2018 CVEs (page 27)
Page 27 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1823 | Medium | 5.4 | 2019-03-14 | IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2018-1764 | Medium | 5.4 | 2019-03-14 | IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2018-1763 | Medium | 5.4 | 2019-03-14 | IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2018-1761 | Medium | 5.4 | 2019-03-14 | IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We… |
CVE-2018-1759 | Medium | 5.4 | 2019-03-14 | IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2018-1688 | Medium | 5.4 | 2019-03-14 | IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users… |
CVE-2018-1658 | Medium | 5.4 | 2019-03-14 | IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by improper validation o… |
CVE-2018-18091 | Medium | 6.5 | 2019-03-14 | Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057)… |
CVE-2018-18090 | Medium | 5.5 | 2019-03-14 | Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20… |
CVE-2018-18089 | Medium | 5.5 | 2019-03-14 | Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x… |
CVE-2018-12224 | Low | 3.3 | 2019-03-14 | Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19… |
CVE-2018-12223 | Medium | 6.3 | 2019-03-14 | Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15… |
CVE-2018-12222 | Low | 3.3 | 2019-03-14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka… |
CVE-2018-12221 | High | 7.8 | 2019-03-14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka… |
CVE-2018-12220 | High | 8.2 | 2019-03-14 | Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15… |
CVE-2018-12219 | Medium | 5.5 | 2019-03-14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka… |
CVE-2018-12218 | Low | 3.3 | 2019-03-14 | Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.505… |
CVE-2018-12217 | Low | 2.3 | 2019-03-14 | Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 1… |
CVE-2018-12216 | High | 8.2 | 2019-03-14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka… |
CVE-2018-12215 | Medium | 6.0 | 2019-03-14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka… |
CVE-2018-12214 | High | 8.2 | 2019-03-14 | Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 1… |
CVE-2018-12213 | Medium | 6.0 | 2019-03-14 | Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 1… |
CVE-2018-12212 | Medium | 6.5 | 2019-03-14 | Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057)… |
CVE-2018-12211 | Medium | 6.5 | 2019-03-14 | Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 1… |
CVE-2018-12210 | Medium | 6.5 | 2019-03-14 | Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 1… |
CVE-2018-12209 | Low | 3.3 | 2019-03-14 | Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15… |
CVE-2018-12208 | High | 7.6 | 2019-03-14 | Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or… |
CVE-2018-12205 | Medium | 6.8 | 2019-03-14 | Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm)… |
CVE-2018-12204 | Medium | 6.7 | 2019-03-14 | Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allo… |
CVE-2018-12203 | Medium | 6.7 | 2019-03-14 | Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may… |
CVE-2018-12202 | Medium | 6.7 | 2019-03-14 | Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Proc… |
CVE-2018-12201 | Medium | 6.7 | 2019-03-14 | Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processo… |
CVE-2018-12200 | Medium | 6.7 | 2019-03-14 | Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privilege… |
CVE-2018-12199 | Medium | 6.2 | 2019-03-14 | Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow… |
CVE-2018-12198 | Medium | 6.0 | 2019-03-14 | Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially… |
CVE-2018-12196 | Medium | 6.7 | 2019-03-14 | Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially… |
CVE-2018-12192 | Medium | 6.8 | 2019-03-14 | Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_0… |
CVE-2018-12191 | High | 7.6 | 2019-03-14 | Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00… |
CVE-2018-12190 | Medium | 6.7 | 2019-03-14 | Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may all… |
CVE-2018-12189 | Medium | 4.4 | 2019-03-14 | Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 m… |
CVE-2018-12188 | Medium | 4.6 | 2019-03-14 | Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an un… |
CVE-2018-12187 | High | 7.5 | 2019-03-14 | Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauth… |
CVE-2018-12185 | Medium | 6.8 | 2019-03-14 | Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to poten… |
CVE-2018-20801 | High | 7.5 | 2019-03-14 | In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service atta… |
CVE-2018-20800 | Medium | 6.5 | 2019-03-13 | An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to 6.0.13 (also patchlevel updates) or 5.0.31 (only major update… |
CVE-2018-0389 | High | 7.5 | 2019-03-13 | A vulnerability in the implementation of Session Initiation Protocol (SIP) processing in Cisco Small Business SPA514G IP Phones could allow an unauthenticated… |
CVE-2018-17937 | High | 8.8 | 2019-03-13 | gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to… |
CVE-2018-20621 | High | 7.8 | 2019-03-13 | An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to… |
CVE-2018-17944 | Medium | 4.9 | 2019-03-12 | On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that serve… |
CVE-2018-2009 | Medium | 6.5 | 2019-03-11 | IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all o… |
CVE-2018-1998 | High | 8.8 | 2019-03-11 | IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges. This is due to an incomplete fix fo… |
CVE-2018-1980 | High | 8.4 | 2019-03-11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authentica… |
