2018 CVEs (page 60)
Page 60 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18713 | High | 7.5 | 2018-10-29 | The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m… |
CVE-2018-18712 | High | 8.8 | 2018-10-29 | An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's username via index.php?m=member&f=index&v=e… |
CVE-2018-18711 | High | 8.8 | 2018-10-29 | An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's password via index.php?m=core&f=panel&v=edi… |
CVE-2018-18710 | Medium | 5.5 | 2018-10-29 | An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attack… |
CVE-2018-18709 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18708 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18707 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18706 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18705 | Critical | 9.8 | 2018-10-29 | PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno… |
CVE-2018-18704 | Critical | 9.8 | 2018-10-29 | PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter. |
CVE-2018-18703 | High | 7.5 | 2018-10-29 | PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read… |
CVE-2018-18702 | Critical | 9.8 | 2018-10-29 | spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule because the upfile content is base64 decoded, deserialized, a… |
CVE-2018-18701 | Medium | 5.5 | 2018-10-29 | An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infin… |
CVE-2018-18700 | Medium | 5.5 | 2018-10-29 | An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infin… |
CVE-2018-18699 | High | 8.8 | 2018-10-29 | An issue was discovered in GoPro gpmf-parser 1.2.1. There is an out-of-bounds write in OpenMP4Source in GPMF_mp4reader.c. |
CVE-2018-18694 | Medium | 4.8 | 2018-10-29 | admin/index.php?id=filesmanager in Monstra CMS 3.0.4 allows remote authenticated administrators to trigger stored XSS via JavaScript content in a file whose na… |
CVE-2018-18690 | Medium | 5.5 | 2018-10-26 | In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount b… |
CVE-2018-6559 | Low | 3.3 | 2018-10-26 | The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access… |
CVE-2018-4022 | High | 7.8 | 2018-10-26 | A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV (matroska) file format. A specially crafted MKV file can cause arbi… |
CVE-2018-18662 | Medium | 5.5 | 2018-10-26 | There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool. |
CVE-2018-18661 | Medium | 6.5 | 2018-10-26 | An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c. |
CVE-2018-18660 | Medium | 6.1 | 2018-10-26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-21 Reflected Cross-site Scripting via /authenti… |
CVE-2018-18659 | High | 7.5 | 2018-10-26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-19 Unauthenticated XXE in /management/UdpHttpSe… |
CVE-2018-18658 | High | 7.5 | 2018-10-26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-20 Unauthenticated Sensitive Information Disclo… |
CVE-2018-18657 | High | 7.5 | 2018-10-26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-18 Unauthenticated Sensitive Information Disclo… |
CVE-2018-15688 | High | 8.8 | 2018-10-26 | A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases… |
CVE-2018-15687 | High | 7.0 | 2018-10-26 | A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd v… |
CVE-2018-15686 | High | 7.8 | 2018-10-26 | A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to i… |
CVE-2018-5914 | High | 7.8 | 2018-10-26 | Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, S… |
CVE-2018-5866 | High | 7.8 | 2018-10-26 | While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM96… |
CVE-2018-3588 | High | 7.8 | 2018-10-26 | There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon… |
CVE-2018-11951 | Medium | 5.5 | 2018-10-26 | Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobile in version SD 845, SD 850. |
CVE-2018-11950 | High | 7.8 | 2018-10-26 | Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850 |
CVE-2018-11854 | High | 7.8 | 2018-10-26 | Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 |
CVE-2018-11853 | High | 7.8 | 2018-10-26 | Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdragon Wear in version I… |
CVE-2018-11850 | High | 7.8 | 2018-10-26 | Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon… |
CVE-2018-11849 | High | 7.8 | 2018-10-26 | Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapd… |
CVE-2018-11846 | Medium | 4.7 | 2018-10-26 | The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 845… |
CVE-2018-11828 | High | 7.5 | 2018-10-26 | When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC s… |
CVE-2018-11824 | High | 7.8 | 2018-10-26 | A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205… |
CVE-2018-11822 | High | 7.8 | 2018-10-26 | A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 |
CVE-2018-11821 | High | 7.8 | 2018-10-26 | Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 4… |
CVE-2018-11305 | High | 7.8 | 2018-10-26 | When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in vers… |
CVE-2018-18656 | High | 7.8 | 2018-10-26 | The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location of such files is %PROGRAMDATA%\purevpn\… |
CVE-2018-18655 | Medium | 4.3 | 2018-10-26 | Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer set… |
CVE-2018-18654 | High | 7.8 | 2018-10-26 | Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local attacker can first create a world-writable subdirectory in a certain… |
CVE-2018-18653 | High | 7.8 | 2018-10-26 | The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restricti… |
CVE-2018-18652 | High | 7.2 | 2018-10-25 | A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root… |
CVE-2018-17904 | Medium | 6.1 | 2018-10-25 | Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an unauthorized attacker to inject arbitrary code. |
CVE-2018-14665 | Medium | 6.6 | 2018-10-25 | A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unpri… |
CVE-2018-3971 | High | 7.8 | 2018-10-25 | An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP re… |
CVE-2018-3970 | Medium | 5.5 | 2018-10-25 | An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP… |
