2018 CVEs (page 4)
Page 4 of 179 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-25138 | Critical | 9.8 | 2025-12-24 | FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations. Attackers can exploi… |
CVE-2018-25137 | High | 7.5 | 2025-12-24 | FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig REST API that allows attackers to download sensitive configurat… |
CVE-2018-25136 | High | 7.5 | 2025-12-24 | FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Atta… |
CVE-2018-25135 | Critical | 9.8 | 2025-12-24 | Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user i… |
CVE-2018-25134 | Critical | 9.8 | 2025-12-24 | Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the webNewAcct.cgi script that allows unauthenticated attackers to cre… |
CVE-2018-25133 | Medium | 4.3 | 2025-12-24 | Synaccess netBooter NP-0801DU 7.4 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper re… |
CVE-2018-25131 | High | 7.2 | 2025-12-24 | Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configuration file upload functionality. Attacke… |
CVE-2018-25130 | Medium | 6.2 | 2025-12-24 | Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an… |
CVE-2018-25129 | High | 7.5 | 2025-12-24 | SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilities that allow attackers to access sensitive user credentials… |
CVE-2018-25128 | High | 8.2 | 2025-12-24 | SOCA Access Control System 180612 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through unvalidated POST… |
CVE-2018-25127 | Medium | 5.3 | 2025-12-24 | SOCA Access Control System 180612 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper re… |
CVE-2018-25126 | | 2025-11-24 | Shenzhen TVT Digital Technology Co., Ltd. NVMS-9000 firmware (used by many white-labeled DVR/NVR/IPC products) contains hardcoded API credentials and an OS com… | |
CVE-2018-25125 | | 2025-11-14 | Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to t… | |
CVE-2018-25124 | | 2025-11-10 | PacsOne Server version 6.6.2 (prior versions are likely affected) contains a directory traversal vulnerability within the web-based DICOM viewer component. Suc… | |
CVE-2018-25123 | High | 7.8 | 2025-10-30 | Nagios XI versions prior to 5.5.7 contain a privilege escalation vulnerability in the MRTG graphing component. MRTG-related processes/scripts executed with exc… |
CVE-2018-25122 | High | 8.8 | 2025-10-30 | Nagios XI versions prior to 5.4.13 contain a remote code execution vulnerability in the Component Download page. The download/import handler used unsafe comman… |
CVE-2018-25121 | Medium | 5.4 | 2025-10-30 | Nagios XI versions prior to 5.4.13 are vulnerable to cross-site scripting (XSS) via the Views page of the web interface. Insufficient validation or escaping of… |
CVE-2018-25119 | Medium | 6.1 | 2025-10-30 | Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the "fusionwindow" parameter. Insufficient validation or escaping of use… |
CVE-2018-25120 | Critical | 9.8 | 2025-10-29 | D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality… |
CVE-2018-25118 | | 2025-10-20 | GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an at… | |
CVE-2018-25117 | | 2025-10-15 | VestaCP commit a3f0fa1 (2018-05-31) up to commit ee03eff (2018-06-13) contain embedded malicious code that resulted in a supply-chain compromise. New installat… | |
CVE-2018-25115 | Critical | 9.8 | 2025-08-27 | Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability… |
CVE-2018-25114 | | 2025-07-23 | A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication… | |
CVE-2018-25113 | | 2025-07-23 | An unauthenticated path traversal vulnerability exists in Dicoogle PACS Web Server version 2.5.0 and possibly earlier. The vulnerability allows remote attacker… | |
CVE-2018-25112 | High | 7.5 | 2025-06-04 | An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of… |
CVE-2018-25111 | Medium | 5.1 | 2025-05-31 | django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py. |
CVE-2018-25110 | High | 7.5 | 2025-05-23 | Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in several regular expre… |
CVE-2018-25109 | Medium | 6.4 | 2025-03-23 | A vulnerability has been found in Nintendo Animal Crossing, Doubutsu no Mori+ and Doubutsu no Mori e+ 1.00/1.01 on GameCube and classified as critical. Affecte… |
CVE-2018-9378 | Medium | 6.2 | 2025-01-28 | In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local… |
CVE-2018-9373 | High | 8.8 | 2025-01-28 | In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of p… |
CVE-2018-9464 | High | 7.8 | 2025-01-18 | In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with… |
CVE-2018-9461 | High | 7.0 | 2025-01-18 | In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead… |
CVE-2018-9406 | Medium | 5.5 | 2025-01-18 | In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with… |
CVE-2018-9405 | Medium | 6.7 | 2025-01-18 | In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2018-9401 | High | 7.8 | 2025-01-18 | In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privi… |
CVE-2018-9389 | High | 7.8 | 2025-01-18 | In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of pri… |
CVE-2018-9387 | High | 7.8 | 2025-01-18 | In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of privil… |
CVE-2018-9447 | Medium | 5.5 | 2025-01-17 | In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to a missing null check. This could lead… |
CVE-2018-9434 | High | 7.8 | 2025-01-17 | In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalation of privilege wit… |
CVE-2018-9384 | Medium | 4.4 | 2025-01-17 | In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local information disclosure with System execut… |
CVE-2018-9383 | Medium | 4.4 | 2025-01-17 | In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wi… |
CVE-2018-9382 | High | 7.8 | 2025-01-17 | In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profile due to a missing permission check. Th… |
CVE-2018-9379 | Medium | 5.5 | 2025-01-17 | In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy. This could lead to loca… |
CVE-2018-9375 | High | 7.8 | 2025-01-17 | In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This cou… |
CVE-2018-25108 | High | 7.5 | 2025-01-16 | An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption. |
CVE-2018-4301 | Critical | 9.8 | 2025-01-08 | This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp. |
CVE-2018-25107 | High | 7.5 | 2024-12-29 | The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of random bits. |
CVE-2018-25106 | Medium | 6.3 | 2024-12-23 | A vulnerability, which was classified as critical, has been found in webuidesigning NebulaX Theme up to 5.0 on WordPress. This issue affects the function nebul… |
