2018 CVEs (page 28)
Page 28 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19638 | Low | 2.2 | 2019-03-05 | In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the direc… |
CVE-2018-19637 | Low | 2.8 | 2019-03-05 | Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protect… |
CVE-2018-19636 | High | 7.3 | 2019-03-05 | Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an… |
CVE-2018-15361 | Critical | 9.8 | 2019-03-05 | UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be explo… |
CVE-2018-5482 | Medium | 5.3 | 2019-03-04 | NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in… |
CVE-2018-8790 | High | 7.8 | 2019-03-01 | Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM. |
CVE-2018-20799 | High | 7.5 | 2019-03-01 | In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the bas… |
CVE-2018-20798 | High | 7.5 | 2019-03-01 | The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durations implemented by sshguard, which migh… |
CVE-2018-18499 | Medium | 6.5 | 2019-02-28 | A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to anothe… |
CVE-2018-18498 | Critical | 9.8 | 2019-02-28 | A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked v… |
CVE-2018-18497 | Medium | 6.5 | 2019-02-28 | Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to… |
CVE-2018-18496 | High | 8.8 | 2019-02-28 | When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confus… |
CVE-2018-18495 | Medium | 6.5 | 2019-02-28 | WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an… |
CVE-2018-18494 | Medium | 6.5 | 2019-02-28 | A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another sit… |
CVE-2018-18493 | Critical | 9.8 | 2019-02-28 | A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculat… |
CVE-2018-18492 | Critical | 9.8 | 2019-02-28 | A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This resul… |
CVE-2018-12407 | Critical | 9.8 | 2019-02-28 | A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, when working with the VertexBuffer11 mod… |
CVE-2018-12406 | High | 8.8 | 2019-02-28 | Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2018-12405 | Critical | 9.8 | 2019-02-28 | Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory c… |
CVE-2018-12403 | Medium | 5.3 | 2019-02-28 | If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not displayed to users. This vulnerability aff… |
CVE-2018-12402 | Medium | 6.5 | 2019-02-28 | The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when sub-resources are loaded as part of "Sa… |
CVE-2018-12401 | High | 7.5 | 2019-02-28 | Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lead to denia… |
CVE-2018-12400 | Medium | 5.3 | 2019-02-28 | In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows information leakage… |
CVE-2018-12399 | Medium | 4.3 | 2019-02-28 | When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registering the new protoc… |
CVE-2018-12398 | Medium | 6.5 | 2019-02-28 | By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This… |
CVE-2018-12397 | High | 7.1 | 2019-02-28 | A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being displayed… |
CVE-2018-12396 | Medium | 6.5 | 2019-02-28 | A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege e… |
CVE-2018-12395 | High | 7.5 | 2019-02-28 | By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access… |
CVE-2018-12393 | High | 7.5 | 2019-02-28 | A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could resu… |
CVE-2018-12392 | Critical | 9.8 | 2019-02-28 | When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor ev… |
CVE-2018-12391 | High | 8.8 | 2019-02-28 | During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in… |
CVE-2018-12390 | Critical | 9.8 | 2019-02-28 | Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory c… |
CVE-2018-12389 | High | 8.8 | 2019-02-28 | Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and w… |
CVE-2018-12388 | High | 8.8 | 2019-02-28 | Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2018-1775 | Medium | 6.5 | 2019-02-27 | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to dow… |
CVE-2018-20244 | Medium | 5.5 | 2019-02-27 | In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on cer… |
CVE-2018-20797 | Medium | 6.5 | 2019-02-27 | An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofo_calloc in base/PdfMemoryManagement.cpp when called… |
CVE-2018-20796 | High | 7.5 | 2019-02-26 | In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(… |
CVE-2018-20063 | High | 8.8 | 2019-02-25 | An issue was discovered in Gurock TestRail 5.6.0.3853. An "Unrestricted Upload of File" vulnerability exists in the image-upload form (available in the descrip… |
CVE-2018-5839 | High | 7.1 | 2019-02-25 | Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO… |
CVE-2018-13914 | High | 7.8 | 2019-02-25 | Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Indu… |
CVE-2018-13913 | High | 7.8 | 2019-02-25 | Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial… |
CVE-2018-13912 | Medium | 5.5 | 2019-02-25 | Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag… |
CVE-2018-13905 | High | 7.8 | 2019-02-25 | KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon In… |
CVE-2018-13904 | Critical | 9.8 | 2019-02-25 | Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer El… |
CVE-2018-13900 | High | 7.8 | 2019-02-25 | Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdra… |
CVE-2018-11948 | Medium | 5.5 | 2019-02-25 | Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon Auto, Snapdragon Com… |
CVE-2018-11945 | Critical | 9.8 | 2019-02-25 | Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdrag… |
CVE-2018-11938 | High | 7.8 | 2019-02-25 | Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2018-11935 | Medium | 5.3 | 2019-02-25 | Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2018-11932 | Critical | 9.1 | 2019-02-25 | Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2018-11931 | High | 7.8 | 2019-02-25 | Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elect… |
CVE-2018-11864 | Medium | 5.5 | 2019-02-25 | Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co… |
CVE-2018-11845 | Medium | 5.5 | 2019-02-25 | Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute, Snapdrago… |
