2018 CVEs (page 36)
Page 36 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6112 | Medium | 4.3 | 2019-01-09 | Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restric… |
CVE-2018-6111 | High | 8.8 | 2019-01-09 | An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via… |
CVE-2018-6110 | Medium | 5.4 | 2019-01-09 | Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTM… |
CVE-2018-6109 | Medium | 6.5 | 2019-01-09 | readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0… |
CVE-2018-6106 | High | 8.8 | 2019-01-09 | An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially exploit object… |
CVE-2018-6100 | Medium | 6.5 | 2019-01-09 | Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoof… |
CVE-2018-6097 | Medium | 6.5 | 2019-01-09 | Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to enter full screen withou… |
CVE-2018-6096 | Medium | 6.5 | 2019-01-09 | A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obscur… |
CVE-2018-6093 | Medium | 6.5 | 2019-01-09 | Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2018-6091 | Medium | 6.5 | 2019-01-09 | Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to… |
CVE-2018-6084 | High | 7.8 | 2019-01-09 | Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via… |
CVE-2018-6056 | High | 8.8 | 2019-01-09 | Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code insi… |
CVE-2018-20071 | Medium | 6.1 | 2019-01-09 | Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install… |
CVE-2018-20070 | Medium | 6.5 | 2019-01-09 | Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omni… |
CVE-2018-20069 | Medium | 4.3 | 2019-01-09 | Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS prior to 71.0.3578.80 allowed a remote attacker to confuse the us… |
CVE-2018-20068 | Medium | 4.3 | 2019-01-09 | Incorrect handling of 304 status codes in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of t… |
CVE-2018-20067 | Medium | 4.3 | 2019-01-09 | A renderer initiated back navigation was incorrectly allowed to cancel a browser initiated one in Navigation in Google Chrome prior to 71.0.3578.80 allowed a r… |
CVE-2018-20066 | High | 8.8 | 2019-01-09 | Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2018-20065 | High | 8.8 | 2019-01-09 | Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user ges… |
CVE-2018-17470 | High | 7.4 | 2019-01-09 | A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform… |
CVE-2018-17461 | High | 8.8 | 2019-01-09 | An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. |
CVE-2018-17459 | Medium | 6.5 | 2019-01-09 | Incorrect handling of clicks in the omnibox in Navigation in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to spoof the contents of the Omnibox… |
CVE-2018-17458 | High | 8.8 | 2019-01-09 | An improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to execute arbitrary code… |
CVE-2018-17457 | High | 8.8 | 2019-01-09 | An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbit… |
CVE-2018-16088 | Medium | 6.5 | 2019-01-09 | A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no use… |
CVE-2018-16087 | Medium | 4.3 | 2019-01-09 | Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted H… |
CVE-2018-16085 | High | 8.8 | 2019-01-09 | A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2018-16084 | Medium | 6.1 | 2019-01-09 | The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker who convinced the user to perform certain… |
CVE-2018-16083 | High | 8.8 | 2019-01-09 | An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds m… |
CVE-2018-16082 | Medium | 6.5 | 2019-01-09 | An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a… |
CVE-2018-16081 | High | 7.4 | 2019-01-09 | Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install… |
CVE-2018-16080 | Medium | 6.5 | 2019-01-09 | A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the… |
CVE-2018-16079 | Medium | 5.3 | 2019-01-09 | A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to spoof the contents o… |
CVE-2018-16078 | Medium | 6.5 | 2019-01-09 | Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain potentially sensitive information… |
CVE-2018-16076 | High | 8.8 | 2019-01-09 | Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. |
CVE-2018-16072 | Medium | 6.5 | 2019-01-09 | A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass same origin policy via a cr… |
CVE-2018-16071 | High | 8.8 | 2019-01-09 | A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. |
CVE-2018-16068 | Critical | 9.6 | 2019-01-09 | Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2018-16067 | Medium | 6.5 | 2019-01-09 | A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2018-16066 | Medium | 6.5 | 2019-01-09 | A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2018-16065 | High | 8.8 | 2019-01-09 | A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code in… |
CVE-2018-20680 | Medium | 4.8 | 2019-01-09 | Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field. |
CVE-2018-20679 | High | 7.5 | 2019-01-09 | An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote at… |
CVE-2018-20677 | Medium | 6.1 | 2019-01-09 | In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property. |
CVE-2018-20676 | Medium | 6.1 | 2019-01-09 | In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute. |
CVE-2018-20675 | Critical | 9.8 | 2019-01-09 | D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* bef… |
CVE-2018-20674 | High | 8.8 | 2019-01-09 | D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* bef… |
CVE-2018-2499 | High | 7.5 | 2019-01-08 | A security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8.0, 10.1) may allow an attacker to discover the password hash o… |
CVE-2018-2484 | High | 8.8 | 2019-01-08 | SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6… |
CVE-2018-1993 | Medium | 4.0 | 2019-01-08 | IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is enabled may caused read operation on a… |
CVE-2018-1932 | Medium | 4.9 | 2019-01-08 | IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the management server that could allow an authentica… |