CVE-2018-1978 | High | 8.4 | 2019-03-11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authentica… |
CVE-2018-1974 | High | 7.5 | 2019-03-11 | IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915. |
CVE-2018-1923 | High | 8.4 | 2019-03-11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially r… |
CVE-2018-1922 | High | 8.4 | 2019-03-11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially r… |
CVE-2018-1902 | Low | 3.1 | 2019-03-11 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof connection information which could be used to launch further att… |
CVE-2018-1890 | Medium | 5.6 | 2019-03-11 | IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users… |
CVE-2018-4055 | Medium | 5.5 | 2019-03-08 | A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local acce… |
CVE-2018-4054 | High | 7.8 | 2019-03-08 | A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local acce… |
CVE-2018-20187 | Medium | 5.9 | 2019-03-08 | A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to deri… |
CVE-2018-20236 | High | 8.8 | 2019-03-08 | There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a… |
CVE-2018-20235 | High | 8.8 | 2019-03-08 | There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial repositori… |
CVE-2018-20234 | High | 8.8 | 2019-03-08 | There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repositories… |
CVE-2018-18449 | High | 8.8 | 2019-03-07 | EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339. |
CVE-2018-17988 | Critical | 9.8 | 2019-03-07 | LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter. |
CVE-2018-17429 | High | 8.8 | 2019-03-07 | /console/account/manage.php?type=action&action=add in JTBC v3.0(C) has CSRF for adding an administrator account. |
CVE-2018-17426 | Medium | 5.4 | 2019-03-07 | WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI. |
CVE-2018-17425 | Medium | 5.4 | 2019-03-07 | WUZHI CMS 4.1.0 has stored XSS via the "Membership Center" "I want to ask" "detailed description" field under the index.php?m=member URI. |
CVE-2018-17422 | Medium | 6.1 | 2019-03-07 | dotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWARD_URL parameter or the html/portlet/ext/common/page_preview_popup.jsp hostname… |
CVE-2018-17421 | Medium | 6.1 | 2019-03-07 | An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname. |
CVE-2018-17420 | High | 7.2 | 2019-03-07 | An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter. |
CVE-2018-17419 | High | 7.5 | 2019-03-07 | An issue was discovered in setTA in scan_rr.go in the Miek Gieben DNS library before 1.0.10 for Go. A dns.ParseZone() parsing error causes a segmentation viola… |
CVE-2018-17418 | High | 7.2 | 2019-03-07 | Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrated by the 123.PhP filename, because plugi… |
CVE-2018-17416 | High | 7.2 | 2019-03-07 | A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter. |
CVE-2018-17415 | High | 8.8 | 2019-03-07 | zzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter. |
CVE-2018-17414 | High | 8.8 | 2019-03-07 | zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter. |
CVE-2018-17413 | Medium | 6.1 | 2019-03-07 | XSS exists in zzcms v8.3 via the /uploadimg_form.php noshuiyin parameter. |
CVE-2018-17412 | Critical | 9.8 | 2019-03-07 | zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header. |
CVE-2018-16809 | Critical | 9.8 | 2019-03-07 | An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and… |
CVE-2018-16808 | Medium | 6.1 | 2019-03-07 | An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a… |
CVE-2018-16804 | Medium | 6.1 | 2019-03-07 | An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request. |
CVE-2018-14499 | Medium | 6.1 | 2019-03-07 | An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html. |
CVE-2018-14498 | Medium | 6.5 | 2019-03-07 | get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read an… |
CVE-2018-18816 | High | 8.0 | 2019-03-07 | The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for Acti… |
CVE-2018-18815 | Critical | 10.0 | 2019-03-07 | The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for Active… |
CVE-2018-18809 | Medium | 6.5 | 2019-03-07 | The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Libr… |
CVE-2018-18808 | High | 8.8 | 2019-03-07 | The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server f… |
CVE-2018-11783 | High | 7.5 | 2019-03-07 | sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't… |
CVE-2018-1912 | Medium | 5.4 | 2019-03-06 | IBM DOORS Next Generation (DNG/RRC) 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co… |
CVE-2018-1911 | Medium | 5.4 | 2019-03-06 | IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb… |
CVE-2018-11793 | High | 7.5 | 2019-03-05 | When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1… |
CVE-2018-19725 | Critical | 9.8 | 2019-03-05 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a security bypass vulnera… |
CVE-2018-1939 | Medium | 6.8 | 2019-03-05 | IBM Cloud Private 3.1.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-c… |
CVE-2018-1938 | Medium | 4.4 | 2019-03-05 | IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypted data. IBM X-Force ID: 153318. |
CVE-2018-1937 | Medium | 4.4 | 2019-03-05 | IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypted data. IBM X-Force ID: 153317. |
CVE-2018-1899 | Medium | 4.3 | 2019-03-05 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere d… |
CVE-2018-1875 | High | 7.4 | 2019-03-05 | IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By… |
CVE-2018-19640 | Medium | 4.4 | 2019-03-05 | If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can k… |
CVE-2018-19639 | Medium | 6.7 | 2019-03-05 | If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-… |