2018 CVEs (page 48)
Page 48 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19853 | High | 8.8 | 2018-12-04 | An issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege vulnerability (that allows control over the whole web site) via the a… |
CVE-2018-19849 | Medium | 4.8 | 2018-12-04 | An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter. |
CVE-2018-19843 | Medium | 5.5 | 2018-12-04 | opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as dem… |
CVE-2018-19842 | Medium | 5.5 | 2018-12-04 | getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assemb… |
CVE-2018-19841 | Medium | 5.5 | 2018-12-04 | The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds rea… |
CVE-2018-19840 | Medium | 5.5 | 2018-12-04 | The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused… |
CVE-2018-19839 | Medium | 6.5 | 2018-12-04 | In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-… |
CVE-2018-19838 | Medium | 6.5 | 2018-12-04 | In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a denial-of-service resulting from stack con… |
CVE-2018-19837 | Medium | 6.5 | 2018-12-04 | In LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp allows attackers to cause a denial-of-service resulting from stack… |
CVE-2018-4021 | High | 7.2 | 2018-12-03 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The atta… |
CVE-2018-4020 | High | 7.2 | 2018-12-03 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The atta… |
CVE-2018-4019 | High | 7.2 | 2018-12-03 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The atta… |
CVE-2018-3854 | High | 7.1 | 2018-12-03 | An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially c… |
CVE-2018-14709 | Critical | 9.8 | 2018-12-03 | Incorrect access control in the Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to bypass authentication due to insecure token genera… |
CVE-2018-14708 | Critical | 9.8 | 2018-12-03 | An insecure transport protocol used by Drobo Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to intercept network traffic. |
CVE-2018-14707 | High | 7.5 | 2018-12-03 | Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary l… |
CVE-2018-14706 | Critical | 9.8 | 2018-12-03 | System command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute sys… |
CVE-2018-14704 | Medium | 6.1 | 2018-12-03 | Cross-site scripting in the MySQL API error page in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to execute JavaScript via a malformed URL path. |
CVE-2018-14703 | Critical | 9.8 | 2018-12-03 | Incorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve the M… |
CVE-2018-14702 | High | 7.5 | 2018-12-03 | Incorrect access control in the /drobopix/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve sensit… |
CVE-2018-14701 | Critical | 9.8 | 2018-12-03 | System command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system… |
CVE-2018-14700 | High | 7.5 | 2018-12-03 | Incorrect access control in the /mysql/api/logfile.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve MySQL l… |
CVE-2018-14699 | Critical | 9.8 | 2018-12-03 | System command injection in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system… |
CVE-2018-14698 | Medium | 6.1 | 2018-12-03 | Cross-site scripting in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to execute JavaScript via the "userna… |
CVE-2018-14697 | Medium | 6.1 | 2018-12-03 | Cross-site scripting in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to execute JavaScript via the usernam… |
CVE-2018-14696 | High | 7.5 | 2018-12-03 | Incorrect access control in the /mysql/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve sensitive… |
CVE-2018-14695 | High | 7.5 | 2018-12-03 | Incorrect access control in the /mysql/api/diags.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve diagnosti… |
CVE-2018-6440 | Critical | 9.1 | 2018-12-03 | A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain… |
CVE-2018-6439 | High | 7.8 | 2018-12-03 | A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a loc… |
CVE-2018-19836 | Medium | 6.1 | 2018-12-03 | In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including the Cookie header), and common.inc.php allows registering var… |
CVE-2018-19835 | Medium | 6.1 | 2018-12-03 | Metinfo 6.1.3 has reflected XSS via the admin/column/move.php lang_columnerr4 parameter. |
CVE-2018-19827 | High | 8.8 | 2018-12-03 | In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service (applicat… |
CVE-2018-19826 | Medium | 6.5 | 2018-12-03 | In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operator()(Sass::String_Quoted*) stack frame) m… |
CVE-2018-19824 | High | 7.8 | 2018-12-03 | In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfa… |
CVE-2018-16863 | High | 7.3 | 2018-12-03 | It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protec… |
CVE-2018-1002009 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002008 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002007 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002006 | Medium | 4.8 | 2018-12-03 | These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:14: via POST request var… |
CVE-2018-1002005 | Medium | 4.8 | 2018-12-03 | These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the filter_signup_date parameter. |
CVE-2018-1002004 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002003 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002002 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002001 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002000 | High | 7.2 | 2018-12-03 | There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. The… |
CVE-2018-7116 | High | 7.5 | 2018-12-03 | HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This pr… |
CVE-2018-7115 | Medium | 5.3 | 2018-12-03 | HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windows. This p… |
CVE-2018-7114 | Critical | 9.8 | 2018-12-03 | HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. This probl… |
CVE-2018-7113 | Medium | 6.6 | 2018-12-03 | A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restrictions for firmware upda… |