CVE-2018-1918 | Medium | 5.4 | 2019-01-08 | IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS… |
CVE-2018-1320 | High | 7.5 | 2019-01-07 | Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTrans… |
CVE-2018-11798 | Medium | 6.5 | 2019-01-07 | The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user ha… |
CVE-2018-11788 | Critical | 9.8 | 2019-01-07 | Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folder. The features X… |
CVE-2018-5481 | High | 7.4 | 2019-01-07 | OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to… |
CVE-2018-5410 | High | 7.8 | 2019-01-07 | Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device ha… |
CVE-2018-20673 | Medium | 5.5 | 2019-01-04 | The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create… |
CVE-2018-20671 | Medium | 5.5 | 2019-01-04 | load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflo… |
CVE-2018-1951 | Medium | 5.4 | 2019-01-04 | IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2018-1888 | Medium | 5.3 | 2019-01-04 | An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse DL… |
CVE-2018-1859 | Medium | 4.3 | 2019-01-04 | IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an administrator with limited rights to escalate their privileges. IBM X-Force ID… |
CVE-2018-1657 | Medium | 5.4 | 2019-01-04 | IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2018-8827 | Medium | 6.1 | 2019-01-03 | The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, whic… |
CVE-2018-4012 | Critical | 9.0 | 2019-01-03 | An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function bc_http_read_header incorr… |
CVE-2018-3986 | Medium | 5.5 | 2019-01-03 | An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. The… |
CVE-2018-19249 | High | 7.5 | 2019-01-03 | The Stripe API v1 allows remote attackers to bypass intended access restrictions by replaying api.stripe.com /v1/tokens XMLHttpRequest data, parsing the respon… |
CVE-2018-18997 | Medium | 6.1 | 2019-01-03 | Pluto Safety PLC Gateway Ethernet devices in ABB GATE-E1 and GATE-E2 all versions allows an unauthenticated attacker using the administrative web interface to… |
CVE-2018-18995 | Critical | 9.8 | 2019-01-03 | Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions do not allow authentication to be configured on administrative telnet or web int… |
CVE-2018-15780 | Medium | 4.3 | 2019-01-03 | RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to… |
CVE-2018-19601 | Critical | 9.1 | 2019-01-03 | Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload. |
CVE-2018-19600 | Medium | 4.8 | 2019-01-03 | Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload. |
CVE-2018-18244 | Medium | 6.1 | 2019-01-03 | Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScr… |
CVE-2018-18005 | Medium | 6.1 | 2019-01-03 | Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary Jav… |
CVE-2018-18004 | Medium | 5.3 | 2019-01-03 | Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable ar… |
CVE-2018-20664 | Critical | 9.8 | 2019-01-03 | Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license. |
CVE-2018-20663 | Medium | 5.4 | 2019-01-03 | The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the "Reports > Reports" name field. |
CVE-2018-20512 | Critical | 9.8 | 2019-01-03 | EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies. |
CVE-2018-19998 | High | 8.8 | 2019-01-03 | SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee par… |
CVE-2018-19995 | Medium | 5.4 | 2019-01-03 | A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address"… |
CVE-2018-19994 | High | 8.8 | 2019-01-03 | An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands vi… |
CVE-2018-19993 | Medium | 6.1 | 2019-01-03 | A reflected cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase param… |
CVE-2018-19992 | Medium | 5.4 | 2019-01-03 | A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address"… |
CVE-2018-19862 | Critical | 9.8 | 2019-01-03 | Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request. NOTE: this product is discontin… |
CVE-2018-19861 | Critical | 9.8 | 2019-01-03 | Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request. NOTE: this product is discontin… |
CVE-2018-19523 | Medium | 5.5 | 2019-01-03 | DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x80002068) with a user defined buffer size. If the size of the… |
CVE-2018-19505 | Medium | 6.5 | 2019-01-03 | Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the i… |
CVE-2018-19415 | Critical | 9.8 | 2019-01-03 | Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to join_group.php… |
CVE-2018-19414 | Medium | 6.1 | 2019-01-03 | Multiple cross-site scripting (XSS) vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword param… |
CVE-2018-14481 | Medium | 6.1 | 2019-01-03 | Osclass 3.7.4 has XSS via the query string to index.php, a different vulnerability than CVE-2014-6280. |
CVE-2018-17161 | Critical | 9.8 | 2019-01-03 | In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE-p1, insufficient validation of network-provided data in bootpd… |
CVE-2018-16885 | Medium | 4.7 | 2019-01-03 | A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which c… |
CVE-2018-16882 | High | 8.8 | 2019-01-03 | A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=1) virtualization is enabled. In nested_… |
CVE-2018-16870 | Medium | 5.9 | 2019-01-03 | It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may lead to… |
CVE-2018-16876 | Medium | 5.3 | 2019-01-03 | ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible d… |
CVE-2018-16879 | Critical | 9.8 | 2019-01-03 | Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery worker… |
CVE-2018-20662 | Medium | 6.5 | 2019-01-03 | In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong r… |
CVE-2018-17172 | Critical | 9.8 | 2019-01-03 | The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 bef… |
CVE-2018-20131 | High | 7.8 | 2019-01-03 | The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on the /usr/local/crashplan/log directory… |
CVE-2018-18893 | Medium | 5.3 | 2019-01-03 | Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java. |