2018 CVEs (page 5)
Page 5 of 179 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-9483 | Medium | 6.5 | 2024-11-20 | In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosu… |
CVE-2018-9482 | Medium | 6.5 | 2024-11-20 | In intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the B… |
CVE-2018-9481 | Medium | 6.5 | 2024-11-20 | In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure… |
CVE-2018-9480 | Medium | 6.5 | 2024-11-20 | In bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information discl… |
CVE-2018-9479 | Critical | 9.8 | 2024-11-20 | In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lea… |
CVE-2018-9478 | Critical | 9.8 | 2024-11-20 | In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lea… |
CVE-2018-9477 | High | 7.8 | 2024-11-20 | In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This could lead to local e… |
CVE-2018-9475 | High | 8.8 | 2024-11-20 | In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalat… |
CVE-2018-9474 | High | 7.8 | 2024-11-20 | In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input validation. This could lead to local esc… |
CVE-2018-9472 | High | 8.8 | 2024-11-20 | In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in an unprivile… |
CVE-2018-9471 | High | 7.8 | 2024-11-20 | In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local escalation of privil… |
CVE-2018-9470 | High | 8.8 | 2024-11-20 | In bff_Scanner_addOutPos of Scanner.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of privil… |
CVE-2018-9469 | High | 7.8 | 2024-11-20 | In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing permission check. This could lead to local e… |
CVE-2018-9468 | High | 7.1 | 2024-11-20 | In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This could lead to local information disclosur… |
CVE-2018-9467 | Critical | 9.8 | 2024-11-20 | In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with… |
CVE-2018-9466 | High | 8.8 | 2024-11-19 | In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivil… |
CVE-2018-9456 | High | 7.5 | 2024-11-19 | In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service… |
CVE-2018-9440 | Medium | 6.5 | 2024-11-19 | In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional exe… |
CVE-2018-9433 | High | 8.8 | 2024-11-19 | In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This could lead to remote code execution with… |
CVE-2018-9432 | High | 7.8 | 2024-11-19 | In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass. This could lead to local esca… |
CVE-2018-9428 | High | 7.8 | 2024-11-19 | In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbitrary code executio… |
CVE-2018-9424 | High | 7.8 | 2024-11-19 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2018-9421 | Medium | 5.5 | 2024-11-19 | In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local informa… |
CVE-2018-9420 | Medium | 5.5 | 2024-11-19 | In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information… |
CVE-2018-9419 | High | 7.5 | 2024-11-19 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure… |
CVE-2018-9417 | High | 7.8 | 2024-11-19 | In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with n… |
CVE-2018-9412 | Medium | 5.5 | 2024-11-19 | In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no ad… |
CVE-2018-9411 | High | 8.8 | 2024-11-19 | In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote arbitrary code execution w… |
CVE-2018-9410 | Medium | 5.5 | 2024-11-19 | In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2018-9365 | High | 8.8 | 2024-11-19 | In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote… |
CVE-2018-9409 | High | 7.8 | 2024-11-19 | In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation… |
CVE-2018-9372 | High | 7.8 | 2024-11-19 | In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of p… |
CVE-2018-9371 | Medium | 6.4 | 2024-11-19 | In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with insufficie… |
CVE-2018-9370 | High | 7.3 | 2024-11-19 | In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounds check. This coul… |
CVE-2018-9369 | High | 7.3 | 2024-11-19 | In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no additio… |
CVE-2018-9368 | High | 7.8 | 2024-11-19 | In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This could lead to local es… |
CVE-2018-9367 | High | 7.8 | 2024-11-19 | In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. This could lead to l… |
CVE-2018-9366 | High | 7.8 | 2024-11-19 | In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer overflow. This could l… |
