2018 CVEs (page 59)
Page 59 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18834 | Critical | 9.8 | 2018-10-30 | An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c. |
CVE-2018-18832 | Critical | 9.8 | 2018-10-30 | admin/check.asp in DKCMS 9.4 allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp. |
CVE-2018-18831 | High | 7.5 | 2018-10-30 | An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbi… |
CVE-2018-18830 | Critical | 9.8 | 2018-10-30 | An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you c… |
CVE-2018-18829 | Medium | 6.5 | 2018-10-30 | There exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a… |
CVE-2018-18828 | Medium | 6.5 | 2018-10-30 | There exists a heap-based buffer overflow in vc1_decode_i_block_adv in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a cra… |
CVE-2018-18827 | Medium | 6.5 | 2018-10-30 | There exists a heap-based buffer over-read in ff_vc1_pred_dc in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aa… |
CVE-2018-18826 | Medium | 6.5 | 2018-10-30 | There exists a heap-based buffer overflow in vc1_decode_p_mb_intfi in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a craf… |
CVE-2018-18825 | Medium | 6.1 | 2018-10-30 | Pagoda Linux panel V6.0 has XSS via the verification code associated with an invalid account login. A crafted code is mishandled during rendering of the login… |
CVE-2018-18822 | Critical | 9.8 | 2018-10-30 | Grapixel New Media v2.0 allows SQL Injection via the pages.aspx pageref parameter. |
CVE-2018-18817 | High | 7.5 | 2018-10-30 | The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify registry keys via the L… |
CVE-2018-17706 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is… |
CVE-2018-17624 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to ex… |
CVE-2018-17623 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to ex… |
CVE-2018-17622 | Medium | 6.5 | 2018-10-29 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is requir… |
CVE-2018-17621 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to ex… |
CVE-2018-17620 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to ex… |
CVE-2018-17619 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to ex… |
CVE-2018-17618 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to ex… |
CVE-2018-17617 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to ex… |
CVE-2018-17616 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to ex… |
CVE-2018-17615 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to ex… |
CVE-2018-18387 | High | 8.8 | 2018-10-29 | playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse. |
CVE-2018-17910 | High | 7.8 | 2018-10-29 | WebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user-supplied data, causing a buffer overflow condition that allow… |
CVE-2018-17908 | High | 7.8 | 2018-10-29 | WebAccess Versions 8.3.2 and prior. During installation, the application installer disables user access control and does not re-enable it after the installatio… |
CVE-2018-11884 | High | 7.8 | 2018-10-29 | Improper input validation leads to buffer overflow while processing network list offload command in WLAN function in Snapdragon Mobile in version SD 835, SD 84… |
CVE-2018-11882 | High | 7.8 | 2018-10-29 | Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660. |
CVE-2018-11880 | High | 7.8 | 2018-10-29 | Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660. |
CVE-2018-11879 | High | 7.8 | 2018-10-29 | When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845 |
CVE-2018-11877 | High | 7.8 | 2018-10-29 | When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 83… |
CVE-2018-11876 | High | 7.8 | 2018-10-29 | Lack of input validation while copying to buffer in WLAN will lead to a buffer overflow in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660. |
CVE-2018-11875 | High | 7.8 | 2018-10-29 | Lack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in Snapdragon Mobile in version SD 845, SD 850. |
CVE-2018-11874 | High | 7.8 | 2018-10-29 | Buffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA66… |
CVE-2018-11873 | High | 7.8 | 2018-10-29 | Improper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam buffer in Snapdragon Mobile in version SD 845. |
CVE-2018-11872 | High | 7.8 | 2018-10-29 | Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 845, SD 850, SDA660 |
CVE-2018-11871 | High | 7.8 | 2018-10-29 | Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon M… |
CVE-2018-11870 | High | 7.8 | 2018-10-29 | Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in Snapdragon Automobil… |
CVE-2018-11867 | High | 7.8 | 2018-10-29 | Lack of buffer length check before copying in WLAN function while processing FIPS event, can lead to a buffer overflow in Snapdragon Mobile in version SD 845. |
CVE-2018-11866 | High | 7.8 | 2018-10-29 | Integer overflow may happen in WLAN when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, Snapdragon… |
CVE-2018-11865 | High | 7.8 | 2018-10-29 | Integer overflow may happen when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, Snapdragon Wear in… |
CVE-2018-11862 | High | 7.8 | 2018-10-29 | Buffer overflow can happen in WLAN module due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SDA660. |
CVE-2018-11861 | High | 7.8 | 2018-10-29 | Buffer overflow can happen in WLAN function due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SDA660. |
CVE-2018-11859 | High | 7.8 | 2018-10-29 | Buffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850. |
CVE-2018-11858 | High | 7.8 | 2018-10-29 | When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version SD 835, SD 845, SD… |
CVE-2018-11857 | High | 7.8 | 2018-10-29 | Improper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mobile in version SD 835, SD 845, SD 850 |
CVE-2018-11856 | High | 7.8 | 2018-10-29 | Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850. |
CVE-2018-1767 | Medium | 6.1 | 2018-10-29 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Cachemonitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary… |
CVE-2018-1766 | Medium | 5.4 | 2018-10-29 | IBM Team Concert (RTC) 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS… |
CVE-2018-1380 | Low | 2.7 | 2018-10-29 | IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to change change their c… |
CVE-2018-0735 | Medium | 5.9 | 2018-10-29 | The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorith… |
CVE-2018-18792 | Critical | 9.8 | 2018-10-29 | An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs_list.php via a pxzs cookie. |
CVE-2018-18791 | Critical | 9.8 | 2018-10-29 | An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie. |
CVE-2018-18790 | High | 7.2 | 2018-10-29 | An issue was discovered in zzcms 8.3. SQL Injection exists in admin/special_add.php via a zxbigclassid cookie. (This needs an admin user login.) |
CVE-2018-18789 | Critical | 9.8 | 2018-10-29 | An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php. |
CVE-2018-18788 | High | 7.2 | 2018-10-29 | An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. (This needs an admin user login.) |
CVE-2018-18787 | Critical | 9.8 | 2018-10-29 | An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie. |
CVE-2018-18786 | Critical | 9.8 | 2018-10-29 | An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie. |
CVE-2018-18785 | Critical | 9.8 | 2018-10-29 | An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php. |
CVE-2018-18784 | High | 7.2 | 2018-10-29 | An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. (This needs an admin user login.) |
CVE-2018-18783 | Medium | 6.1 | 2018-10-29 | XSS was discovered in SEMCMS V3.4 via the semcms_remail.php?type=ok umail parameter. |
CVE-2018-18782 | Medium | 6.1 | 2018-10-29 | Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter. |
CVE-2018-18781 | Medium | 6.1 | 2018-10-29 | DedeCMS 5.7 SP2 allows XSS via the /member/uploads_select.php f or keyword parameter. |
CVE-2018-18778 | Medium | 6.5 | 2018-10-29 | ACME mini_httpd before 1.30 lets remote users read arbitrary files. |
CVE-2018-18771 | High | 7.5 | 2018-10-29 | An issue was discovered in LuLu CMS through 2015-05-14. backend\modules\filemanager\controllers\DefaultController.php allows arbitrary file upload by entering… |
CVE-2018-18765 | Critical | 9.1 | 2018-10-29 | An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-rea… |
CVE-2018-18764 | Critical | 9.1 | 2018-10-29 | An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-rea… |
CVE-2018-18754 | Critical | 9.8 | 2018-10-29 | ZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file. |
CVE-2018-18753 | Critical | 9.8 | 2018-10-29 | Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF. |
CVE-2018-18752 | Critical | 9.8 | 2018-10-29 | Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter. |
CVE-2018-18751 | Critical | 9.8 | 2018-10-29 | An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in… |
CVE-2018-18749 | Medium | 5.5 | 2018-10-29 | data-tools through 2017-07-26 has an Integer Overflow leading to an incorrect end value for the write_wchars function. |
CVE-2018-18748 | Critical | 10.0 | 2018-10-29 | Sandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by os.system("cmd") or os.system("powershell"), within a .py file. NOTE: the vend… |
CVE-2018-18745 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Menu.php?lgid=1 during editing. |
CVE-2018-18744 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMS_Main.php URI. |
CVE-2018-18743 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMS_Categories.php?pid=1&lgid=1 URI. |
CVE-2018-18742 | High | 8.8 | 2018-10-29 | A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI. |
CVE-2018-18741 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Download.php?lgid=1 during editing. |
CVE-2018-18740 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMS_Link.php?lgid=1 URI. |
CVE-2018-18739 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Products.php?lgid=1 Keywords field. |
CVE-2018-18738 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Categories.php?pid=1&lgid=1 category_key parameter. |
CVE-2018-18737 | High | 7.5 | 2018-10-29 | An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used for SSRF. |
CVE-2018-18736 | Medium | 5.4 | 2018-10-29 | An XSS issue was discovered in catfish blog 2.0.33, related to "write source code." |
CVE-2018-18735 | High | 8.8 | 2018-10-29 | A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33. |
CVE-2018-18734 | High | 8.8 | 2018-10-29 | A CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30. |
CVE-2018-18733 | Medium | 5.4 | 2018-10-29 | An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999. |
CVE-2018-18732 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18731 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18730 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18729 | Critical | 9.8 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18728 | Critical | 9.8 | 2018-10-29 | An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code execution via… |
CVE-2018-18727 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18726 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5. |
CVE-2018-18725 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5. |
CVE-2018-18724 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5. |
CVE-2018-18723 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5. |
CVE-2018-18722 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5. |
CVE-2018-18721 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5. |
CVE-2018-18720 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5. |
CVE-2018-18718 | High | 7.8 | 2018-10-29 | An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two s… |
CVE-2018-18717 | Medium | 4.8 | 2018-10-29 | An issue was discovered in Eleanor CMS through 2015-03-19. XSS exists via the ajax.php?direct=admin&file=autocomplete&query=[XSS] URI. |