2018 CVEs (page 40)
Page 40 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20389 | Critical | 9.8 | 2018-12-23 | D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1… |
CVE-2018-20388 | Critical | 9.8 | 2018-12-23 | Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and is… |
CVE-2018-20387 | Critical | 9.8 | 2018-12-23 | Bnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and i… |
CVE-2018-20386 | Critical | 9.8 | 2018-12-23 | ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4… |
CVE-2018-20385 | Critical | 9.8 | 2018-12-23 | CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow… |
CVE-2018-20384 | Critical | 9.8 | 2018-12-23 | iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentia… |
CVE-2018-20383 | Critical | 9.8 | 2018-12-23 | ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1… |
CVE-2018-20382 | Critical | 9.8 | 2018-12-23 | Jiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso… |
CVE-2018-20381 | Critical | 9.8 | 2018-12-23 | Technicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6… |
CVE-2018-20380 | Critical | 9.8 | 2018-12-23 | Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1… |
CVE-2018-20379 | Medium | 4.7 | 2018-12-23 | Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1… |
CVE-2018-20377 | Critical | 9.8 | 2018-12-23 | Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /get_getnetworkconf.cgi on port 8080, leading to full control if the… |
CVE-2018-20376 | Medium | 5.5 | 2018-12-23 | An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asm_parse_… |
CVE-2018-20375 | Medium | 5.5 | 2018-12-23 | An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the sym_pop fu… |
CVE-2018-20374 | Medium | 5.5 | 2018-12-23 | An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the use_sectio… |
CVE-2018-20373 | Medium | 5.4 | 2018-12-23 | Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client. |
CVE-2018-20372 | Medium | 5.4 | 2018-12-23 | TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client. |
CVE-2018-20371 | Critical | 9.8 | 2018-12-23 | PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers to bypass intended GET restrictions vi… |
CVE-2018-20370 | Medium | 5.4 | 2018-12-23 | SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web… |
CVE-2018-20369 | Medium | 6.1 | 2018-12-23 | Barracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the ldap_user parameter to the cgi-mod/ldap_load_entry.cgi module. The in… |
CVE-2018-20368 | Medium | 5.4 | 2018-12-23 | The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback. |
CVE-2018-20331 | High | 7.8 | 2018-12-23 | Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged cod… |
CVE-2018-20367 | Medium | 6.1 | 2018-12-22 | The "mall some commodity details: commodity consultation" component in WSTMart 2.0.8_181212 has stored XSS via the consultContent parameter, as demonstrated by… |
CVE-2018-20365 | Medium | 6.5 | 2018-12-22 | LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow. |
CVE-2018-20364 | Medium | 6.5 | 2018-12-22 | LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. |
CVE-2018-20363 | Medium | 6.5 | 2018-12-22 | LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. |
CVE-2018-20362 | Medium | 5.5 | 2018-12-22 | A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a… |
CVE-2018-20361 | Medium | 5.5 | 2018-12-22 | An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The… |
CVE-2018-20360 | Medium | 5.5 | 2018-12-22 | An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8… |
CVE-2018-20359 | Medium | 5.5 | 2018-12-22 | An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2… |
CVE-2018-20358 | Medium | 5.5 | 2018-12-22 | An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8… |
CVE-2018-20357 | Medium | 5.5 | 2018-12-22 | A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability cau… |
CVE-2018-19863 | Medium | 5.5 | 2018-12-22 | An issue was discovered in 1Password 7.2.3.BETA before 7.2.3.BETA-3 on macOS. A mistake in error logging resulted in instances where sensitive data passed from… |
CVE-2018-20351 | Medium | 6.1 | 2018-12-22 | The Markdown component in Evernote (Chinese) before 8.3.2 on macOS allows stored XSS, aka MAC-832. |
CVE-2018-20349 | Medium | 6.5 | 2018-12-22 | The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (appl… |
CVE-2018-20348 | Medium | 5.5 | 2018-12-22 | libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) vi… |
CVE-2018-20325 | Critical | 9.8 | 2018-12-21 | There is a vulnerability in load() method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python comman… |
CVE-2018-20322 | Medium | 6.1 | 2018-12-21 | LimeSurvey version 3.15.5 contains a Cross-site scripting (XSS) vulnerability in Survey Resource zip upload, resulting in Javascript code execution against Lim… |
CVE-2018-20226 | High | 7.2 | 2018-12-21 | An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method. |
CVE-2018-20193 | High | 8.8 | 2018-12-21 | Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC) allow privilege esc… |
CVE-2018-19323 | Critical | 9.8 | 2018-12-21 | The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.0… |
CVE-2018-19322 | High | 7.8 | 2018-12-21 | The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC… |
CVE-2018-19321 | High | 7.8 | 2018-12-21 | The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC… |
CVE-2018-19320 | High | 7.8 | 2018-12-21 | The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.0… |
CVE-2018-18009 | Critical | 9.8 | 2018-12-21 | dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials. |
CVE-2018-18008 | Critical | 9.8 | 2018-12-21 | spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to discover admin credentials. |
CVE-2018-18007 | Critical | 9.8 | 2018-12-21 | atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials. |
CVE-2018-16778 | Medium | 6.1 | 2018-12-21 | Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query paramete… |
CVE-2018-20346 | High | 8.1 | 2018-12-21 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after craf… |
CVE-2018-20345 | Medium | 5.3 | 2018-12-21 | Incorrect access control in StackStorm API (st2api) in StackStorm before 2.9.2 and 2.10.x before 2.10.1 allows an attacker (who has a StackStorm account and is… |
CVE-2018-20342 | Medium | 6.8 | 2018-12-21 | The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to e… |
