2018 CVEs (page 37)
Page 37 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18264 | High | 7.5 | 2019-01-03 | Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. |
CVE-2018-20326 | Medium | 6.1 | 2019-01-02 | ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS via the cgi-bin/webproc?getpage=html/index.html var:subpage parameter. |
CVE-2018-20211 | High | 7.8 | 2019-01-02 | ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username, and then copying a… |
CVE-2018-20166 | High | 8.8 | 2019-01-02 | A file-upload vulnerability exists in Rukovoditel 2.3.1. index.php?module=configuration/save allows the user to upload a background image, and mishandles exten… |
CVE-2018-20114 | Critical | 9.8 | 2019-01-02 | On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cg… |
CVE-2018-20100 | Critical | 9.8 | 2019-01-02 | An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to di… |
CVE-2018-19478 | Medium | 5.5 | 2019-01-02 | In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file. |
CVE-2018-19371 | Medium | 6.5 | 2019-01-02 | The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system. |
CVE-2018-19362 | Critical | 9.8 | 2019-01-02 | FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from po… |
CVE-2018-19361 | Critical | 9.8 | 2019-01-02 | FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic… |
CVE-2018-19360 | Critical | 9.8 | 2019-01-02 | FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from… |
CVE-2018-15490 | High | 7.1 | 2019-01-02 | An issue was discovered in ExpressVPN on Windows. The Xvpnd.exe process (which runs as a service with SYSTEM privileges) listens on TCP port 2015, which is use… |
CVE-2018-14721 | Critical | 10.0 | 2019-01-02 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block t… |
CVE-2018-14720 | Critical | 9.8 | 2019-01-02 | FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK c… |
CVE-2018-14719 | Critical | 9.8 | 2019-01-02 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds… |
CVE-2018-14718 | Critical | 9.8 | 2019-01-02 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from poly… |
CVE-2018-13045 | Critical | 9.8 | 2019-01-02 | SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "i… |
CVE-2018-20659 | Medium | 6.5 | 2019-01-02 | An issue was discovered in Bento4 1.5.1-627. The AP4_StcoAtom class in Core/Ap4StcoAtom.cpp has an attempted excessive memory allocation when called from AP4_A… |
CVE-2018-7900 | Medium | 6.5 | 2019-01-02 | There is an information leak vulnerability in some Huawei HG products. An attacker may obtain information about the HG device by exploiting this vulnerability. |
CVE-2018-20658 | High | 7.5 | 2019-01-02 | The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service (daemon crash) via a crafted XRMD command. |
CVE-2018-5197 | High | 7.8 | 2019-01-02 | A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection a… |
CVE-2018-20657 | High | 7.5 | 2019-01-02 | The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a den… |
CVE-2018-17188 | High | 7.2 | 2019-01-02 | Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. In some cases, this lead to vulnerabilities where… |
CVE-2018-20652 | Medium | 6.5 | 2019-01-01 | An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage… |
CVE-2018-20651 | Medium | 5.5 | 2019-01-01 | A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed… |
CVE-2018-20650 | Medium | 6.5 | 2019-01-01 | A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as… |
CVE-2018-6333 | Critical | 9.8 | 2018-12-31 | The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be us… |
CVE-2018-6331 | Critical | 9.8 | 2018-12-31 | Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code… |
CVE-2018-6347 | High | 7.5 | 2018-12-31 | An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affects Proxygen prior to v2018.12.31.00. |
CVE-2018-6346 | High | 7.5 | 2018-12-31 | A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency). This affects Proxygen pri… |
CVE-2018-6344 | High | 7.5 | 2018-12-31 | A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of… |
CVE-2018-6343 | High | 7.5 | 2018-12-31 | Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/Ce… |
CVE-2018-6342 | Critical | 9.8 | 2018-12-31 | react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to tha… |
CVE-2018-6341 | Medium | 6.1 | 2018-12-31 | React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping co… |
CVE-2018-6340 | High | 8.1 | 2018-12-31 | The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames an… |
CVE-2018-6337 | High | 7.5 | 2018-12-31 | folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repea… |
CVE-2018-6336 | High | 7.8 | 2018-12-31 | An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of… |
CVE-2018-6335 | High | 7.5 | 2018-12-31 | A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all sup… |
CVE-2018-6334 | Critical | 9.8 | 2018-12-31 | Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not declared explicitly before being used t… |
CVE-2018-20623 | Medium | 5.5 | 2018-12-31 | In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted E… |
CVE-2018-20622 | Medium | 6.5 | 2018-12-31 | JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used. |
CVE-2018-6668 | Medium | 6.1 | 2018-12-31 | A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through… |
CVE-2018-19937 | Medium | 6.6 | 2018-12-31 | A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone. |
CVE-2018-18602 | Critical | 9.8 | 2018-12-31 | The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring. |
CVE-2018-18601 | High | 8.1 | 2018-12-31 | The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overflow. |
CVE-2018-18600 | High | 8.1 | 2018-12-31 | The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter. |
CVE-2018-20618 | High | 8.8 | 2018-12-31 | ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c. |
CVE-2018-19918 | Medium | 5.4 | 2018-12-31 | CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table_manager/view/cu_views URI. |
CVE-2018-19906 | Medium | 5.4 | 2018-12-31 | Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter. |
CVE-2018-19905 | Medium | 5.4 | 2018-12-31 | HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter. |
