2018 CVEs (page 46)
Page 46 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-5800 | Medium | 6.5 | 2018-12-07 | An off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.7 can be exploited to cau… |
CVE-2018-7080 | High | 7.5 | 2018-12-07 | A vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access points. An attacker who is able to exploit the vulnerability c… |
CVE-2018-7079 | High | 7.2 | 2018-12-07 | Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, w… |
CVE-2018-7067 | High | 7.2 | 2018-12-07 | A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise. An authentication flaw in all versions of ClearPass coul… |
CVE-2018-7066 | Critical | 9.0 | 2018-12-07 | An unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices. The ClearPass OnConnect feature permits administrators… |
CVE-2018-7065 | High | 7.2 | 2018-12-07 | An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by mult… |
CVE-2018-7063 | High | 8.1 | 2018-12-07 | In Aruba ClearPass, disabled API admins can still perform read/write operations. In certain circumstances, API admins in ClearPass which have been disabled may… |
CVE-2018-18314 | Critical | 9.8 | 2018-12-07 | Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations. |
CVE-2018-18313 | Critical | 9.1 | 2018-12-07 | Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory. |
CVE-2018-18311 | Critical | 9.8 | 2018-12-07 | Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. |
CVE-2018-16861 | High | 7.6 | 2018-12-07 | A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infra… |
CVE-2018-19960 | High | 7.0 | 2018-12-07 | The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which mig… |
CVE-2018-1920 | High | 7.1 | 2018-12-07 | IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could ex… |
CVE-2018-1896 | Medium | 4.6 | 2018-12-07 | IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID… |
CVE-2018-1883 | Medium | 5.3 | 2018-12-07 | A problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow attackers to execute a denial of service attack preventing use… |
CVE-2018-1663 | Medium | 5.9 | 2018-12-07 | IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enab… |
CVE-2018-1424 | High | 7.1 | 2018-12-07 | IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could e… |
CVE-2018-15362 | Critical | 9.1 | 2018-12-07 | XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0 |
CVE-2018-7364 | Critical | 9.8 | 2018-12-07 | All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to improper access c… |
CVE-2018-19001 | Medium | 4.3 | 2018-12-07 | Philips HealthSuite Health Android App, all versions. The software uses simple encryption that is not strong enough for the level of protection required. |
CVE-2018-17924 | High | 8.6 | 2018-12-07 | Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connectio… |
CVE-2018-11905 | Critical | 9.8 | 2018-12-07 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in WLAN function due to lac… |
CVE-2018-19939 | High | 7.5 | 2018-12-07 | The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08… |
CVE-2018-19935 | High | 7.5 | 2018-12-07 | ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a… |
CVE-2018-19932 | Medium | 5.5 | 2018-12-07 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and… |
CVE-2018-19931 | High | 7.8 | 2018-12-07 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer ove… |
CVE-2018-6757 | High | 7.5 | 2018-12-06 | Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via s… |
CVE-2018-6756 | High | 7.8 | 2018-12-06 | Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized command… |
CVE-2018-6755 | High | 7.2 | 2018-12-06 | Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code… |
CVE-2018-19927 | Medium | 4.8 | 2018-12-06 | Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zForm_save_cha… |
CVE-2018-19926 | Medium | 6.1 | 2018-12-06 | Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH_INFO. |
CVE-2018-19925 | Critical | 9.8 | 2018-12-06 | An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. It has SQL injection via the member/member_order.php type parameter, re… |
CVE-2018-19924 | Medium | 6.1 | 2018-12-06 | An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. An email address can be modified in between the request for a validatio… |
CVE-2018-19923 | High | 8.8 | 2018-12-06 | An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. There is member/member_email.php?action=edit CSRF. |
CVE-2018-19665 | Medium | 5.7 | 2018-12-06 | The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption. |
CVE-2018-19660 | High | 8.8 | 2018-12-06 | An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Buil… |
CVE-2018-19659 | High | 8.8 | 2018-12-06 | An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Buil… |
CVE-2018-16603 | Medium | 5.9 | 2018-12-06 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middlewar… |
CVE-2018-16602 | Medium | 5.9 | 2018-12-06 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middlewar… |
CVE-2018-16601 | High | 8.1 | 2018-12-06 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middlewar… |
CVE-2018-16600 | Medium | 5.9 | 2018-12-06 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middlewar… |
CVE-2018-16599 | Medium | 5.9 | 2018-12-06 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middlewar… |
CVE-2018-16598 | Medium | 5.9 | 2018-12-06 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middlewar… |
CVE-2018-16528 | High | 8.1 | 2018-12-06 | Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConn… |
CVE-2018-16527 | Medium | 5.9 | 2018-12-06 | Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow in… |
CVE-2018-16526 | High | 8.1 | 2018-12-06 | Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow re… |
CVE-2018-16525 | High | 8.1 | 2018-12-06 | Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow re… |
CVE-2018-16524 | Medium | 5.9 | 2018-12-06 | Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow in… |
CVE-2018-16523 | High | 7.4 | 2018-12-06 | Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow di… |
CVE-2018-16522 | High | 8.1 | 2018-12-06 | Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt. |
CVE-2018-19922 | Medium | 6.1 | 2018-12-06 | Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC0… |
CVE-2018-19921 | Medium | 6.1 | 2018-12-06 | Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller. |