CVE-2018-9391 | Medium | 6.7 | 2024-12-05 | In update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor ker.c, there is a possible out of… |
CVE-2018-9390 | Medium | 6.7 | 2024-12-05 | In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local … |
CVE-2018-9388 | Critical | 9.8 | 2024-12-05 | In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows. T… |
CVE-2018-9386 | Medium | 6.7 | 2024-12-05 | In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a missing bounds check. This could lead to local e… |
CVE-2018-9463 | Medium | 6.7 | 2024-12-05 | In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to lo… |
CVE-2018-9462 | Medium | 6.7 | 2024-12-05 | In store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege … |
CVE-2018-9439 | Medium | 6.7 | 2024-12-05 | In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after-free due to improper locking. This could lead to local escal… |
CVE-2018-9416 | Medium | 6.7 | 2024-12-05 | In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to local escalation of privilege with … |
CVE-2018-9408 | Medium | 4.4 | 2024-12-05 | In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check. This could lead to a local inform… |
CVE-2018-9407 | Medium | 5.5 | 2024-12-05 | In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclosure of kernel data. |
CVE-2018-9404 | Medium | 6.7 | 2024-12-05 | In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with Sy… |
CVE-2018-9403 | Medium | 6.7 | 2024-12-05 | In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overflow due to a missing bounds check… |
CVE-2018-9402 | High | 7.8 | 2024-12-05 | In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel. |
CVE-2018-9400 | Medium | 6.7 | 2024-12-05 | In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c, there is a possible out of b… |
CVE-2018-9399 | Medium | 6.7 | 2024-12-05 | In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could lead to local escalation of privilege with System executio… |
CVE-2018-9398 | Medium | 6.7 | 2024-12-05 | In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of priv… |
CVE-2018-9397 | Medium | 6.7 | 2024-12-05 | In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2018-9396 | Medium | 6.7 | 2024-12-04 | In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. Th… |
CVE-2018-9395 | Medium | 6.7 | 2024-12-04 | In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c, there i… |
CVE-2018-9394 | Medium | 6.7 | 2024-12-04 | In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper input validation. This… |
CVE-2018-9393 | Medium | 6.7 | 2024-12-04 | In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due to a missing bounds check. This could l… |
CVE-2018-9392 | Medium | 6.7 | 2024-12-04 | In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible out of bounds write due to a missing bound… |
CVE-2018-9449 | Medium | 5.5 | 2024-12-03 | In process_service_search_attr_rsp of sdp_discovery.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local informati… |
CVE-2018-9441 | Medium | 5.5 | 2024-12-03 | In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… |
CVE-2018-9435 | Medium | 5.5 | 2024-12-02 | In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2018-9431 | High | 7.8 | 2024-12-02 | In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with… |
CVE-2018-9430 | Critical | 9.8 | 2024-12-02 | In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no addi… |
CVE-2018-9429 | Medium | 6.5 | 2024-12-02 | In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This could lead to information disclosure with n… |
CVE-2018-9426 | High | 7.5 | 2024-12-02 | In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This co… |
CVE-2018-9423 | Medium | 6.5 | 2024-12-02 | In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds check. This could lead to denial of ser… |
CVE-2018-9418 | Critical | 9.8 | 2024-12-02 | In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution… |
CVE-2018-9414 | High | 7.8 | 2024-12-02 | In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to a missing bounds check. This could lead… |
CVE-2018-9413 | High | 8.8 | 2024-12-02 | In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution… |
CVE-2018-9376 | Medium | 6.7 | 2024-12-02 | In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. Th… |
CVE-2018-9381 | High | 7.5 | 2024-12-02 | In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information dis… |
CVE-2018-9380 | High | 8.8 | 2024-12-02 | In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege… |
CVE-2018-9377 | Medium | 5.5 | 2024-11-28 | In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local e… |
CVE-2018-9374 | High | 7.8 | 2024-11-28 | In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution… |
CVE-2018-9354 | Medium | 6.5 | 2024-11-27 | In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could lead to remote denial… |
CVE-2018-9353 | Medium | 6.5 | 2024-11-27 | In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bounds check. This could lead to remote d… |
CVE-2018-9352 | Medium | 6.5 | 2024-11-27 | In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This could lead to remote denial of service wi… |
CVE-2018-9351 | Medium | 6.5 | 2024-11-27 | In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check. This could lead to remote denial of se… |
CVE-2018-9350 | Medium | 6.5 | 2024-11-27 | In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This could lead to a denial of service with no ad… |
CVE-2018-9349 | Medium | 6.5 | 2024-11-27 | In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial of service with no additional execution… |
CVE-2018-5852 | High | 8.4 | 2024-11-26 | An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/i… |
CVE-2018-11816 | High | 7.8 | 2024-11-26 | Crafted Binder Request Causes Heap UAF in MediaServer |
CVE-2018-11952 | High | 8.4 | 2024-11-26 | An image with a version lower than the fuse version may potentially be booted lead to improper authentication. |
CVE-2018-11922 | Critical | 9.8 | 2024-11-26 | Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user. |
CVE-2018-9487 | Medium | 5.5 | 2024-11-20 | In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check. This could lead to local denial of serv… |
CVE-2018-9486 | Medium | 6.5 | 2024-11-20 | In hidh_l2cif_data_ind of hidh_conn.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure o… |
CVE-2018-9485 | Medium | 6.5 | 2024-11-20 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure… |
CVE-2018-9484 | High | 7.5 | 2024-11-20 | In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information discl… |