2018 CVEs (page 68)
Page 68 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-8423 | High | 7.8 | 2018-10-10 | A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." Thi… |
CVE-2018-8413 | High | 7.8 | 2018-10-10 | A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution Vulnerab… |
CVE-2018-8411 | High | 7.8 | 2018-10-10 | An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Win… |
CVE-2018-8333 | High | 7.0 | 2018-10-10 | An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter Manager Elevation Of Privi… |
CVE-2018-8330 | Medium | 5.5 | 2018-10-10 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnera… |
CVE-2018-8329 | High | 7.8 | 2018-10-10 | An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka "Linux On Windows Elevati… |
CVE-2018-8320 | Medium | 4.3 | 2018-10-10 | A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability." This affects Windows S… |
CVE-2018-8292 | High | 7.5 | 2018-10-10 | An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information… |
CVE-2018-8265 | High | 7.8 | 2018-10-10 | A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote Cod… |
CVE-2018-18206 | High | 7.5 | 2018-10-10 | In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash. |
CVE-2018-18202 | Critical | 9.8 | 2018-10-10 | The QLogic 4Gb Fibre Channel 5.5.2.6.0 and 4/8Gb SAN 7.10.1.20.0 modules for IBM BladeCenter have an undocumented support account with a support password, an u… |
CVE-2018-18201 | High | 8.8 | 2018-10-09 | qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account. |
CVE-2018-7633 | Critical | 9.8 | 2018-10-09 | Code injection in the /ui/login form Language parameter in Epicentro E_7.3.2+ allows attackers to execute JavaScript code by making a user issue a manipulated… |
CVE-2018-7632 | High | 7.5 | 2018-10-09 | Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading… |
CVE-2018-7631 | Critical | 9.8 | 2018-10-09 | Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without… |
CVE-2018-18200 | Critical | 9.8 | 2018-10-09 | There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4. |
CVE-2018-18199 | Medium | 6.1 | 2018-10-09 | Mediamanager in REDAXO before 5.6.4 has XSS. |
CVE-2018-18198 | Medium | 6.1 | 2018-10-09 | The $opener_input_field variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to the page. The attack… |
CVE-2018-17963 | Critical | 9.8 | 2018-10-09 | qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have un… |
CVE-2018-17962 | High | 7.5 | 2018-10-09 | Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used. |
CVE-2018-17958 | High | 7.5 | 2018-10-09 | Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used. |
CVE-2018-17866 | Medium | 6.1 | 2018-10-09 | Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membership" plugin before 2… |
CVE-2018-11796 | High | 7.5 | 2018-10-09 | In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing. However, Tika reuses SAXParsers and calls reset() after each parse, w… |
CVE-2018-17859 | Medium | 4.3 | 2018-10-09 | An issue was discovered in Joomla! before 3.8.13. Inadequate checks in com_contact could allow mail submission in disabled forms. |
CVE-2018-17858 | High | 8.8 | 2018-10-09 | An issue was discovered in Joomla! before 3.8.13. com_installer actions do not have sufficient CSRF hardening in the backend. |
CVE-2018-17857 | Medium | 4.3 | 2018-10-09 | An issue was discovered in Joomla! before 3.8.13. Inadequate checks on the tags search fields can lead to an access level violation. |
CVE-2018-17856 | High | 7.2 | 2018-10-09 | An issue was discovered in Joomla! before 3.8.13. com_joomlaupdate allows the execution of arbitrary code. The default ACL config enabled the ability of Admini… |
CVE-2018-17855 | High | 8.8 | 2018-10-09 | An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account of an user who can approve admin verifications in the registra… |
CVE-2018-10614 | High | 8.8 | 2018-10-09 | An XXE vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project XML files. |
CVE-2018-10610 | High | 8.8 | 2018-10-09 | An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project files. |
CVE-2018-6977 | Medium | 6.5 | 2018-10-09 | VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a 3D-r… |
CVE-2018-18197 | Critical | 9.8 | 2018-10-09 | An issue was discovered in libgig 4.1.0. There is an operator new[] failure (due to a big pSampleLoops heap request) in DLS::Sampler::Sampler in DLS.cpp. |
CVE-2018-18196 | High | 8.8 | 2018-10-09 | An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp. |