CVE-2018-5202 | High | 7.8 | 2018-12-21 | SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exists due to the way… |
CVE-2018-5201 | Medium | 5.5 | 2018-12-21 | Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724… |
CVE-2018-5196 | High | 8.8 | 2018-12-21 | Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted LZH archiv… |
CVE-2018-18332 | High | 7.5 | 2018-12-21 | A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other f… |
CVE-2018-18331 | High | 7.5 | 2018-12-21 | A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which c… |
CVE-2018-18330 | Medium | 6.5 | 2018-12-21 | An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3.0.1324 and below could allow an attacker to potentially trick… |
CVE-2018-20339 | Medium | 6.1 | 2018-12-21 | Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section. |
CVE-2018-20338 | Critical | 9.8 | 2018-12-21 | Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section. |
CVE-2018-20337 | High | 8.8 | 2018-12-21 | There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or… |
CVE-2018-20332 | High | 7.5 | 2018-12-21 | An issue has been discovered in the OpenWebif plugin through 1.2.4 for Enigma2 based devices. Reading of arbitrary files is possible with /file?action=download… |
CVE-2018-20330 | High | 8.8 | 2018-12-21 | The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of p… |
CVE-2018-20329 | High | 8.1 | 2018-12-21 | Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (whi… |
CVE-2018-20328 | Medium | 5.4 | 2018-12-21 | Chamilo LMS version 1.11.8 contains XSS in main/social/group_view.php in the social groups tool, allowing authenticated users to affect other users, under spec… |
CVE-2018-20327 | Medium | 5.4 | 2018-12-21 | Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebook_list.tpl in the gradebook dependencies tool, allowing authenticated users to a… |
CVE-2018-20318 | Critical | 9.8 | 2018-12-21 | An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. |
CVE-2018-20191 | High | 7.5 | 2018-12-20 | hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which allows attackers to cause a denial of s… |
CVE-2018-20124 | Medium | 5.5 | 2018-12-20 | hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge value. |
CVE-2018-19242 | High | 8.8 | 2018-12-20 | Buffer overflow in apply.cgi on TRENDnet TEW-632BRP 1.010B32 and TEW-673GRU devices allows attackers to hijack the control flow to any attacker-specified locat… |
CVE-2018-19241 | High | 7.5 | 2018-12-20 | Buffer overflow in video.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers to… |
CVE-2018-19240 | Critical | 9.8 | 2018-12-20 | Buffer overflow in network.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers t… |
CVE-2018-19239 | High | 7.2 | 2018-12-20 | TRENDnet TEW-673GRU v1.00b40 devices have an OS command injection vulnerability in the start_arpping function of the timer binary, which allows remote attacker… |
CVE-2018-19134 | High | 7.8 | 2018-12-20 | In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript document could exploit thi… |
CVE-2018-18767 | High | 7.0 | 2018-12-20 | An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g., change camera settings or play lullabi… |
CVE-2018-18629 | High | 7.8 | 2018-12-20 | An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybase-redirec… |
CVE-2018-18442 | High | 7.5 | 2018-12-20 | D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the device avail… |
CVE-2018-18441 | High | 7.5 | 2018-12-20 | D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-… |
CVE-2018-18399 | Critical | 9.8 | 2018-12-20 | SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitr… |
CVE-2018-18388 | Critical | 9.8 | 2018-12-20 | eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary commands by sending… |
CVE-2018-16627 | Medium | 6.1 | 2018-12-20 | panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature. |
CVE-2018-14846 | Medium | 5.4 | 2018-12-20 | The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php. |
CVE-2018-12651 | Medium | 6.1 | 2018-12-20 | A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed bac… |
CVE-2018-17247 | Medium | 5.9 | 2018-12-20 | Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API. If a policy allowing external network access… |
CVE-2018-17246 | Critical | 9.8 | 2018-12-20 | Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could… |
CVE-2018-17245 | Critical | 9.8 | 2018-12-20 | Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PDF reports. If a re… |
CVE-2018-17244 | Medium | 6.5 | 2018-12-20 | Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Nativ… |
CVE-2018-20216 | High | 7.5 | 2018-12-20 | QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled). |
CVE-2018-20126 | Medium | 5.5 | 2018-12-20 | hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled. |
CVE-2018-20125 | High | 7.5 | 2018-12-20 | hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive memory allocation) in create_cq_ring or c… |
CVE-2018-19005 | High | 7.8 | 2018-12-20 | Cscape, Version 9.80.75.3 SP3 and prior. An improper input validation vulnerability has been identified that may be exploited by processing specially crafted P… |
CVE-2018-18871 | Critical | 9.8 | 2018-12-20 | Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (in the same network… |
CVE-2018-15723 | Critical | 9.8 | 2018-12-20 | The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote attac… |
CVE-2018-15722 | High | 8.1 | 2018-12-20 | The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can in… |
CVE-2018-15721 | Critical | 9.8 | 2018-12-20 | The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use thi… |
CVE-2018-15720 | Critical | 9.8 | 2018-12-20 | Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API. |
CVE-2018-1160 | Critical | 9.8 | 2018-12-20 | Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote… |
CVE-2018-1000886 | Medium | 5.5 | 2018-12-20 | nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macr… |
CVE-2018-1000885 | Critical | 9.8 | 2018-12-20 | PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b contains a Improper Neutralization of Special Elements used in a Command ('Command Injec… |
CVE-2018-1000884 | Critical | 9.8 | 2018-12-20 | Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to 0.9.8-18 contains a CWE-208 / Information Exposure Through Ti… |
CVE-2018-1000883 | Medium | 6.5 | 2018-12-20 | Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added. This attack… |