2018 CVEs (page 66)
Page 66 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-15938 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-15937 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference… |
CVE-2018-15936 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-15935 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-15934 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-15933 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-15932 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-15931 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference… |
CVE-2018-15930 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference… |
CVE-2018-15929 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-15928 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-15927 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-15926 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-15925 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-15924 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability… |
CVE-2018-15923 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-15922 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-15920 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability… |
CVE-2018-12881 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an integer overflow vulnerability… |
CVE-2018-12880 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12879 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12878 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12877 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability… |
CVE-2018-12876 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. S… |
CVE-2018-12875 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12874 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12873 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12872 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12871 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12870 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12869 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12868 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-12867 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12866 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12865 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-12864 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-12863 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability… |
CVE-2018-12862 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-12861 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-12860 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-12859 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12858 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. S… |
CVE-2018-12857 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12856 | Medium | 6.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12855 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnerability. Su… |
CVE-2018-12853 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnerability. Su… |
CVE-2018-12852 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability… |
CVE-2018-12851 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Su… |
CVE-2018-12847 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Su… |
CVE-2018-12846 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Su… |
CVE-2018-12845 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12844 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12843 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12842 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an integer overflow vulnerability… |
CVE-2018-12841 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a double free vulnerability. Succ… |
CVE-2018-12839 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12838 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a stack overflow vulnerability. S… |
CVE-2018-12837 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Su… |
CVE-2018-12836 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Su… |
CVE-2018-12835 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. S… |
CVE-2018-12834 | Medium | 5.5 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerabili… |
CVE-2018-12833 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Su… |
CVE-2018-12832 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Su… |
CVE-2018-12831 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability… |
CVE-2018-12769 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability… |
CVE-2018-12759 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerabil… |
CVE-2018-17902 | Medium | 5.3 | 2018-10-12 | Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session management whic… |
CVE-2018-17900 | Critical | 9.8 | 2018-10-12 | Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allo… |
CVE-2018-17898 | High | 7.5 | 2018-10-12 | Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unau… |
CVE-2018-17896 | High | 8.1 | 2018-10-12 | Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may al… |
CVE-2018-17894 | Critical | 9.8 | 2018-10-12 | NUUO CMS all versions 3.1 and prior, The application creates default accounts that have hard-coded passwords, which could allow an attacker to gain privileged… |
CVE-2018-17892 | High | 8.8 | 2018-10-12 | NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security features to not be utili… |
CVE-2018-17890 | Critical | 9.8 | 2018-10-12 | NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arbitrary code executi… |
CVE-2018-17888 | Critical | 9.8 | 2018-10-12 | NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which… |
CVE-2018-8890 | High | 7.5 | 2018-10-12 | An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session… |
CVE-2018-12469 | High | 7.5 | 2018-10-12 | Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterpris… |
CVE-2018-1844 | High | 7.1 | 2018-10-12 | IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exp… |
CVE-2018-1770 | Medium | 6.5 | 2018-10-12 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially… |
CVE-2018-1534 | Medium | 5.4 | 2018-10-12 | IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2018-1533 | Medium | 5.4 | 2018-10-12 | IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2018-18227 | High | 7.5 | 2018-10-12 | In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly han… |
CVE-2018-18226 | High | 7.5 | 2018-10-12 | In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c… |
CVE-2018-18225 | High | 7.5 | 2018-10-12 | In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly c… |
CVE-2018-1838 | Medium | 5.3 | 2018-10-12 | IBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker to obtain sensitive information caused by improper handling of password… |
CVE-2018-1673 | Medium | 6.1 | 2018-10-12 | IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We… |
CVE-2018-17929 | High | 7.8 | 2018-10-11 | In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing… |
CVE-2018-17927 | High | 7.8 | 2018-10-11 | In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple out-of-bounds write vulnerabilities may be exploited by processing speciall… |
CVE-2018-12441 | High | 7.8 | 2018-10-11 | The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unprivileged local users to execute arbitrary… |
CVE-2018-18258 | Critical | 9.8 | 2018-10-11 | An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web server via an index.ph… |
CVE-2018-18257 | High | 7.5 | 2018-10-11 | An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/batch&command=delet… |
CVE-2018-15766 | High | 7.5 | 2018-10-11 | On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manually set the "Minimum… |
CVE-2018-9206 | Critical | 9.8 | 2018-10-11 | Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0 |
CVE-2018-18215 | High | 8.8 | 2018-10-11 | In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account. |
CVE-2018-18242 | Critical | 9.8 | 2018-10-11 | youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%E9%99%86. |
CVE-2018-12449 | High | 7.8 | 2018-10-11 | The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking. |
CVE-2018-1745 | High | 7.5 | 2018-10-11 | IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to missing authentication. IBM X-Force ID: 14… |
CVE-2018-1738 | High | 7.1 | 2018-10-11 | IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive information or jeopardize system integrity due to… |
CVE-2018-1724 | Medium | 5.9 | 2018-10-11 | IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings… |
CVE-2018-1708 | Medium | 6.5 | 2018-10-11 | IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force… |
CVE-2018-1706 | Medium | 5.4 | 2018-10-11 | IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alte… |