2018 CVEs (page 52)
Page 52 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18774 | Medium | 6.1 | 2018-11-20 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows XSS via the admin/index.php module parameter. |
CVE-2018-18773 | High | 8.8 | 2018-11-20 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demonstrated by changing the root password. |
CVE-2018-18772 | High | 8.8 | 2018-11-20 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as demonstrated by executing an arbitrary OS… |
CVE-2018-18716 | Medium | 6.1 | 2018-11-20 | Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability. |
CVE-2018-18715 | Medium | 6.1 | 2018-11-20 | Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS. |
CVE-2018-18565 | Medium | 6.8 | 2018-11-20 | An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000… |
CVE-2018-18564 | High | 7.4 | 2018-11-20 | An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000… |
CVE-2018-18563 | Critical | 9.6 | 2018-11-20 | An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000… |
CVE-2018-18562 | High | 8.8 | 2018-11-20 | An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h232 Handheld Base Unit before 03.01.04. W… |
CVE-2018-18561 | High | 8.0 | 2018-11-20 | An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h232 Handheld Base Unit before 03.01.04. I… |
CVE-2018-18440 | High | 7.8 | 2018-11-20 | DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled. |
CVE-2018-18439 | Critical | 9.8 | 2018-11-20 | DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploita… |
CVE-2018-16224 | Medium | 5.3 | 2018-11-20 | Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted T… |
CVE-2018-16223 | Critical | 9.8 | 2018-11-20 | Insecure Cryptographic Storage of credentials in com.vestiacom.qbeecamera_preferences.xml in the QBee Cam application through 1.0.5 for Android allows an attac… |
CVE-2018-16222 | Medium | 6.8 | 2018-11-20 | Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to r… |
CVE-2018-12038 | Medium | 4.2 | 2018-11-20 | An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key. |
CVE-2018-12037 | Medium | 4.0 | 2018-11-20 | An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode), Samsung T3 and T5 portable… |
CVE-2018-17948 | Medium | 6.1 | 2018-11-20 | An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3. |
CVE-2018-1779 | High | 7.5 | 2018-11-20 | IBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause a denial of service due to not setting limits on JSON payload size. IB… |
CVE-2018-19367 | Critical | 9.8 | 2018-11-20 | Portainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the admin user is already created. This API endpoint will return 404… |
CVE-2018-19335 | Medium | 5.3 | 2018-11-20 | Google Monorail before 2018-06-07 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download ti… |
CVE-2018-19334 | Medium | 5.3 | 2018-11-20 | Google Monorail before 2018-05-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download ti… |
CVE-2018-10099 | Medium | 5.3 | 2018-11-20 | Google Monorail before 2018-04-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download ti… |
CVE-2018-17906 | High | 8.8 | 2018-11-19 | Philips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all versions. Default credentials and no authentication within third part… |
CVE-2018-9209 | Critical | 9.8 | 2018-11-19 | Unauthenticated arbitrary file upload vulnerability in FineUploader php-traditional-server <= v1.2.2 |
CVE-2018-9207 | Critical | 9.8 | 2018-11-19 | Arbitrary file upload in jQuery Upload File <= 4.0.2 |
CVE-2018-1841 | Medium | 6.2 | 2018-11-19 | IBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being world readable in boot/master node. IBM X-Force ID: 150901. |
CVE-2018-17190 | Critical | 9.8 | 2018-11-19 | In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The ma… |
CVE-2018-15761 | Critical | 9.9 | 2018-11-19 | Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A rem… |
CVE-2018-15759 | Critical | 9.1 | 2018-11-19 | Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious us… |
CVE-2018-18519 | High | 7.8 | 2018-11-19 | BestXsoftware Best Free Keylogger before 6.0.0 allows local users to gain privileges via a Trojan horse "%PROGRAMFILES%\BFK 5.2.9\syscrb.exe" file because of i… |
CVE-2018-19355 | Critical | 9.8 | 2018-11-19 | modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allows remote attackers to execute arbitrary… |
CVE-2018-19358 | High | 7.8 | 2018-11-18 | GNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the keyring is unlocked… |
CVE-2018-19353 | Medium | 6.5 | 2018-11-18 | The ansilove_ansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to cause a denial of service (out-of-bounds read and application cras… |
CVE-2018-19352 | Medium | 6.1 | 2018-11-18 | Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely. |
CVE-2018-19351 | Medium | 6.1 | 2018-11-18 | Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server. I… |
CVE-2018-19350 | Medium | 5.4 | 2018-11-17 | In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJ… |
CVE-2018-19349 | High | 7.2 | 2018-11-17 | In SeaCMS v6.64, there is SQL injection via the admin_makehtml.php topic parameter because of mishandling in include/mkhtml.func.php. |
CVE-2018-19348 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19347 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19346 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19345 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19344 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19343 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19342 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19341 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19340 | Medium | 6.1 | 2018-11-17 | Guriddo Form PHP 5.3 has XSS via the demos/jqform/defaultnodb/default.php OrderID, ShipName, ShipAddress, ShipCity, ShipPostalCode, ShipCountry, Freight, or de… |
CVE-2018-19333 | Critical | 9.8 | 2018-11-17 | pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to overwrite memory locations in processes running as root (but not escape the… |
