2018 CVEs (page 51)
Page 51 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19568 | Medium | 5.5 | 2018-11-26 | A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that… |
CVE-2018-19567 | Medium | 5.5 | 2018-11-26 | A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundl… |
CVE-2018-19566 | High | 7.1 | 2018-11-26 | A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles… |
CVE-2018-19565 | High | 7.1 | 2018-11-26 | A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles t… |
CVE-2018-18807 | High | 7.6 | 2018-11-26 | The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerabilities which may allow an authenticate… |
CVE-2018-11077 | Medium | 6.7 | 2018-11-26 | 'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Ap… |
CVE-2018-11076 | Medium | 6.5 | 2018-11-26 | Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an inf… |
CVE-2018-11067 | Medium | 6.1 | 2018-11-26 | Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Pro… |
CVE-2018-11066 | Critical | 9.8 | 2018-11-26 | Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Pro… |
CVE-2018-16862 | Medium | 5.3 | 2018-11-26 | A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file cr… |
CVE-2018-14646 | Medium | 5.5 | 2018-11-26 | The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netl… |
CVE-2018-19564 | Medium | 6.1 | 2018-11-26 | Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters (_ikcf_client and _ikcf_position and _ikcf_othe… |
CVE-2018-16854 | Medium | 6.5 | 2018-11-26 | A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent… |
CVE-2018-1905 | High | 7.1 | 2018-11-26 | IBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attac… |
CVE-2018-19562 | High | 8.8 | 2018-11-26 | An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background > Program Upgrad… |
CVE-2018-19561 | High | 8.8 | 2018-11-26 | sikcms 1.1 has CSRF via admin.php?m=Admin&c=Users&a=userAdd to add an administrator account. |
CVE-2018-19560 | High | 8.8 | 2018-11-26 | BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account. |
CVE-2018-19559 | Critical | 9.8 | 2018-11-26 | CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the reference_id parameter. |
CVE-2018-19558 | Critical | 9.8 | 2018-11-26 | An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/… |
CVE-2018-19557 | Critical | 9.8 | 2018-11-26 | An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images. |
CVE-2018-19556 | Medium | 4.3 | 2018-11-26 | zb_system/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this… |
CVE-2018-19555 | High | 8.8 | 2018-11-26 | tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password. |
CVE-2018-19554 | Medium | 5.4 | 2018-11-26 | An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/im… |
CVE-2018-19553 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php |
CVE-2018-19552 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php. |
CVE-2018-19551 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php. |
CVE-2018-19550 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .p… |
CVE-2018-19549 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php. |
CVE-2018-19548 | Critical | 9.8 | 2018-11-26 | index.php?r=site%2Flogin in EduSec through 4.2.6 does not restrict sending a series of LoginForm[username] and LoginForm[password] parameters, which might make… |
CVE-2018-19547 | Medium | 6.1 | 2018-11-26 | JTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter. |
CVE-2018-19546 | High | 8.8 | 2018-11-26 | JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter. |
CVE-2018-19545 | High | 8.8 | 2018-11-26 | JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user. |
CVE-2018-19544 | Medium | 6.5 | 2018-11-26 | JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news. |
CVE-2018-19543 | High | 7.8 | 2018-11-26 | An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c. |
CVE-2018-19542 | Medium | 6.5 | 2018-11-26 | An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of ser… |
CVE-2018-19541 | High | 8.8 | 2018-11-26 | An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.2… |
CVE-2018-19540 | High | 8.8 | 2018-11-26 | An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.2… |
CVE-2018-19539 | Medium | 6.5 | 2018-11-26 | An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of… |
CVE-2018-19537 | High | 7.2 | 2018-11-26 | TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file tha… |
CVE-2018-19535 | Medium | 6.5 | 2018-11-26 | In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer o… |
CVE-2018-19532 | High | 8.8 | 2018-11-26 | A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject… |
CVE-2018-19531 | Critical | 9.8 | 2018-11-26 | HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses java.beans.XMLEncoder unsafely when… |
CVE-2018-19530 | Critical | 9.8 | 2018-11-26 | HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses XStream unsafely when configured wit… |
CVE-2018-19528 | Critical | 9.8 | 2018-11-26 | TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load Exception) via crafted DNS packets to port 53/udp. |
CVE-2018-19520 | High | 8.8 | 2018-11-25 | An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block certain PHP functi… |
CVE-2018-19519 | Medium | 5.5 | 2018-11-25 | In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. |
CVE-2018-19518 | High | 7.5 | 2018-11-25 | University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap func… |
CVE-2018-19517 | Medium | 5.5 | 2018-11-24 | An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf. |
CVE-2018-19504 | High | 7.8 | 2018-11-23 | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in libfaad/filtbank.c. |
CVE-2018-19503 | High | 7.8 | 2018-11-23 | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack-based buffer overflow in the function calculate_gain() in libfaad… |
CVE-2018-19502 | High | 7.8 | 2018-11-23 | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a heap-based buffer overflow in the function excluded_channels() in libfa… |
CVE-2018-19499 | High | 7.2 | 2018-11-23 | Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code Execution because authenticated administrators have a reachable call to unserialize in the Gdn_F… |
