2018 CVEs (page 57)
Page 57 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19047 | Critical | 10.0 | 2018-11-07 | mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<img src="http://192.168' substring that t… |
CVE-2018-19051 | Medium | 6.1 | 2018-11-07 | MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abt_type parameter. |
CVE-2018-19050 | Medium | 6.1 | 2018-11-07 | MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword langset parameter. |
CVE-2018-12415 | High | 7.5 | 2018-11-06 | The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edi… |
CVE-2018-12414 | High | 7.5 | 2018-11-06 | The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Dae… |
CVE-2018-12413 | High | 7.5 | 2018-11-06 | The Schema repository server (tibschemad) component of TIBCO Software Inc.'s TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Editio… |
CVE-2018-12412 | High | 7.5 | 2018-11-06 | The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edi… |
CVE-2018-12411 | High | 7.5 | 2018-11-06 | The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO Acti… |
CVE-2018-14667 | Critical | 9.8 | 2018-11-06 | The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker… |
CVE-2018-17186 | High | 7.2 | 2018-11-06 | An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and cod… |
CVE-2018-17184 | Medium | 5.4 | 2018-11-06 | A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names, Report names, Any… |
CVE-2018-16475 | High | 7.5 | 2018-11-06 | A Path Traversal in Knightjs versions <= 0.0.1 allows an attacker to read content of arbitrary files on a remote server. |
CVE-2018-16474 | Medium | 6.1 | 2018-11-06 | A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript. |
CVE-2018-16473 | Medium | 5.3 | 2018-11-06 | A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files. |
CVE-2018-16472 | High | 7.5 | 2018-11-06 | A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by a… |
CVE-2018-9516 | High | 7.8 | 2018-11-06 | In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation… |
CVE-2018-9489 | High | 7.5 | 2018-11-06 | When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This… |
CVE-2018-9488 | High | 7.8 | 2018-11-06 | In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalation of privilege, wi… |
CVE-2018-9465 | High | 7.8 | 2018-11-06 | In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with n… |
CVE-2018-9459 | High | 8.8 | 2018-11-06 | In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traversal error. This… |
CVE-2018-9458 | High | 7.8 | 2018-11-06 | In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window… |
CVE-2018-9455 | High | 7.5 | 2018-11-06 | In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service… |
CVE-2018-9454 | Medium | 5.5 | 2018-11-06 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2018-9453 | Medium | 5.5 | 2018-11-06 | In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2018-9451 | Medium | 5.5 | 2018-11-06 | In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2018-9450 | High | 8.8 | 2018-11-06 | In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution wit… |
CVE-2018-9448 | High | 7.5 | 2018-11-06 | In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure… |
CVE-2018-9446 | Critical | 9.8 | 2018-11-06 | In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution wit… |
CVE-2018-9445 | Medium | 6.8 | 2018-11-06 | In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when mounting a… |
CVE-2018-9444 | Medium | 5.5 | 2018-11-06 | In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of se… |
CVE-2018-9438 | Medium | 5.0 | 2018-11-06 | When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of servi… |
CVE-2018-9437 | Medium | 5.5 | 2018-11-06 | In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional ex… |
CVE-2018-9436 | High | 7.5 | 2018-11-06 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n… |
CVE-2018-9427 | High | 7.8 | 2018-11-06 | In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code executio… |
CVE-2018-9422 | High | 7.8 | 2018-11-06 | In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges… |
CVE-2018-9415 | High | 7.8 | 2018-11-06 | In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of pri… |
CVE-2018-9385 | High | 7.8 | 2018-11-06 | In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege w… |
CVE-2018-9363 | High | 8.4 | 2018-11-06 | In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed… |
CVE-2018-9362 | High | 7.5 | 2018-11-06 | In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote denia… |
CVE-2018-9361 | High | 7.5 | 2018-11-06 | In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2018-9360 | High | 7.5 | 2018-11-06 | In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2018-9359 | High | 7.5 | 2018-11-06 | In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2018-9358 | High | 7.5 | 2018-11-06 | In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote informati… |
CVE-2018-9357 | High | 7.8 | 2018-11-06 | In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with U… |
CVE-2018-9356 | Critical | 9.8 | 2018-11-06 | In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional ex… |
CVE-2018-9355 | Critical | 9.8 | 2018-11-06 | In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code execution wi… |
CVE-2018-1694 | Medium | 5.9 | 2018-11-06 | IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5… |
CVE-2018-1606 | Medium | 4.3 | 2018-11-06 | IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 thr… |
CVE-2018-16986 | High | 8.8 | 2018-11-06 | Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that trigg… |
CVE-2018-18963 | Critical | 9.8 | 2018-11-06 | Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI. |
CVE-2018-18980 | High | 7.5 | 2018-11-06 | An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML… |
CVE-2018-18966 | Medium | 4.9 | 2018-11-06 | osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension… |