CVE-2018-19919 | Medium | 4.8 | 2018-12-06 | Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG element. |
CVE-2018-19915 | Medium | 4.8 | 2018-12-06 | DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field. |
CVE-2018-19914 | Medium | 4.8 | 2018-12-06 | DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field. |
CVE-2018-19913 | Medium | 4.8 | 2018-12-06 | DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field. |
CVE-2018-18362 | Medium | 6.1 | 2018-12-06 | Norton Password Manager for Android (formerly Norton Identity Safe) may be susceptible to a cross site scripting (XSS) exploit, which is a type of issue that c… |
CVE-2018-19911 | High | 7.5 | 2018-12-06 | FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/system (or api/bg_sys… |
CVE-2018-19908 | High | 8.8 | 2018-12-06 | An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php (the STIX 1 import code), an unescaped filename string is used to construct a shel… |
CVE-2018-9568 | High | 7.8 | 2018-12-06 | In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional ex… |
CVE-2018-9567 | High | 7.8 | 2018-12-06 | On Pixel devices there is a bug causing verified boot to show the same certificate fingerprint despite using different signing keys. This may lead to local esc… |
CVE-2018-9566 | Medium | 5.7 | 2018-12-06 | In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… |
CVE-2018-9565 | High | 7.5 | 2018-12-06 | In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no addi… |
CVE-2018-9562 | High | 7.5 | 2018-12-06 | In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure… |
CVE-2018-9560 | High | 7.8 | 2018-12-06 | In HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in… |
CVE-2018-9559 | High | 7.8 | 2018-12-06 | In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error. This could lead to local escalation of… |
CVE-2018-9558 | High | 7.8 | 2018-12-06 | In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2018-9557 | High | 7.8 | 2018-12-06 | In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privil… |
CVE-2018-9556 | Critical | 9.8 | 2018-12-06 | In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privi… |
CVE-2018-9555 | High | 8.8 | 2018-12-06 | In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege ove… |
CVE-2018-9554 | Medium | 5.5 | 2018-12-06 | In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead to local… |
CVE-2018-9553 | High | 7.8 | 2018-12-06 | In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no… |
CVE-2018-9552 | Medium | 5.5 | 2018-12-06 | In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could lead to information disclosure with no… |
CVE-2018-9551 | High | 7.8 | 2018-12-06 | In CAacDecoder_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could lead to remote code execution in the me… |
CVE-2018-9550 | High | 7.8 | 2018-12-06 | In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no… |
CVE-2018-9549 | High | 7.8 | 2018-12-06 | In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no addition… |
CVE-2018-9548 | Medium | 5.5 | 2018-12-06 | In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to local information disc… |
CVE-2018-9547 | High | 7.8 | 2018-12-06 | In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the s… |
CVE-2018-9538 | High | 7.8 | 2018-12-06 | In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function pointer due to an i… |
CVE-2018-1935 | Medium | 4.3 | 2018-12-06 | IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM X-Force ID: 153315. |
CVE-2018-1871 | Medium | 5.4 | 2018-12-06 | IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.0, 3.0.2, and 3.0.5 is vulnerable to cross-site scripting. This vulnerability all… |
CVE-2018-1525 | Medium | 5.9 | 2018-12-06 | IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Tr… |
CVE-2018-1505 | Medium | 4.0 | 2018-12-06 | IBM i2 Enterprise Insight Analysis 2.1.7 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 141413. |
CVE-2018-1504 | Medium | 6.1 | 2018-12-06 | IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious… |
CVE-2018-15332 | High | 7.0 | 2018-12-06 | The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to… |
CVE-2018-19907 | High | 8.8 | 2018-12-06 | A Server-Side Template Injection issue was discovered in Crafter CMS 3.0.18. Attackers with developer privileges may execute OS commands by Creating/Editing a… |
CVE-2018-19898 | High | 8.8 | 2018-12-06 | ThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php and is exploitable by normal authenticated users via the post[id][1]… |
CVE-2018-19897 | High | 7.2 | 2018-12-06 | ThinkCMF X2.2.2 has SQL Injection via the function _listorders() in AdminbaseController.class.php and is exploitable with the manager privilege via the listord… |
CVE-2018-19896 | High | 7.2 | 2018-12-06 | ThinkCMF X2.2.2 has SQL Injection via the function delete() in SlideController.class.php and is exploitable with the manager privilege via the ids[] parameter… |
CVE-2018-19895 | High | 7.2 | 2018-12-06 | ThinkCMF X2.2.2 has SQL Injection via the function edit_post() in NavController.class.php and is exploitable with the manager privilege via the parentid parame… |
CVE-2018-19894 | High | 7.2 | 2018-12-06 | ThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in CommentadminController.class.php and is exploitable with the manager privilege via… |
CVE-2018-19893 | Critical | 9.8 | 2018-12-06 | SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string. |
CVE-2018-19892 | Medium | 4.8 | 2018-12-06 | DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field. |
CVE-2018-19891 | Medium | 5.5 | 2018-12-06 | An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerabi… |
CVE-2018-19890 | Medium | 5.5 | 2018-12-06 | An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerabi… |
CVE-2018-19889 | Medium | 5.5 | 2018-12-06 | An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerabi… |
CVE-2018-19888 | Medium | 5.5 | 2018-12-06 | An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerabi… |
CVE-2018-19887 | Medium | 5.5 | 2018-12-06 | An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerabi… |
CVE-2018-19886 | Medium | 5.5 | 2018-12-06 | An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerabi… |
CVE-2018-19882 | Medium | 5.5 | 2018-12-06 | In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL pointer dereference an… |