CVE-2018-19492 | High | 7.8 | 2018-11-23 | An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairo… |
CVE-2018-19491 | High | 7.8 | 2018-11-23 | An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_opt… |
CVE-2018-19490 | High | 7.8 | 2018-11-23 | An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data… |
CVE-2018-19486 | Critical | 9.8 | 2018-11-23 | Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the ru… |
CVE-2018-19477 | High | 7.8 | 2018-11-23 | psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion. |
CVE-2018-19476 | High | 7.8 | 2018-11-23 | psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion. |
CVE-2018-19475 | High | 7.8 | 2018-11-23 | psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked w… |
CVE-2018-19469 | Medium | 6.1 | 2018-11-23 | ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter. |
CVE-2018-19468 | Critical | 9.8 | 2018-11-23 | HuCart 5.7.4 has SQL injection in get_ip() in system/class/helper_class.php via the X-Forwarded-For HTTP header to the user/index.php?load=login&act=act_login… |
CVE-2018-19464 | Medium | 4.8 | 2018-11-22 | Discuz! X3.4 allows XSS via admin.php because admincp/admincp_setting.php and template\default\common\footer.htm mishandles statcode field from third-party sta… |
CVE-2018-19463 | High | 8.8 | 2018-11-22 | zb_system/function/lib/upload.php in Z-BlogPHP through 1.5.1 allows remote attackers to execute arbitrary PHP code by using the image/jpeg content type in an u… |
CVE-2018-19459 | High | 7.8 | 2018-11-22 | Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file. |
CVE-2018-19458 | High | 7.5 | 2018-11-22 | In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2… |
CVE-2018-19457 | High | 7.2 | 2018-11-22 | Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file. |
CVE-2018-19443 | Medium | 5.9 | 2018-11-22 | The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc… |
CVE-2018-19437 | High | 8.8 | 2018-11-22 | UCMS 1.4.7 allows remote authenticated users to change the administrator password because $_COOKIE['admin_'.cookiehash] is used for arbitrary cookie values tha… |
CVE-2018-19436 | High | 7.2 | 2018-11-22 | An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parameter. |
CVE-2018-19435 | High | 7.2 | 2018-11-22 | An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter. |
CVE-2018-19434 | High | 7.2 | 2018-11-22 | An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injecti… |
CVE-2018-19433 | Medium | 6.1 | 2018-11-22 | ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $cur_lang value. |
CVE-2018-19432 | Medium | 6.5 | 2018-11-22 | An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of ser… |
CVE-2018-19424 | High | 7.2 | 2018-11-21 | ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files. |
CVE-2018-19423 | High | 7.2 | 2018-11-21 | Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file. |
CVE-2018-19422 | High | 7.2 | 2018-11-21 | /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these. |
CVE-2018-19421 | Low | 3.8 | 2018-11-21 | In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php… |
CVE-2018-19420 | Low | 3.8 | 2018-11-21 | In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative cases in which HTML can be executed, such as a file with no ext… |
CVE-2018-19417 | Critical | 10.0 | 2018-11-21 | An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parse_publish_vhdr() that parses MQTT PUBLISH messages with a variable length… |
CVE-2018-19416 | High | 7.8 | 2018-11-21 | An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf. |
CVE-2018-19411 | High | 8.8 | 2018-11-21 | PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including admi… |
CVE-2018-19410 | Critical | 9.8 | 2018-11-21 | PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote… |
CVE-2018-19409 | Critical | 9.8 | 2018-11-21 | An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used. |
CVE-2018-1843 | Medium | 4.1 | 2018-11-21 | The Identity and Access Management (IAM) services (IBM Cloud Private 3.1.0) do not use a secure channel, such as SSL, to exchange information only when accesse… |
CVE-2018-19407 | Medium | 5.5 | 2018-11-21 | The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereferenc… |
CVE-2018-19406 | Medium | 5.5 | 2018-11-21 | kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) v… |
CVE-2018-19404 | High | 7.2 | 2018-11-21 | In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by creating a ZIP arc… |
CVE-2018-19396 | High | 7.5 | 2018-11-20 | ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application crash) via an unserialize call for the com… |
CVE-2018-19395 | High | 7.5 | 2018-11-20 | ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer dereference and application crash) because… |
CVE-2018-19390 | Medium | 5.5 | 2018-11-20 | FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via TIFF d… |
CVE-2018-19389 | Medium | 5.5 | 2018-11-20 | FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via BMP da… |
CVE-2018-19388 | Medium | 5.5 | 2018-11-20 | FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read, access violation, and application crash)… |
CVE-2018-19376 | Medium | 6.5 | 2018-11-20 | An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to delete a log file via the index.php?m=admin&c=data&a=clea… |
CVE-2018-18865 | High | 8.1 | 2018-11-20 | The Royal browser extensions TS before 4.3.60728 (Release Date 2018-07-28) and TSX before 3.3.1 (Release Date 2018-09-13) allow Credentials Disclosure. |
CVE-2018-18864 | Critical | 9.6 | 2018-11-20 | Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed. |
CVE-2018-18861 | Critical | 9.8 | 2018-11-20 | Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command. |
CVE-2018-18859 | High | 7.8 | 2018-11-20 | Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an un… |
CVE-2018-18858 | High | 7.8 | 2018-11-20 | Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an un… |
CVE-2018-18857 | High | 7.8 | 2018-11-20 | Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an un… |
CVE-2018-18856 | High | 7.8 | 2018-11-20 | Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an un… |