CVE-2018-9364 | High | 7.5 | 2024-11-19 | In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction… |
CVE-2018-9348 | Medium | 6.5 | 2024-11-19 | In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service due to resource exhaustion with no additi… |
CVE-2018-9346 | Medium | 5.5 | 2024-11-19 | In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local i… |
CVE-2018-9345 | Medium | 5.5 | 2024-11-19 | In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local i… |
CVE-2018-9344 | High | 7.8 | 2024-11-19 | In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with… |
CVE-2018-9341 | High | 7.8 | 2024-11-19 | In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This could lead to remote arbitrary code executio… |
CVE-2018-9340 | Medium | 5.5 | 2024-11-19 | In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information di… |
CVE-2018-9339 | High | 7.8 | 2024-11-19 | In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion. This could lead to local escal… |
CVE-2018-9338 | High | 7.8 | 2024-11-19 | In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2018-25104 | Medium | 4.3 | 2024-10-17 | A vulnerability was found in CoinGate Plugin up to 1.2.7 on PrestaShop. It has been rated as problematic. Affected by this issue is the function postProcess of… |
CVE-2018-25105 | Critical | 9.8 | 2024-10-16 | The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /inc/root.php file in versions up to, and… |
CVE-2018-20072 | High | 7.8 | 2024-09-23 | Insufficient data validation in PDF in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform out of bounds memory access via a crafted PDF f… |
CVE-2018-25103 | Medium | 5.3 | 2024-06-17 | There exists use-after-free vulnerabilities in lighttpd <= 1.4.50 request parsing which might read from invalid pointers to memory used in the same request, no… |
CVE-2018-25101 | Low | 3.5 | 2024-04-22 | A vulnerability, which was classified as problematic, has been found in l2c2technologies Koha up to 20180108. This issue affects some unknown processing of the… |
CVE-2018-25100 | Medium | 5.3 | 2024-03-24 | The Mojolicious module before 7.66 for Perl may leak cookies in certain situations related to multiple similar cookies for the same domain. This affects Mojo… |
CVE-2018-25099 | Critical | 9.8 | 2024-03-18 | In the CryptX module before 0.062 for Perl, gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() do not verify the tag. |
CVE-2018-25090 | Medium | 5.4 | 2024-03-13 | An unauthenticated remote attacker can use an XSS attack due to improper neutralization of input during web page generation. User interaction is required. This… |
CVE-2018-25098 | Medium | 4.3 | 2024-02-04 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in blockmason credit-protocol. It has been declared as problematic. Affected by this vulnerability is… |
CVE-2018-25095 | Critical | 9.8 | 2024-01-08 | The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration files. If thi… |
CVE-2018-25097 | Low | 3.5 | 2024-01-02 | A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to… |
CVE-2018-25096 | Medium | 4.3 | 2023-12-30 | A vulnerability was found in MdAlAmin-aol Own Health Record 0.1-alpha/0.2-alpha/0.3-alpha/0.3.1-alpha. It has been rated as problematic. This issue affects som… |
CVE-2018-16153 | High | 7.5 | 2023-12-12 | An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary externa… |
CVE-2018-25094 | Low | 3.5 | 2023-12-03 | A vulnerability was found in ระบบบัญชีออนไลน์ Online Accounting System up to 1.4.0 and classified as problematic. This issue affects some unknown processing of… |
CVE-2018-8863 | Medium | 5.9 | 2023-11-09 | The HTTP header in Philips EncoreAnywhere contains data an attacker may be able to use to gain sensitive information. |
CVE-2018-25093 | Medium | 5.5 | 2023-11-06 | A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the… |
CVE-2018-25092 | Medium | 5.5 | 2023-11-05 | A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been declared as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2018-17879 | Critical | 9.8 | 2023-10-26 | An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection… |
CVE-2018-17878 | Critical | 9.8 | 2023-10-26 | Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf() function. |
CVE-2018-17559 | High | 7.5 | 2023-10-26 | Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras. |
CVE-2018-17558 | Critical | 9.8 | 2023-10-26 | Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6… |