CVE-2018-11820 | Medium | 5.5 | 2019-02-25 | Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute… |
CVE-2018-11289 | High | 7.8 | 2019-02-25 | Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Snapdragon Auto, Snapd… |
CVE-2018-20033 | Critical | 9.8 | 2019-02-25 | A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to… |
CVE-2018-20795 | High | 7.5 | 2019-02-25 | tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through the copy_cut action i… |
CVE-2018-20794 | High | 7.5 | 2019-02-25 | tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file (jpg/jpeg/png) via path traversal with the path parameter, th… |
CVE-2018-20793 | High | 7.5 | 2019-02-25 | tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass, th… |
CVE-2018-20792 | High | 7.5 | 2019-02-25 | tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through the get_file action in… |
CVE-2018-20791 | Medium | 6.1 | 2019-02-25 | tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the media_preview action. |
CVE-2018-20790 | High | 7.5 | 2019-02-25 | tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass throu… |
CVE-2018-20789 | High | 7.5 | 2019-02-25 | tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a paths[0] path traversal mitigation bypass… |
CVE-2018-20788 | Medium | 5.5 | 2019-02-25 | drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has several integer overflows because of a lef… |
CVE-2018-20787 | Medium | 5.5 | 2019-02-25 | The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of… |
CVE-2018-20786 | High | 7.5 | 2019-02-24 | libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash)… |
CVE-2018-20785 | High | 7.4 | 2019-02-23 | Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. During startup, the AM335x secure boot feature decrypts and e… |
CVE-2018-18692 | Medium | 6.1 | 2019-02-23 | A reflected Cross-Site scripting (XSS) vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML via the username pa… |
CVE-2018-20784 | Critical | 9.8 | 2019-02-22 | In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_b… |
CVE-2018-20783 | High | 7.5 | 2019-02-21 | In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to re… |
CVE-2018-2006 | Medium | 4.9 | 2019-02-21 | IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specia… |
CVE-2018-1950 | Medium | 4.3 | 2019-02-21 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message that includes sensitive information about it… |
CVE-2018-1949 | Medium | 4.3 | 2019-02-21 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance discloses sensitive information to unauthorized users. The information… |
CVE-2018-1948 | Medium | 4.3 | 2019-02-21 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not set the secure attribute on authorization tokens or session co… |
CVE-2018-1947 | Medium | 6.1 | 2019-02-21 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users… |
CVE-2018-1946 | Medium | 5.9 | 2019-02-21 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance supports interaction between multiple actors and allows those actors to… |
CVE-2018-1945 | Medium | 6.1 | 2019-02-21 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance could allow a remote attacker to hijack the clicking action of the vict… |
CVE-2018-1944 | Medium | 5.1 | 2019-02-21 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptographic ke… |
CVE-2018-6687 | Medium | 5.5 | 2019-02-21 | Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 3.0.0.461 and earlier allows attackers to DoS a manual GetSusp scan via whil… |
CVE-2018-20122 | Critical | 9.8 | 2019-02-21 | The web interface on FASTGate Fastweb devices with firmware through 0.00.47_FW_200_Askey 2017-05-17 (software through 1.0.1b) exposed a CGI binary that is vuln… |
CVE-2018-20146 | High | 7.8 | 2019-02-21 | An issue was discovered in Liquidware ProfileUnity before 6.8.0 with Liquidware FlexApp before 6.8.0. A local user could obtain administrator rights, as demons… |
CVE-2018-15380 | High | 8.8 | 2019-02-20 | A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an unauthenticated, adjacent attacker to execute commands as the root us… |
CVE-2018-5819 | High | 7.5 | 2019-02-20 | An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU re… |
CVE-2018-5818 | High | 7.5 | 2019-02-20 | An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop. |
CVE-2018-5817 | High | 7.5 | 2019-02-20 | A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger… |
CVE-2018-20030 | High | 7.5 | 2019-02-20 | An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources. |
CVE-2018-20241 | Medium | 5.4 | 2019-02-20 | The Edit upload resource for a review in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via… |
CVE-2018-20240 | Medium | 4.8 | 2019-02-20 | The administrative linker functionality in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript v… |
CVE-2018-19106 | Medium | 6.1 | 2019-02-20 | Avi Vantage before 17.2.13 uses an invalid URL encoding during a redirect operation, aka AV-33959. |
CVE-2018-9867 | Medium | 5.5 | 2019-02-19 | In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Admin… |
CVE-2018-20026 | High | 7.5 | 2019-02-19 | Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0. |
CVE-2018-20025 | High | 7.5 | 2019-02-19 | Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0. |
CVE-2018-1996 | Medium | 5.3 | 2019-02-19 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the improper TLS configuration. A remote attacke… |
CVE-2018-3700 | Medium | 6.7 | 2019-02-18 | Code injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 before version 5.0.4.43v2 may allo… |
CVE-2018-12159 | Medium | 5.5 | 2019-02-18 | Buffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may allow an authenticated user to potentially enable denial of se… |
CVE-2018-20782 | High | 7.5 | 2019-02-17 | The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages. |
CVE-2018-1895 | Medium | 5.4 | 2019-02-15 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod… |
CVE-2018-1727 | High | 7.1 | 2019-02-15 | IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote at… |
CVE-2018-1701 | High | 8.5 | 2019-02-15 | IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installation process that woul… |