2018 CVEs (page 38)
Page 38 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-14986 | High | 7.5 | 2018-12-28 | The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed… |
CVE-2018-14985 | High | 7.1 | 2018-12-28 | The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed… |
CVE-2018-14984 | High | 7.5 | 2018-12-28 | The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed… |
CVE-2018-14979 | Medium | 4.7 | 2018-12-28 | The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-keys contai… |
CVE-2018-20579 | High | 7.1 | 2018-12-28 | Contiki-NG before 4.2 has a stack-based buffer overflow in the push function in os/lib/json/jsonparse.c that allows an out-of-bounds write of an '{' or '[' cha… |
CVE-2018-20578 | High | 7.5 | 2018-12-28 | An issue was discovered in NuttX before 7.27. The function netlib_parsehttpurl() in apps/netutils/netlib/netlib_parsehttpurl.c mishandles URLs longer than host… |
CVE-2018-20577 | Critical | 9.1 | 2018-12-28 | Orange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewall_SPI.exe, cgi-bin/setup_remote_mgmt.exe, cgi-bin/setup_pass.exe, and cgi-bin/upgra… |
CVE-2018-20576 | Medium | 5.4 | 2018-12-28 | Orange Livebox 00.96.320S devices allow cgi-bin/autodialing.exe and cgi-bin/phone_test.exe CSRF, leading to arbitrary outbound telephone calls to an attacker-s… |
CVE-2018-20575 | High | 7.5 | 2018-12-28 | Orange Livebox 00.96.320S devices have an undocumented /system_firmwarel.stm URI for manual firmware update. This is related to Firmware 01.11.2017-11:43:44, B… |
CVE-2018-18696 | High | 8.8 | 2018-12-28 | main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF. NOTE: The vendor claims that documentation for preventing a CSRF attack has been prov… |
CVE-2018-18667 | High | 7.5 | 2018-12-28 | The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of… |
CVE-2018-18666 | High | 7.5 | 2018-12-28 | The mintToken function of SwftCoin (SWFTC) aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of… |
CVE-2018-18665 | High | 7.5 | 2018-12-28 | The mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of… |
CVE-2018-16638 | Medium | 5.4 | 2018-12-28 | Evolution CMS 1.4.x allows XSS via the manager/ search parameter. |
CVE-2018-16637 | Medium | 5.4 | 2018-12-28 | Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI. |
CVE-2018-16632 | Medium | 4.8 | 2018-12-28 | Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title parameter at admin/blog/blogpost/add/. |
CVE-2018-16630 | Medium | 4.8 | 2018-12-28 | Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file. |
CVE-2018-7366 | Medium | 4.3 | 2018-12-28 | ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGT… |
CVE-2018-5204 | Critical | 9.8 | 2018-12-28 | ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary fi… |
CVE-2018-5203 | Critical | 9.8 | 2018-12-28 | DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by set… |
CVE-2018-20574 | Medium | 6.5 | 2018-12-28 | The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and app… |
CVE-2018-20573 | Medium | 6.5 | 2018-12-28 | The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and appli… |
CVE-2018-20572 | Critical | 9.8 | 2018-12-28 | WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue t… |
CVE-2018-20571 | High | 7.5 | 2018-12-28 | DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tpl/Add/id/.\Public\… |
CVE-2018-20570 | Medium | 6.5 | 2018-12-28 | jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read. |
CVE-2018-20569 | Critical | 9.8 | 2018-12-28 | user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass. |
CVE-2018-20568 | Critical | 9.8 | 2018-12-28 | Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass. |
CVE-2018-20567 | Medium | 5.3 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the product in opportunistic circumstances in which install.lock ca… |
CVE-2018-20566 | Medium | 5.3 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted in… |
CVE-2018-20565 | Medium | 4.8 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the nav_name parameter. |
CVE-2018-20564 | Medium | 4.8 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has XSS via the cat_name parameter. |
CVE-2018-20563 | Medium | 4.8 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobile_name parameter. |
CVE-2018-20562 | Medium | 4.8 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article_category.php?rec=update has XSS via the cat_name parameter. |
