2018 CVEs (page 42)
Page 42 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20299 | Critical | 9.8 | 2018-12-19 | An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicious client… |
CVE-2018-15801 | High | 7.4 | 2018-12-19 | Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, the same pri… |
CVE-2018-15798 | High | 7.6 | 2018-12-19 | Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a u… |
CVE-2018-11799 | Medium | 6.5 | 2018-12-19 | Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflow… |
CVE-2018-19598 | Medium | 4.8 | 2018-12-19 | Statamic 2.10.3 allows XSS via First Name or Last Name to the /users URI in an 'Add new user' request. |
CVE-2018-19597 | Medium | 4.8 | 2018-12-19 | CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798. |
CVE-2018-19596 | Medium | 4.8 | 2018-12-19 | Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506. |
CVE-2018-19508 | Medium | 4.8 | 2018-12-19 | CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI. |
CVE-2018-19507 | Medium | 4.8 | 2018-12-19 | CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI. |
CVE-2018-19506 | Medium | 4.8 | 2018-12-19 | Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI. |
CVE-2018-18999 | High | 7.3 | 2018-12-19 | WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1. Lack of proper validation of user supplied input may allow an attacker to caus… |
CVE-2018-20298 | Medium | 6.5 | 2018-12-19 | S3 Browser before 8.1.5 contains an XML external entity (XXE) vulnerability, allowing remote attackers to read arbitrary files and obtain NTLMv2 hash values by… |
CVE-2018-6307 | High | 8.1 | 2018-12-19 | LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer extension that can res… |
CVE-2018-20024 | High | 7.5 | 2018-12-19 | LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS. |
CVE-2018-20023 | High | 7.5 | 2018-12-19 | LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker… |
CVE-2018-20022 | High | 7.5 | 2018-12-19 | LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allo… |
CVE-2018-20021 | High | 7.5 | 2018-12-19 | LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker… |
CVE-2018-20020 | Critical | 9.8 | 2018-12-19 | LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client code that can resul… |
CVE-2018-20019 | Critical | 9.8 | 2018-12-19 | LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remo… |
CVE-2018-15127 | Critical | 9.8 | 2018-12-19 | LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can… |
CVE-2018-15126 | Critical | 9.8 | 2018-12-19 | LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer extension that can res… |
CVE-2018-17195 | High | 7.5 | 2018-12-19 | The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle (MiTM) attack, resultin… |
CVE-2018-17194 | High | 7.5 | 2018-12-19 | When a client request to a cluster node was replicated to other nodes in the cluster for verification, the Content-Length was forwarded. On a DELETE request, t… |
CVE-2018-17193 | Medium | 6.1 | 2018-12-19 | The message-page.jsp error page used the value of the HTTP request header X-ProxyContextPath without sanitization, resulting in a reflected XSS attack. Mitigat… |
CVE-2018-17192 | Medium | 6.5 | 2018-12-19 | The X-Frame-Options headers were applied inconsistently on some HTTP responses, resulting in duplicate or missing security headers. Some browsers would interpr… |
CVE-2018-16883 | Low | 2.5 | 2018-12-19 | sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitiv… |
CVE-2018-20231 | High | 8.8 | 2018-12-19 | Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable… |
CVE-2018-20230 | High | 7.8 | 2018-12-19 | An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows att… |
CVE-2018-20228 | High | 8.0 | 2018-12-19 | Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF. |
CVE-2018-20227 | High | 7.5 | 2018-12-19 | RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive. |
CVE-2018-19829 | Medium | 6.5 | 2018-12-18 | Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID number is known. |
CVE-2018-19790 | Medium | 6.1 | 2018-12-18 | An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x befor… |
CVE-2018-19789 | Medium | 5.3 | 2018-12-18 | An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1… |
CVE-2018-18921 | Medium | 6.5 | 2018-12-18 | PHP Server Monitor before 3.3.2 has CSRF, as demonstrated by a Delete action. |
CVE-2018-17777 | Critical | 9.8 | 2018-12-18 | An issue was discovered on D-Link DVA-5592 A1_WI_20180823 devices. If the PIN of the page "/ui/cbpc/login" is the default Parental Control PIN (0000), it is po… |
CVE-2018-16884 | High | 8.0 | 2018-12-18 | A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use w… |
CVE-2018-6978 | Medium | 6.7 | 2018-12-18 | vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerabilit… |
CVE-2018-20213 | High | 7.5 | 2018-12-18 | wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long name. NOTE: this is not a Micro… |
CVE-2018-19522 | Medium | 5.5 | 2018-12-18 | DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x800020F4) with a buffer containing user defined content. The… |
CVE-2018-1833 | Medium | 5.3 | 2018-12-18 | IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has already gained authoris… |
CVE-2018-4015 | High | 8.1 | 2018-12-18 | An exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK. The configuration of the HTTP client does not enforce a se… |
CVE-2018-20201 | High | 7.8 | 2018-12-18 | There is a stack-based buffer over-read in the jsfNameFromString function of jsflash.c in Espruino 2V00, leading to a denial of service or possibly unspecified… |
CVE-2018-20199 | Medium | 5.5 | 2018-12-18 | A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a… |
CVE-2018-20198 | Medium | 5.5 | 2018-12-18 | A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a… |
CVE-2018-20197 | High | 7.8 | 2018-12-18 | There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2… |
CVE-2018-20196 | High | 7.8 | 2018-12-18 | There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2)… |
CVE-2018-20195 | Medium | 5.5 | 2018-12-18 | A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a… |
CVE-2018-20194 | High | 7.8 | 2018-12-18 | There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2… |
CVE-2018-7833 | High | 7.5 | 2018-12-17 | An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0… |