CVE-2018-18651 | Medium | 5.5 | 2018-10-25 | An issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to launch a denial of service (hang caused by large loop) via a sp… |
CVE-2018-18650 | Medium | 5.5 | 2018-10-25 | An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch a denial of service (Integer Overflow) via a crafted /Size val… |
CVE-2018-8955 | Critical | 9.8 | 2018-10-24 | The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attacke… |
CVE-2018-18638 | High | 8.1 | 2018-10-24 | A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execute arbitrary commands via shell metacha… |
CVE-2018-18621 | Medium | 6.1 | 2018-10-24 | CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link (in .txt form… |
CVE-2018-18568 | Medium | 5.9 | 2018-10-24 | Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to… |
CVE-2018-18567 | Medium | 5.9 | 2018-10-24 | AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to… |
CVE-2018-18566 | Medium | 5.3 | 2018-10-24 | The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by levera… |
CVE-2018-18552 | Medium | 6.5 | 2018-10-24 | ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality loss) by creating an LNK file that points t… |
CVE-2018-18551 | Medium | 6.1 | 2018-10-24 | ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors.html status parameter, sensors.html type parameter, sensors.ht… |
CVE-2018-17923 | Medium | 6.9 | 2018-10-24 | SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it. |
CVE-2018-17921 | High | 8.8 | 2018-10-24 | SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that may allow an attacker to force-pair the device without human interaction. |
CVE-2018-17903 | Critical | 9.1 | 2018-10-24 | SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery. |
CVE-2018-15751 | Critical | 9.8 | 2018-10-24 | SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi). |
CVE-2018-15750 | Medium | 5.3 | 2018-10-24 | Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files e… |
CVE-2018-13342 | Critical | 9.8 | 2018-10-24 | The server API in the Anda app relies on hardcoded credentials. |
CVE-2018-9281 | High | 8.8 | 2018-10-24 | An issue was discovered on Eaton UPS 9PX 8000 SP devices. The administration panel is vulnerable to a CSRF attack on the change-password functionality. This vu… |
CVE-2018-9280 | Medium | 4.9 | 2018-10-24 | An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user's password. The web page displayed by the appliance c… |
CVE-2018-9279 | Medium | 4.9 | 2018-10-24 | An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user's password. The web page displayed by the appliance contains the pas… |
CVE-2018-18636 | Medium | 6.1 | 2018-10-24 | XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via the var:RelaodHref or var:conid parameter. |
CVE-2018-18635 | Medium | 6.1 | 2018-10-24 | www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.08 and 2018.09 allows XSS via the admin/… |
CVE-2018-18548 | Medium | 6.1 | 2018-10-24 | ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager. |
CVE-2018-18547 | Medium | 6.1 | 2018-10-24 | Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the list/rrd/ period parameter, the list/di… |
CVE-2018-18517 | Medium | 4.8 | 2018-10-24 | Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS. |
CVE-2018-18476 | Critical | 9.8 | 2018-10-24 | mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns. |
CVE-2018-18014 | Medium | 4.8 | 2018-10-24 | * Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private s… |
CVE-2018-18013 | High | 7.8 | 2018-10-24 | * Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with… |
CVE-2018-14812 | High | 7.8 | 2018-10-24 | An uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji Electric Energy Savings Estimator versions V.1.0.2.0 and prior. E… |
CVE-2018-12650 | Medium | 6.1 | 2018-10-24 | Adrenalin HRMS version 5.4.0 contains a Reflected Cross Site Scripting (XSS) vulnerability in the ApplicationtEmployeeSearch page via 'prntDDLCntrlName' and 'p… |
CVE-2018-11792 | Critical | 9.8 | 2018-10-24 | In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential security risk, such as having ALTER on a tabl… |
CVE-2018-11785 | Medium | 6.5 | 2018-10-24 | Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, lea… |
CVE-2018-15442 | High | 7.8 | 2018-10-24 | A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary command… |
CVE-2018-11804 | High | 7.5 | 2018-10-24 | Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to speed up compilation. It has been include… |
CVE-2018-17935 | High | 8.1 | 2018-10-24 | All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauth… |
CVE-2018-1541 | Medium | 5.4 | 2018-10-24 | IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… |
CVE-2018-7432 | High | 7.5 | 2018-10-23 | Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allow remote attackers to… |
CVE-2018-7431 | Medium | 6.5 | 2018-10-23 | Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3… |
CVE-2018-7429 | High | 7.5 | 2018-10-23 | Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and Splunk Light before 6.5.0 allow remote attackers to cause a d… |
CVE-2018-7427 | Medium | 6.1 | 2018-10-23 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10… |
CVE-2018-18475 | Critical | 9.8 | 2018-10-23 | Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload. |
CVE-2018-18467 | High | 7.5 | 2018-10-23 | An issue was discovered in Daniel Gultsch Conversations 2.3.4. It is possible to spoof a custom message to an existing opened conversation by sending an intent. |
CVE-2018-18437 | Medium | 6.1 | 2018-10-23 | In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc parameter. |
CVE-2018-17968 | High | 7.5 | 2018-10-23 | A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. T… |
CVE-2018-17877 | High | 7.5 | 2018-10-23 | A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call… |
CVE-2018-17873 | High | 8.8 | 2018-10-23 | An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows an attacker with adj… |
CVE-2018-17448 | Critical | 9.8 | 2018-10-23 | An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. |
CVE-2018-17447 | High | 7.5 | 2018-10-23 | An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. |
CVE-2018-17446 | Critical | 9.8 | 2018-10-23 | A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. |