CVE-2018-20561 | Medium | 4.8 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via the title parameter. |
CVE-2018-20560 | Medium | 4.8 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the show_name parameter. |
CVE-2018-20559 | Medium | 4.8 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name parameter. |
CVE-2018-20558 | Medium | 4.8 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the site_name parameter. |
CVE-2018-20557 | Medium | 4.8 | 2018-12-28 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the page_name parameter. |
CVE-2018-20553 | High | 7.8 | 2018-12-28 | Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c. |
CVE-2018-20552 | High | 7.8 | 2018-12-28 | Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c. |
CVE-2018-20551 | Medium | 6.5 | 2018-12-28 | A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation as… |
CVE-2018-20549 | High | 8.8 | 2018-12-28 | There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19. |
CVE-2018-20548 | High | 8.8 | 2018-12-28 | There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data. |
CVE-2018-20547 | High | 8.1 | 2018-12-28 | There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data. |
CVE-2018-20546 | High | 8.1 | 2018-12-28 | There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case. |
CVE-2018-20545 | High | 8.8 | 2018-12-28 | There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data. |
CVE-2018-20544 | Medium | 6.5 | 2018-12-28 | There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19. |
CVE-2018-20543 | Medium | 6.5 | 2018-12-28 | There is an attempted excessive memory allocation at libxsmm_sparse_csc_reader in generator_spgemm_csc_reader.c in LIBXSMM 1.10 that will cause a denial of ser… |
CVE-2018-20542 | High | 8.8 | 2018-12-28 | There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different vulnerability than CVE… |
CVE-2018-20541 | High | 8.8 | 2018-12-28 | There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20… |
CVE-2018-20540 | Medium | 6.5 | 2018-12-28 | There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1. |
CVE-2018-20539 | Medium | 6.5 | 2018-12-28 | There is a Segmentation fault triggered by illegal address access at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause… |
CVE-2018-20538 | Medium | 5.5 | 2018-12-28 | There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finish… |
CVE-2018-20537 | Medium | 6.5 | 2018-12-28 | There is a NULL pointer dereference at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service. |
CVE-2018-20536 | Medium | 6.5 | 2018-12-28 | There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service. |
CVE-2018-20535 | Medium | 5.5 | 2018-12-28 | There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during a line-number… |
CVE-2018-20534 | Medium | 6.5 | 2018-12-28 | There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute thi… |
CVE-2018-20533 | Medium | 6.5 | 2018-12-28 | There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of… |
CVE-2018-20532 | Medium | 6.5 | 2018-12-28 | There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. |
CVE-2018-20530 | Medium | 5.4 | 2018-12-28 | PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896. |
CVE-2018-20528 | Medium | 6.5 | 2018-12-28 | JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter. |
CVE-2018-17539 | High | 7.5 | 2018-12-28 | The BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attac… |
CVE-2018-1000890 | High | 7.5 | 2018-12-28 | FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can allow the attacker to… |
CVE-2018-1000889 | High | 8.8 | 2018-12-28 | Logisim Evolution version 2.14.3 and earlier contains an XML External Entity (XXE) vulnerability in Circuit file loading functionality (loadXmlFrom in src/com/… |
CVE-2018-1000888 | High | 8.8 | 2018-12-28 | PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class. There are several file operations with `$v_heade… |
CVE-2018-1000887 | Medium | 4.8 | 2018-12-28 | Peel shopping peel-shopping_9_1_0 version contains a Cross Site Scripting (XSS) vulnerability that can result in an authenticated user injecting java script co… |
CVE-2018-1000631 | Critical | 9.8 | 2018-12-28 | Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib/PluginStatus.cpp a… |
CVE-2018-1000630 | High | 7.2 | 2018-12-28 | Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to /api/PluginStatusActions… |
CVE-2018-1000629 | Medium | 6.1 | 2018-12-28 | Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigActions.php?action=add an… |
CVE-2018-1000628 | Critical | 9.8 | 2018-12-28 | Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied valu… |
CVE-2018-1000627 | Critical | 9.8 | 2018-12-28 | Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API key file. An attacker… |
CVE-2018-1000626 | Critical | 9.8 | 2018-12-28 | Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key. An attac… |
CVE-2018-1000625 | Critical | 9.8 | 2018-12-28 | Battelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account. An attacker could exploit this vulnerability to log in as an admin on an… |
CVE-2018-1000624 | High | 7.5 | 2018-12-28 | Battelle V2I Hub 2.5.1 is vulnerable to a denial of service, caused by the failure to restrict access to a sensitive functionality. By visiting http://V2I_HUB/… |
CVE-2018-15335 | Medium | 5.9 | 2018-12-28 | When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases wh… |
CVE-2018-15334 | Medium | 4.3 | 2018-12-28 | A cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow attacker to force an APM webtop session to log out and require… |
CVE-2018-15333 | Medium | 5.5 | 2018-12-28 | On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download… |
CVE-2018-20524 | Medium | 6.1 | 2018-12-27 | The Chat Anywhere extension 2.4.0 for Chrome allows XSS via crafted use of <<a> in a message, because a danmuWrapper DIV element in chatbox-only\danmu.js is ou… |
CVE-2018-20520 | Medium | 6.1 | 2018-12-27 | MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233. |
CVE-2018-20519 | High | 8.1 | 2018-12-27 | An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demo… |
CVE-2018-20511 | Medium | 5.5 | 2018-12-27 | An issue was discovered in the Linux kernel before 4.18.11. The ipddp_ioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive ke… |
CVE-2018-20508 | Critical | 9.8 | 2018-12-27 | CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search… |
CVE-2018-20502 | Medium | 6.5 | 2018-12-26 | An issue was discovered in Bento4 1.5.1-627. There is an attempt at excessive memory allocation in the AP4_DataBuffer class when called from AP4_HvccAtom::Crea… |
CVE-2018-20404 | High | 7.5 | 2018-12-26 | ETK_E900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmov… |
CVE-2018-20217 | Medium | 5.3 | 2018-12-26 | A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryp… |
CVE-2018-19873 | Critical | 9.8 | 2018-12-26 | An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data. |
CVE-2018-19871 | Medium | 6.5 | 2018-12-26 | An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption. |
CVE-2018-19870 | High | 8.8 | 2018-12-26 | An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault. |
CVE-2018-19869 | Medium | 6.5 | 2018-12-26 | An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp. |
CVE-2018-19799 | Medium | 6.1 | 2018-12-26 | Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS. |
CVE-2018-19616 | High | 8.1 | 2018-12-26 | An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/remove administrators because access contr… |
CVE-2018-19615 | Medium | 6.1 | 2018-12-26 | Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted userâs web browser to gain ac… |
CVE-2018-19182 | High | 8.8 | 2018-12-26 | Engelsystem before commit hash 2e28336 allows CSRF. |
CVE-2018-18537 | Medium | 5.5 | 2018-12-26 | The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address. |
CVE-2018-18536 | High | 7.8 | 2018-12-26 | The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports. This could be leverag… |
CVE-2018-18535 | High | 7.8 | 2018-12-26 | The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers (MSRs). This could be le… |
CVE-2018-17987 | High | 7.5 | 2018-12-26 | The determineWinner function of a smart contract implementation for HashHeroes Tiles, an Ethereum game, uses a certain blockhash value in an attempt to generat… |
CVE-2018-15518 | High | 8.8 | 2018-12-26 | QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document. |
CVE-2018-11742 | Critical | 9.8 | 2018-12-26 | NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI. |
CVE-2018-11741 | Critical | 9.8 | 2018-12-26 | NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GOTO(8) URIs. |