CVE-2018-18965 | Medium | 4.9 | 2018-11-06 | osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension… |
CVE-2018-18964 | Medium | 4.9 | 2018-11-06 | osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension… |
CVE-2018-17913 | High | 7.8 | 2018-11-05 | A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to execute c… |
CVE-2018-17909 | High | 7.8 | 2018-11-05 | When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may al… |
CVE-2018-17907 | Low | 3.3 | 2018-11-05 | When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the applicatio… |
CVE-2018-17905 | High | 7.8 | 2018-11-05 | When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within a specif… |
CVE-2018-18957 | Critical | 9.8 | 2018-11-05 | An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goose_publisher.c. |
CVE-2018-13397 | High | 8.8 | 2018-11-05 | There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories in Mercurial reposito… |
CVE-2018-13396 | High | 8.8 | 2018-11-05 | There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git subrepositories in Mercurial repositories… |
CVE-2018-18956 | High | 7.5 | 2018-11-05 | The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and daemon cra… |
CVE-2018-18820 | High | 8.1 | 2018-11-05 | A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can s… |
CVE-2018-9208 | Critical | 9.8 | 2018-11-05 | Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut <= v1.1Beta |
CVE-2018-18952 | Medium | 4.8 | 2018-11-05 | JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI. |
CVE-2018-18950 | High | 7.5 | 2018-11-05 | KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindeditor/attached/ folder v… |
CVE-2018-18949 | Critical | 9.8 | 2018-11-05 | Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings. |
CVE-2018-18943 | Medium | 4.8 | 2018-11-05 | An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the data[U… |
CVE-2018-18942 | High | 7.2 | 2018-11-05 | In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data[ThemeConf… |
CVE-2018-18939 | Medium | 4.8 | 2018-11-05 | An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field. |
CVE-2018-18938 | Medium | 4.8 | 2018-11-05 | An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via an ontoggle attribute to details/open/ within a second input fi… |
CVE-2018-18937 | High | 7.5 | 2018-11-05 | An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSet_getValues in client/ied_connection.c. |
CVE-2018-18936 | High | 7.5 | 2018-11-05 | An issue was discovered in PopojiCMS v2.0.1. admin_library.php allows remote attackers to delete arbitrary files via directory traversal in the po-admin/route… |
CVE-2018-18935 | High | 8.8 | 2018-11-05 | An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component&act=addnew URI, as demonstrated by adding a level=1 account. |
CVE-2018-18934 | Critical | 9.8 | 2018-11-05 | An issue was discovered in PopojiCMS v2.0.1. admin_component.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the fupload pa… |
CVE-2018-18933 | Critical | 9.1 | 2018-11-05 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-18928 | Critical | 9.8 | 2018-11-04 | International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimal… |
CVE-2018-18927 | Medium | 4.8 | 2018-11-04 | An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the page_list "attached" attribute (which typically has 'class="icon-globe icon-large"' i… |
CVE-2018-18926 | Critical | 9.8 | 2018-11-04 | Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/ses… |
CVE-2018-18925 | Critical | 9.8 | 2018-11-04 | Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session… |
CVE-2018-18924 | High | 8.8 | 2018-11-04 | The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" because rejected file… |
CVE-2018-18919 | Medium | 4.8 | 2018-11-04 | The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area. |
CVE-2018-18909 | Medium | 6.1 | 2018-11-03 | xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor's source-code view. |
CVE-2018-18903 | Critical | 9.8 | 2018-11-03 | Vanilla 2.6.x before 2.6.4 allows remote code execution. |
CVE-2018-18915 | Medium | 6.5 | 2018-11-03 | There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of servi… |
CVE-2018-16847 | High | 7.8 | 2018-11-02 | An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest… |
CVE-2018-15762 | Critical | 9.0 | 2018-11-02 | Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, g… |
CVE-2018-11062 | High | 8.8 | 2018-11-02 | Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passw… |
CVE-2018-16849 | Low | 3.1 | 2018-11-02 | A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files… |
CVE-2018-7799 | High | 7.8 | 2018-11-02 | A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbit… |
CVE-2018-7798 | High | 8.2 | 2018-11-02 | A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4 configura… |
CVE-2018-3935 | High | 7.5 | 2018-11-02 | An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can… |
CVE-2018-3934 | Critical | 9.8 | 2018-11-02 | An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets… |
CVE-2018-3920 | Medium | 6.8 | 2018-11-02 | An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can… |
CVE-2018-3899 | High | 7.5 | 2018-11-02 | An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause… |
CVE-2018-3898 | High | 7.5 | 2018-11-02 | An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause… |
CVE-2018-3892 | High | 8.1 | 2018-11-02 | An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted packet can cause… |
CVE-2018-3891 | Medium | 4.6 | 2018-11-02 | An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause… |
CVE-2018-3890 | Medium | 6.8 | 2018-11-02 | An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a l… |
CVE-2018-1878 | Medium | 5.3 | 2018-11-02 | IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the s… |