CVE-2018-7812 | High | 7.5 | 2018-12-17 | An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where th… |
CVE-2018-7804 | Medium | 6.1 | 2018-12-17 | A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user cli… |
CVE-2018-7797 | Medium | 6.1 | 2018-12-17 | A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all… |
CVE-2018-20190 | Medium | 6.5 | 2018-12-17 | In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Service (applic… |
CVE-2018-20189 | Medium | 6.5 | 2018-12-17 | In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted t… |
CVE-2018-20188 | High | 8.8 | 2018-12-17 | FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account. |
CVE-2018-20186 | Medium | 6.5 | 2018-12-17 | An issue was discovered in Bento4 1.5.1-627. AP4_Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, r… |
CVE-2018-20185 | Medium | 5.3 | 2018-12-17 | In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows atta… |
CVE-2018-20184 | Medium | 6.5 | 2018-12-17 | In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a den… |
CVE-2018-20133 | Critical | 9.8 | 2018-12-17 | ymlref allows code injection. |
CVE-2018-20123 | Medium | 5.5 | 2018-12-17 | pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error. |
CVE-2018-20092 | High | 7.5 | 2018-12-17 | PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request. |
CVE-2018-19976 | Medium | 5.5 | 2018-12-17 | In YARA 3.8.1, bytecode in a specially crafted compiled rule is exposed to information about its environment, in libyara/exec.c. This is a consequence of the d… |
CVE-2018-19975 | Medium | 5.5 | 2018-12-17 | In YARA 3.8.1, bytecode in a specially crafted compiled rule can read data from any arbitrary address in memory, in libyara/exec.c. Specifically, OP_COUNT can… |
CVE-2018-19974 | Medium | 5.5 | 2018-12-17 | In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to… |
CVE-2018-19936 | Medium | 6.5 | 2018-12-17 | PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion. |
CVE-2018-19933 | Medium | 6.1 | 2018-12-17 | Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry. |
CVE-2018-19828 | Medium | 6.1 | 2018-12-17 | Artica Integria IMS 5.0.83 has XSS via the search_string parameter. |
CVE-2018-19036 | Critical | 9.8 | 2018-12-17 | An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized exe… |
CVE-2018-18556 | Critical | 9.9 | 2018-12-17 | A privilege escalation issue was discovered in VyOS 1.1.8. The default configuration also allows operator users to execute the pppd binary with elevated (sudo)… |
CVE-2018-18555 | Critical | 9.9 | 2018-12-17 | A sandbox escape issue was discovered in VyOS 1.1.8. It provides a restricted management shell for operator users to administer the device. By issuing various… |
CVE-2018-16596 | High | 7.5 | 2018-12-17 | A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box (2, Standard, and Plus) prior to v09.04.00 and Internet… |
CVE-2018-14856 | Medium | 6.3 | 2018-12-17 | Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G… |
CVE-2018-14855 | Medium | 6.3 | 2018-12-17 | Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow… |
CVE-2018-14854 | Medium | 6.3 | 2018-12-17 | Buffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G… |
CVE-2018-14853 | Medium | 4.3 | 2018-12-17 | A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy… |
CVE-2018-14852 | Medium | 6.3 | 2018-12-17 | Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920… |
CVE-2018-1891 | Medium | 5.4 | 2018-12-17 | IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus… |
CVE-2018-1889 | Medium | 5.4 | 2018-12-17 | IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu… |
CVE-2018-20172 | Medium | 6.1 | 2018-12-17 | An issue was discovered in Nagios XI before 5.5.8. The rss_url parameter of rss_dashlet/magpierss/scripts/magpie_slashbox.php is not filtered, resulting in an… |
CVE-2018-20171 | Medium | 6.1 | 2018-12-17 | An issue was discovered in Nagios XI before 5.5.8. The url parameter of rss_dashlet/magpierss/scripts/magpie_simple.php is not filtered, resulting in an XSS vu… |
CVE-2018-20027 | Critical | 9.8 | 2018-12-17 | The yaml_parse.load method in Pylearn2 allows code injection. |
CVE-2018-19822 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SharedCriteria.jsp" has reflected XSS via the… |
CVE-2018-19821 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SecurityPolicies.jsp" has reflected XSS via th… |
CVE-2018-19820 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Roles.jsp" has reflected XSS via the ConnPoolN… |
CVE-2018-19819 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Rights.jsp" has reflected XSS via the ConnPool… |
CVE-2018-19818 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Contacts.jsp" has reflected XSS via the ConnPo… |
CVE-2018-19817 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/AdminAuthorisationFrame.jsp" has reflected XSS… |
CVE-2018-19816 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/categorytree/ChooseCategory.jsp" has reflected… |
CVE-2018-19815 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" has reflected XSS via… |
CVE-2018-19814 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscriptions.jsp" has reflected XSS via the C… |
CVE-2018-19813 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscribers.jsp" has reflected XSS via the Con… |
CVE-2018-19812 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SubFolderPackages.jsp" has reflected XSS via t… |
CVE-2018-19811 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Import.jsp" has reflected XSS via the ConnPool… |
CVE-2018-19810 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupMove.jsp" has reflected XSS via the ConnP… |
CVE-2018-19809 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupCopy.jsp" has reflected XSS via the ConnP… |
CVE-2018-19775 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Variables.jsp" has reflected XSS via the ConnPoolName and GroupId… |
CVE-2018-19774 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolNa… |
CVE-2018-19773 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoo… |
CVE-2018-19772 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolNam… |
CVE-2018-19771 | Medium | 6.1 | 2018-12-17 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPool.jsp" has reflected XSS via the PropName parameter. |