CVE-2018-19332 | High | 8.8 | 2018-11-17 | An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI. |
CVE-2018-19331 | High | 7.5 | 2018-11-17 | An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter. |
CVE-2018-19329 | Medium | 4.9 | 2018-11-17 | GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfileh… |
CVE-2018-19328 | Critical | 9.8 | 2018-11-17 | LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal. |
CVE-2018-19327 | High | 8.8 | 2018-11-17 | An issue was discovered in JTBC(PHP) 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF. |
CVE-2018-19326 | High | 7.5 | 2018-11-17 | Zyxel VMG1312-B10D devices before 5.13(AAXA.8)C0 allow ../ Directory Traversal, as demonstrated by reading /etc/passwd. |
CVE-2018-19324 | Medium | 5.4 | 2018-11-17 | kimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home&mod=mypage&page=info URI. |
CVE-2018-19274 | High | 7.2 | 2018-11-17 | Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization w… |
CVE-2018-15769 | High | 7.5 | 2018-11-16 | RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue… |
CVE-2018-18955 | High | 7.0 | 2018-11-16 | In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user n… |
CVE-2018-19319 | Medium | 6.5 | 2018-11-16 | SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges. |
CVE-2018-19318 | High | 8.8 | 2018-11-16 | SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account. |
CVE-2018-19312 | High | 8.8 | 2018-11-16 | Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.24) allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI. |
CVE-2018-19311 | Medium | 5.4 | 2018-11-16 | Centreon 3.4.x (fixed in Centreon 18.10.0) allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring > Status Details >… |
CVE-2018-18806 | Critical | 9.8 | 2018-11-16 | School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb. |
CVE-2018-18805 | Critical | 9.8 | 2018-11-16 | Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb. |
CVE-2018-18804 | Critical | 9.8 | 2018-11-16 | Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb. |
CVE-2018-18803 | Critical | 9.8 | 2018-11-16 | Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb. |
CVE-2018-18801 | Critical | 9.8 | 2018-11-16 | The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id=[SQL]. |
CVE-2018-18799 | High | 8.8 | 2018-11-16 | School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos. |
CVE-2018-18797 | High | 8.8 | 2018-11-16 | School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php. |
CVE-2018-18796 | Critical | 9.8 | 2018-11-16 | Library Management System 1.0 has SQL Injection via the "Search for Books" screen. |
CVE-2018-18795 | Critical | 9.8 | 2018-11-16 | School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter. |
CVE-2018-18794 | High | 8.8 | 2018-11-16 | School Event Management System 1.0 allows CSRF via user/controller.php?action=edit. |
CVE-2018-18793 | Critical | 9.8 | 2018-11-16 | School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos. |
CVE-2018-18763 | Critical | 9.8 | 2018-11-16 | SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection. |
CVE-2018-18761 | Critical | 9.8 | 2018-11-16 | SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection. |
CVE-2018-18760 | Medium | 6.5 | 2018-11-16 | RhinOS 3.0 build 1190 allows CSRF. |
CVE-2018-18759 | High | 7.5 | 2018-11-16 | Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow. |
CVE-2018-18756 | High | 7.5 | 2018-11-16 | Local Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008. |
CVE-2018-18755 | Critical | 9.8 | 2018-11-16 | K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/update user_id parameter. |
CVE-2018-16396 | High | 8.1 | 2018-11-16 | An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result fr… |
CVE-2018-16395 | Critical | 9.8 | 2018-11-16 | An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL… |
CVE-2018-15693 | Medium | 6.4 | 2018-11-16 | Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass via insecure direct object reference. |
CVE-2018-15692 | Medium | 6.4 | 2018-11-16 | Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions. |
CVE-2018-7363 | Medium | 4.3 | 2018-11-16 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization de… |
CVE-2018-7362 | High | 7.5 | 2018-11-16 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perfor… |
CVE-2018-7361 | Medium | 6.5 | 2018-11-16 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial… |
CVE-2018-7360 | Critical | 9.6 | 2018-11-16 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get… |
CVE-2018-7359 | Critical | 9.0 | 2018-11-16 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbit… |
CVE-2018-1797 | Medium | 6.3 | 2018-11-16 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse directories on the syst… |
CVE-2018-1639 | Medium | 4.3 | 2018-11-16 | The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond i… |
CVE-2018-9086 | High | 7.2 | 2018-11-16 | In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to dow… |
CVE-2018-9085 | Medium | 4.9 | 2018-11-16 | A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administ… |
CVE-2018-9073 | Medium | 5.9 | 2018-11-16 | Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow a… |
CVE-2018-9071 | Medium | 5.3 | 2018-11-16 | Lenovo Chassis Management Module (CMM) prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication config… |
CVE-2018-19296 | High | 8.8 | 2018-11-16 | PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack. |
CVE-2018-19301 | Medium | 6.1 | 2018-11-15 | tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log. |
CVE-2018-5407 | Medium | 4.7 | 2018-11-15 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'p… |
CVE-2018-18954 | Medium | 5.5 | 2018-11-15 | The pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or read access to PowerNV memory. |
CVE-2018-16621 | High | 7.2 | 2018-11-15 | Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection. |
CVE-2018-16620 | High | 7.5 | 2018-11-15 | Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control. |