprivileged users via the --system op… |
CVE-2018-1984 | Medium | 5.4 | 2019-03-14 | IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We… |
CVE-2018-1983 | Medium | 5.4 | 2019-03-14 | IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We… |
CVE-2018-1982 | Medium | 5.4 | 2019-03-14 | IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We… |
CVE-2018-1952 | Medium | 5.4 | 2019-03-14 | IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to em… |
CVE-2018-1929 | Medium | 4.3 | 2019-03-14 | IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be allowed to view any view if he knows the URL link of a the view… |
CVE-2018-1916 | Medium | 5.4 | 2019-03-14 | IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to em… |
CVE-2018-1914 | Medium | 5.4 | 2019-03-14 | IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri… |
CVE-2018-1910 | Medium | 5.4 | 2019-03-14 | IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri… |
CVE-2018-1908 | Medium | 5.4 | 2019-03-14 | IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript… |
CVE-2018-1829 | Medium | 5.4 | 2019-03-14 | IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2018-1825 | Medium | 5.4 | 2019-03-14 | IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2018-1824 | Medium | 5.4 | 2019-03-14 | IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |