2018 CVEs (page 55)
Page 55 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-2489 | High | 7.8 | 2018-11-13 | Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in Go… |
CVE-2018-2488 | High | 7.8 | 2018-11-13 | It is possible for a malware application installed on an Android device to send local push notifications with an empty message to SAP Fiori Client and cause th… |
CVE-2018-2487 | High | 8.3 | 2018-11-13 | SAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file provided by users: When extracted in specific use cases, file… |
CVE-2018-2485 | High | 7.7 | 2018-11-13 | It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing of information and… |
CVE-2018-2483 | Medium | 4.3 | 2018-11-13 | HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console (CMC) by changing reque… |
CVE-2018-2482 | High | 7.5 | 2018-11-13 | SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60.19942.0, allows an attacker to prevent legitimate users from acces… |
CVE-2018-2481 | High | 7.2 | 2018-11-13 | In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is us… |
CVE-2018-2479 | Medium | 6.1 | 2018-11-13 | SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross… |
CVE-2018-2478 | High | 7.2 | 2018-11-13 | An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30… |
CVE-2018-2477 | High | 8.8 | 2018-11-13 | Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted… |
CVE-2018-2476 | Medium | 6.1 | 2018-11-13 | Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site. |
CVE-2018-2473 | Medium | 6.5 | 2018-11-13 | SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker… |
CVE-2018-7926 | Medium | 4.6 | 2018-11-13 | Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability. Due to improper permission configuration for spe… |
CVE-2018-7925 | Medium | 6.8 | 2018-11-13 | The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vulnerability. An unauthenticated attacker… |
CVE-2018-7910 | Medium | 6.8 | 2018-11-13 | Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.127(C432), 8.0.0.128(C432), 8.0.0.137(C… |
CVE-2018-14658 | Medium | 6.1 | 2018-11-13 | A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils… |
CVE-2018-14657 | High | 8.1 | 2018-11-13 | A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce it… |
CVE-2018-14655 | Medium | 4.6 | 2018-11-13 | A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible to inject arbitrary Javascript-Code via… |
CVE-2018-12416 | High | 7.1 | 2018-11-13 | The GridServer Broker and GridServer Director components of TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow… |
CVE-2018-6260 | Medium | 5.5 | 2018-11-13 | NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU perfor… |
CVE-2018-1808 | Medium | 4.3 | 2018-11-13 | IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: 149828. |
CVE-2018-1792 | High | 8.8 | 2018-11-13 | IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local user to inject code that could be exec… |
CVE-2018-17187 | High | 7.4 | 2018-11-13 | The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. Unless a verification… |
CVE-2018-16850 | Critical | 9.8 | 2018-11-13 | postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted… |
CVE-2018-15795 | High | 8.1 | 2018-11-13 | Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote ma… |
CVE-2018-15772 | High | 7.1 | 2018-11-13 | Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability… |
CVE-2018-15771 | Medium | 5.5 | 2018-11-13 | Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious… |
CVE-2018-15452 | Medium | 5.5 | 2018-11-13 | A vulnerability in the DLL loading component of Cisco Advanced Malware Protection (AMP) for Endpoints on Windows could allow an authenticated, local attacker t… |
CVE-2018-18591 | Medium | 6.8 | 2018-11-13 | A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40… |
CVE-2018-19246 | High | 7.5 | 2018-11-13 | PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web serve… |
CVE-2018-19244 | High | 8.6 | 2018-11-13 | An XML External Entity (XXE) vulnerability exists in the Charles 4.2.7 import/export setup option. If a user imports a "Charles Settings.xml" file from an atta… |
CVE-2018-19229 | Medium | 5.4 | 2018-11-12 | An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter. |
CVE-2018-19228 | High | 7.5 | 2018-11-12 | An issue was discovered in LAOBANCMS 2.0. It allows arbitrary file deletion via ../ directory traversal in the admin/pic.php del parameter, as demonstrated by… |
CVE-2018-19227 | Medium | 5.4 | 2018-11-12 | An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/liuyan.php neirong[] parameter. |
CVE-2018-19226 | Medium | 5.3 | 2018-11-12 | An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to list .txt files via a direct request for the /data/0/admin.txt URI. |
CVE-2018-19225 | High | 8.8 | 2018-11-12 | An issue was discovered in LAOBANCMS 2.0. admin/mima.php has CSRF. |
CVE-2018-19224 | High | 7.5 | 2018-11-12 | An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies. |
CVE-2018-19223 | Medium | 4.8 | 2018-11-12 | An issue was discovered in LAOBANCMS 2.0. It allows XSS via the first input field to the admin/type.php?id=1 URI. |
CVE-2018-19222 | Critical | 9.8 | 2018-11-12 | An issue was discovered in LAOBANCMS 2.0. It allows a /install/mysql_hy.php?riqi=0&i=0 attack to reset the admin password, even if install.txt exists. |
CVE-2018-19221 | Critical | 9.8 | 2018-11-12 | An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter. |
CVE-2018-19220 | Critical | 9.8 | 2018-11-12 | An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host parameter to the install/ URI. |
CVE-2018-19219 | Medium | 6.5 | 2018-11-12 | In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack. |
CVE-2018-19218 | Medium | 6.5 | 2018-11-12 | In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead to a DoS attack. |
CVE-2018-19217 | Medium | 6.5 | 2018-11-12 | In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the… |
CVE-2018-19216 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c. |
CVE-2018-19215 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % and $ and ! character… |
CVE-2018-19214 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input. |
CVE-2018-19213 | Medium | 5.5 | 2018-11-12 | Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c. |
CVE-2018-19212 | Medium | 6.5 | 2018-11-12 | In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack. |
CVE-2018-19211 | Medium | 5.5 | 2018-11-12 | In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proc… |