CVE-2018-16739 | High | 8.8 | 2023-10-26 | An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute cod… |
CVE-2018-25091 | Medium | 6.1 | 2023-10-15 | urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or sch… |
CVE-2018-5478 | Medium | 6.1 | 2023-09-21 | Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension. |
CVE-2018-25089 | Low | 3.5 | 2023-08-28 | A vulnerability was found in glb Meetup Tag Extension 0.1 on MediaWiki. It has been rated as problematic. This issue affects some unknown processing of the com… |
CVE-2018-25088 | Medium | 5.5 | 2023-07-18 | A vulnerability, which was classified as critical, was found in Blue Yonder postgraas_server up to 2.0.0b2. Affected is the function _create_pg_connection/crea… |
CVE-2018-25087 | Low | 3.5 | 2023-06-06 | A vulnerability classified as problematic was found in Arborator Server. This vulnerability affects the function start of the file project.cgi. The manipulatio… |
CVE-2018-25086 | Low | 3.5 | 2023-06-01 | A vulnerability was found in sea75300 FanPress CM up to 3.6.3. It has been classified as problematic. This affects the function getArticlesPreview of the file… |
CVE-2018-25085 | Low | 2.4 | 2023-05-01 | A vulnerability classified as problematic was found in Responsive Menus 7.x-1.x-dev on Drupal. Affected by this vulnerability is the function responsive_menus_… |
CVE-2018-17883 | Medium | 6.1 | 2023-04-16 | An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12. An attacker could send an e-mail message with a malicious link to an OTRS sys… |
CVE-2018-17537 | Medium | 5.4 | 2023-04-16 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. blog-viewer has stored XSS du… |
CVE-2018-17536 | Medium | 5.4 | 2023-04-15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the me… |
CVE-2018-17455 | High | 7.5 | 2023-04-15 | An issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers could obtain sensitive informatio… |
CVE-2018-17454 | Medium | 5.4 | 2023-04-15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the is… |
CVE-2018-17453 | Medium | 5.3 | 2023-04-15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers may have been able… |
CVE-2018-17452 | Critical | 9.8 | 2023-04-15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request… |
CVE-2018-17451 | High | 8.8 | 2023-04-15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Cross Site Request F… |
CVE-2018-17450 | Medium | 4.3 | 2023-04-15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request… |
CVE-2018-17449 | High | 7.5 | 2023-04-15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers could obtain… |
CVE-2018-15472 | High | 7.5 | 2023-04-15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using roug… |
CVE-2018-25084 | Low | 3.5 | 2023-04-10 | A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2. Affected by this issue is some unknow… |
CVE-2018-25083 | Critical | 9.8 | 2023-03-27 | The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git branch name. |
CVE-2018-25048 | High | 8.8 | 2023-03-23 | The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system… |
CVE-2018-25082 | Medium | 6.3 | 2023-03-21 | A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/to_xml. The manipulation leads… |
CVE-2018-25081 | High | 7.5 | 2023-03-09 | Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element. NOTE: the vendor's position is that there have been important legiti… |
CVE-2018-7935 | Medium | 5.3 | 2023-02-10 | There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerability to make the network where the E5573C… |
CVE-2018-25080 | Low | 3.5 | 2023-02-04 | A vulnerability, which was classified as problematic, has been found in MobileDetect 2.8.31. This issue affects the function initLayoutType of the file example… |
CVE-2018-25079 | Medium | 4.3 | 2023-02-04 | A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file i… |
CVE-2018-25078 | High | 7.8 | 2023-01-26 | man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but n… |
CVE-2018-25077 | Low | 3.5 | 2023-01-18 | A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spint… |
CVE-2018-14628 | Medium | 4.3 | 2023-01-17 | An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could… |
CVE-2018-25076 | Medium | 5.5 | 2023-01-16 | A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the function getRandomFeaturedEventByDate/ge… |
CVE-2018-25075 | Medium | 4.6 | 2023-01-15 | A vulnerability classified as critical has been found in karsany OBridge up to 1.3. Affected is the function getAllStandaloneProcedureAndFunction of the file o… |