CVE-2018-7112 | Medium | 5.5 | 2018-12-03 | The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was res… |
CVE-2018-1840 | Medium | 6.0 | 2018-12-03 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configur… |
CVE-2018-6332 | Medium | 5.9 | 2018-12-03 | A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This aff… |
CVE-2018-16869 | Medium | 5.7 | 2018-12-03 | A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An atta… |
CVE-2018-16868 | Medium | 5.6 | 2018-12-03 | A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker… |
CVE-2018-16855 | High | 7.5 | 2018-12-03 | An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while co… |
CVE-2018-19797 | Medium | 6.5 | 2018-12-03 | In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (used by ast.cpp and ast_selectors.cpp) may… |
CVE-2018-19796 | Medium | 6.1 | 2018-12-03 | An open redirect in the Ninja Forms plugin before 3.3.19.1 for WordPress allows Remote Attackers to redirect a user via the lib/StepProcessing/step-processing… |
CVE-2018-19795 | Medium | 6.8 | 2018-12-03 | ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to th… |
CVE-2018-19794 | Medium | 6.1 | 2018-12-03 | Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML vi… |
CVE-2018-19793 | High | 7.2 | 2018-12-03 | jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonst… |
CVE-2018-19792 | Medium | 6.7 | 2018-12-03 | The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service (buffer overflow) or possibly have unspecified other imp… |
CVE-2018-19791 | Medium | 6.5 | 2018-12-03 | The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size… |
CVE-2018-19788 | High | 8.8 | 2018-12-03 | A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command. |
CVE-2018-19787 | Medium | 6.1 | 2018-12-02 | An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a r… |
CVE-2018-4040 | High | 7.8 | 2018-12-01 | An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A specially crafted docum… |
CVE-2018-4039 | High | 7.8 | 2018-12-01 | An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can allow an attacker to co… |
CVE-2018-4038 | High | 7.8 | 2018-12-01 | An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-te… |
CVE-2018-3951 | High | 7.2 | 2018-12-01 | An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server. A specially crafted HTTP r… |
CVE-2018-3950 | High | 8.8 | 2018-12-01 | An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3 htt… |
CVE-2018-3949 | High | 7.5 | 2018-12-01 | An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a dire… |
CVE-2018-19785 | Medium | 6.1 | 2018-12-01 | PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php. |
CVE-2018-19784 | High | 7.5 | 2018-12-01 | The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calc… |
CVE-2018-15716 | High | 8.8 | 2018-11-30 | NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS… |
CVE-2018-15715 | Critical | 9.8 | 2018-11-30 | Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauth… |
CVE-2018-7831 | High | 8.8 | 2018-11-30 | An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium… |
CVE-2018-7830 | High | 7.5 | 2018-11-30 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Pre… |
CVE-2018-7811 | Critical | 9.8 | 2018-11-30 | An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an u… |
CVE-2018-7810 | Medium | 6.1 | 2018-11-30 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, P… |
CVE-2018-7809 | Critical | 9.8 | 2018-11-30 | An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an u… |
CVE-2018-7807 | High | 8.8 | 2018-11-30 | Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file… |
CVE-2018-7806 | High | 8.8 | 2018-11-30 | Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly upload… |
CVE-2018-16477 | Medium | 6.5 | 2018-11-30 | A bypass vulnerability in Active Storage >= 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the `content-disposition` and `content… |
CVE-2018-16476 | High | 7.5 | 2018-11-30 | A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using… |
CVE-2018-19290 | Critical | 9.8 | 2018-11-30 | In modules/HELPBOT_MODULE in Budabot 0.6 through 4.0, lax syntax validation allows remote attackers to perform a command injection attack against the PHP daemo… |
CVE-2018-18987 | High | 8.8 | 2018-11-30 | VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing… |
CVE-2018-18983 | High | 8.8 | 2018-11-30 | VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file (which is already in memory) into another heap-based buffer, which may… |
CVE-2018-18860 | High | 7.8 | 2018-11-30 | A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-permissive configuration settings and a… |
CVE-2018-15835 | High | 7.5 | 2018-11-30 | Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983. |
CVE-2018-3948 | High | 7.5 | 2018-11-30 | An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server. A specially crafted URL can cause… |
CVE-2018-15768 | Medium | 6.5 | 2018-11-30 | Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration sett… |
CVE-2018-15767 | High | 8.8 | 2018-11-30 | The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in t… |
CVE-2018-1928 | Medium | 6.7 | 2018-11-30 | IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpo… |
CVE-2018-1927 | Medium | 6.5 | 2018-11-30 | IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a use… |
CVE-2018-1897 | High | 8.4 | 2018-11-30 | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow, caused by improper bounds checking whic… |
CVE-2018-9072 | Medium | 6.5 | 2018-11-30 | In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads. |
CVE-2018-16097 | Medium | 6.5 | 2018-11-30 | LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due t… |
CVE-2018-16093 | Medium | 6.5 | 2018-11-30 | In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a back… |
CVE-2018-0716 | Medium | 6.1 | 2018-11-30 | Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4… |
CVE-2018-14637 | Medium | 6.1 | 2018-11-30 | The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnera… |
CVE-2018-19777 | Medium | 5.5 | 2018-11-30 | In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg-device.c, as demonstrated by mutool. |