CVE-2018-19904 | Medium | 6.1 | 2018-12-31 | Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page "body" field. |
CVE-2018-19903 | Medium | 6.1 | 2018-12-31 | Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page title field. |
CVE-2018-19902 | Medium | 4.8 | 2018-12-31 | No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter. |
CVE-2018-19901 | Medium | 4.8 | 2018-12-31 | No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter. |
CVE-2018-19845 | Medium | 5.4 | 2018-12-31 | There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325. |
CVE-2018-19844 | Medium | 4.8 | 2018-12-31 | FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319. |
CVE-2018-18593 | Medium | 6.5 | 2018-12-31 | Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10… |
CVE-2018-20617 | High | 8.8 | 2018-12-31 | ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_csv_decode2 function in ok_csv.c. |
CVE-2018-17191 | Critical | 9.8 | 2018-12-31 | Apache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configuration (PAC) interpretation is vulnerable for remote command execution (RCE). Using the nashorn scr… |
CVE-2018-20616 | High | 8.8 | 2018-12-31 | ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_wav_decode_ms_adpcm_data function in ok_wav.c. |
CVE-2018-20614 | High | 7.5 | 2018-12-30 | public\install\install.php in CIM 0.9.3 allows remote attackers to reload the product via the public/install/#/step3 URI. |
CVE-2018-20613 | High | 8.8 | 2018-12-30 | TEMMOKU T1.09 Beta allows admin/user/add CSRF. |
CVE-2018-20612 | High | 8.8 | 2018-12-30 | UWA 2.3.11 allows index.php?g=admin&c=admin&a=add_admin_do CSRF. |
CVE-2018-20611 | Medium | 6.1 | 2018-12-30 | imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI. |
CVE-2018-20610 | Medium | 4.9 | 2018-12-30 | imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter. |
CVE-2018-20609 | Medium | 5.3 | 2018-12-30 | imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI. |
CVE-2018-20608 | High | 7.5 | 2018-12-30 | imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI. |
CVE-2018-20607 | Medium | 5.3 | 2018-12-30 | imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI. |
CVE-2018-20606 | High | 7.5 | 2018-12-30 | imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI. |
CVE-2018-20605 | Critical | 9.8 | 2018-12-30 | imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file. |
CVE-2018-20604 | Medium | 4.9 | 2018-12-30 | Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demonstrated by the admin.php?s=/Template/ed… |
CVE-2018-20603 | High | 8.8 | 2018-12-30 | Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF. |
CVE-2018-20602 | High | 7.5 | 2018-12-30 | Lei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI. |
CVE-2018-20601 | Medium | 4.8 | 2018-12-30 | UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action. |
CVE-2018-20600 | Medium | 6.1 | 2018-12-30 | sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action. |
CVE-2018-20599 | High | 8.8 | 2018-12-30 | UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action. |
CVE-2018-20598 | High | 8.8 | 2018-12-30 | UCMS 1.4.7 has ?do=user_addpost CSRF. |
CVE-2018-20597 | Medium | 4.8 | 2018-12-30 | UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action. |
CVE-2018-20596 | Critical | 9.8 | 2018-12-30 | Jspxcms v9.0.0 allows SSRF. |
CVE-2018-20595 | High | 8.8 | 2018-12-30 | A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not… |
CVE-2018-20594 | Medium | 6.1 | 2018-12-30 | An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.jav… |
CVE-2018-20593 | Medium | 5.5 | 2018-12-30 | In Mini-XML (aka mxml) v2.12, there is stack-based buffer overflow in the scan_file function in mxmldoc.c. |
CVE-2018-20592 | Medium | 5.5 | 2018-12-30 | In Mini-XML (aka mxml) v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file. Remote attackers could leverage this vulnerability to… |
CVE-2018-20591 | Medium | 6.5 | 2018-12-30 | A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, le… |
CVE-2018-20590 | Medium | 4.8 | 2018-12-30 | Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID. |
CVE-2018-20589 | Medium | 4.8 | 2018-12-30 | Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID. |
CVE-2018-20588 | Medium | 6.5 | 2018-12-30 | lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read. |
CVE-2018-20584 | Medium | 6.5 | 2018-12-30 | JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format. |
CVE-2018-20583 | Medium | 6.1 | 2018-12-30 | Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert un… |
CVE-2018-15007 | High | 7.8 | 2018-12-28 | The Sky Elite 6.0L+ Android device with a build fingerprint of SKY/x6069_trx_l601_sky/x6069_trx_l601_sky:6.0/MRA58K/1482897127:user/release-keys contains a pre… |
CVE-2018-15006 | Medium | 5.5 | 2018-12-28 | The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platfo… |
CVE-2018-15005 | High | 7.1 | 2018-12-28 | The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platfo… |
CVE-2018-15004 | Medium | 5.9 | 2018-12-28 | The Coolpad Canvas device with a build fingerprint of Coolpad/cp3636a/cp3636a:7.0/NRD90M/093031423:user/release-keys contains a platform app with a package nam… |
CVE-2018-15002 | Medium | 4.7 | 2018-12-28 | The Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys allows any app co-located on the device to set syst… |
CVE-2018-15001 | Medium | 5.5 | 2018-12-28 | The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name… |
CVE-2018-14998 | Medium | 6.8 | 2018-12-28 | The Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a hidden root pri… |
CVE-2018-14995 | Medium | 4.7 | 2018-12-28 | The ZTE Blade Vantage Android device with a build fingerprint of ZTE/Z839/sweet:7.1.1/NMF26V/20180120.095344:user/release-keys, the ZTE Blade Spark Android dev… |
CVE-2018-14992 | Medium | 5.5 | 2018-12-28 | The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-keys contai… |
CVE-2018-14988 | High | 7.5 | 2018-12-28 | The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201_N/m201_N:4.4.2/KOT49H/20160106:user/test-keys contains the Android framework with a pa… |
CVE-2018-14987 | High | 7.1 | 2018-12-28 | The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201_N/m201_N:4.4.2/KOT49H/20160106:user/test-keys contains the Android framework with a pa… |