CVE-2018-19210 | Medium | 6.5 | 2018-11-12 | In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as… |
CVE-2018-19209 | Medium | 5.5 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack. |
CVE-2018-19208 | Medium | 6.5 | 2018-11-12 | In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of s… |
CVE-2018-19207 | Critical | 9.8 | 2018-11-12 | The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prep… |
CVE-2018-19206 | Medium | 6.1 | 2018-11-12 | steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as demonstrated by an onload attribute in a BODY element, within an HTML… |
CVE-2018-19205 | High | 7.5 | 2018-11-12 | Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue… |
CVE-2018-19204 | High | 8.8 | 2018-11-12 | PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with sys… |
CVE-2018-19203 | High | 7.5 | 2018-11-12 | PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request. |
CVE-2018-1884 | Medium | 4.8 | 2018-11-12 | IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to ex… |
CVE-2018-1798 | Medium | 6.1 | 2018-11-12 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co… |
CVE-2018-1786 | Medium | 5.3 | 2018-11-12 | IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage… |
CVE-2018-19200 | High | 7.5 | 2018-11-12 | An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function. |
CVE-2018-19199 | Critical | 9.8 | 2018-11-12 | An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriComposeQueryEx* function because of an un… |
CVE-2018-19198 | Critical | 9.8 | 2018-11-12 | An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* or uriComposeQueryEx* function because the '… |
CVE-2018-19197 | Medium | 4.9 | 2018-11-12 | An issue was discovered in XiaoCms 20141229. admin\controller\database.php allows arbitrary directory deletion via admin/index.php?c=database&a=import&paths[]=… |
CVE-2018-19196 | Critical | 9.8 | 2018-11-12 | An issue was discovered in XiaoCms 20141229. It allows remote attackers to execute arbitrary code by using the type parameter to bypass the standard admin\cont… |
CVE-2018-19195 | Medium | 6.1 | 2018-11-12 | An issue was discovered in XiaoCms 20141229. There is XSS related to the template\default\show_product.html file. |
CVE-2018-19194 | Medium | 5.3 | 2018-11-12 | An issue was discovered in XiaoCms 20141229. /admin/index.php?c=database allows full path disclosure in a "failed to open stream" error message. |
CVE-2018-19193 | Medium | 6.1 | 2018-11-12 | An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen. |
CVE-2018-19192 | High | 8.8 | 2018-11-12 | An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the data[content] parameter. |
CVE-2018-19185 | Critical | 9.8 | 2018-11-12 | An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c. This is exploitable… |
CVE-2018-19184 | High | 7.5 | 2018-11-12 | cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode. |
CVE-2018-19183 | High | 7.5 | 2018-11-12 | ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute. NOTE: th… |
CVE-2018-18920 | High | 8.8 | 2018-11-12 | Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x' wa… |
CVE-2018-19181 | High | 7.5 | 2018-11-11 | statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key paramet… |
CVE-2018-19180 | Critical | 9.8 | 2018-11-11 | statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP code by placing thi… |
CVE-2018-19178 | Medium | 5.4 | 2018-11-11 | In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2… |
CVE-2018-19170 | Medium | 4.8 | 2018-11-11 | In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the web_name… |
CVE-2018-19143 | Medium | 6.5 | 2018-11-11 | Open Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified… |
CVE-2018-19142 | Medium | 4.8 | 2018-11-11 | Open Ticket Request System (OTRS) 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL. |
CVE-2018-19141 | Medium | 4.8 | 2018-11-11 | Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and cust… |
CVE-2018-19135 | High | 8.8 | 2018-11-11 | ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform actions for an admi… |
CVE-2018-19168 | Critical | 9.8 | 2018-11-11 | Shell Metacharacter Injection in www/modules/save.php in FruityWifi (aka PatatasFritas/PatataWifi) through 2.4 allows remote attackers to execute arbitrary cod… |
CVE-2018-19150 | High | 7.8 | 2018-11-10 | Memory corruption in PDMODELProvidePDModelHFT in pdmodel.dll in pdfforge PDF Architect 6 allows remote attackers to cause a denial of service (application cras… |
CVE-2018-19149 | Medium | 6.5 | 2018-11-10 | Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment. |
CVE-2018-19148 | Low | 3.7 | 2018-11-10 | Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames. Specifically, when unabl… |
CVE-2018-19087 | High | 7.8 | 2018-11-10 | RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E044 with a size larger than 8 byt… |
CVE-2018-19086 | High | 7.8 | 2018-11-10 | RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E040 with a size larger than 8 byt… |
CVE-2018-19085 | High | 7.8 | 2018-11-10 | RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a size larger than 8 byt… |
CVE-2018-19084 | High | 7.8 | 2018-11-10 | RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E05C with a size larger than 8 byt… |
CVE-2018-19145 | Medium | 6.1 | 2018-11-09 | An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter. |
CVE-2018-15796 | High | 8.1 | 2018-11-09 | Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL… |
CVE-2018-19139 | Medium | 5.5 | 2018-11-09 | An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c. |
CVE-2018-19138 | High | 8.8 | 2018-11-09 | WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI. |
CVE-2018-17612 | High | 7.5 | 2018-11-09 | Sennheiser HeadSetup 7.3.4903 places Certification Authority (CA) certificates into the Trusted Root CA store of the local system, and publishes the private ke… |
CVE-2018-19137 | Medium | 6.1 | 2018-11-09 | DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter. |
CVE-2018-19136 | Medium | 6.1 | 2018-11-09 | DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter. |
CVE-2018-14644 | Medium | 5.3 | 2018-11-09 | An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a… |
CVE-2018-1872 | Medium | 5.4 | 2018-11-09 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus al… |
CVE-2018-19127 | Critical | 9.8 | 2018-11-09 | A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, le… |