CVE-2018-18195 | Medium | 6.5 | 2018-10-09 | An issue was discovered in libgig 4.1.0. There is an FPE (divide-by-zero error) in DLS::Sample::Sample in DLS.cpp. |
CVE-2018-18194 | High | 8.8 | 2018-10-09 | An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample() in DLS.cpp. |
CVE-2018-18193 | High | 8.8 | 2018-10-09 | An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp. |
CVE-2018-18192 | Medium | 6.5 | 2018-10-09 | An issue was discovered in libgig 4.1.0. There is a NULL pointer dereference in the function DLS::File::GetFirstSample() in DLS.cpp. |
CVE-2018-18191 | High | 8.8 | 2018-10-09 | Cross-site request forgery (CSRF) vulnerability in /admin.php?c=member&m=edit&uid=1 in dayrui FineCms 5.4 allows remote attackers to change the administrator's… |
CVE-2018-18190 | Medium | 5.5 | 2018-10-09 | An issue was discovered in GoPro gpmf-parser before 1.2.1. There is a divide-by-zero error in GPMF_ScaledData in GPMF_parser.c. |
CVE-2018-18088 | Medium | 6.5 | 2018-10-09 | OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c |
CVE-2018-18087 | Medium | 5.4 | 2018-10-09 | The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privilege can inject arbitrary web script or HTML via the… |
CVE-2018-18086 | High | 8.8 | 2018-10-09 | EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users. |
CVE-2018-18084 | Critical | 9.8 | 2018-10-09 | An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter. |
CVE-2018-18083 | Critical | 9.8 | 2018-10-09 | An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" proce… |
CVE-2018-18082 | Medium | 6.1 | 2018-10-09 | XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI. |
CVE-2018-18075 | Critical | 9.8 | 2018-10-09 | WikidForum 2.20 has SQL Injection via the rpc.php parent_post_id or num_records parameter, or the index.php?action=search select_sort parameter. |
CVE-2018-18074 | High | 7.5 | 2018-10-09 | The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which ma… |
CVE-2018-18029 | Medium | 5.4 | 2018-10-09 | Navigate CMS has Stored XSS via the navigate.php Title field in an edit action. |
CVE-2018-15543 | Medium | 6.8 | 2018-10-09 | An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The FingerprintManager class for Biometric validation allows authenticati… |
CVE-2018-15542 | Medium | 6.4 | 2018-10-09 | An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The Passcode feature allows authentication bypass via runtime manipulatio… |
CVE-2018-14649 | Critical | 9.8 | 2018-10-09 | It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by setting debug=… |
CVE-2018-14081 | Critical | 9.8 | 2018-10-09 | An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password a… |
CVE-2018-14080 | High | 7.5 | 2018-10-09 | An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechanisms to do… |
CVE-2018-7928 | Medium | 4.6 | 2018-10-09 | There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before 8.1.2.303 installed on… |
CVE-2018-2475 | High | 8.5 | 2018-10-09 | Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster. Due to missing net… |
CVE-2018-2474 | Medium | 6.5 | 2018-10-09 | SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unintended request to th… |
CVE-2018-2472 | Medium | 6.1 | 2018-10-09 | SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client) does not sufficiently encode user-controlled inputs, resulting… |
CVE-2018-2471 | High | 7.5 | 2018-10-09 | Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be res… |
CVE-2018-2470 | Medium | 6.1 | 2018-10-09 | In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encode user-controlled… |
CVE-2018-2469 | High | 7.5 | 2018-10-09 | Under certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to access information which would otherwise be restri… |
CVE-2018-2468 | High | 7.5 | 2018-10-09 | Under certain conditions the backup server in SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to access information which woul… |
CVE-2018-2467 | Medium | 5.3 | 2018-10-09 | In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web Browser such as Chro… |
CVE-2018-2466 | Medium | 5.4 | 2018-10-09 | In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results i… |
CVE-2018-12479 | Medium | 6.5 | 2018-10-09 | A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying crafted request IDs. Affected releases are o… |
CVE-2018-12478 | Medium | 4.8 | 2018-10-09 | A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected relea… |
CVE-2018-12477 | Low | 3.5 | 2018-10-09 | A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-servic… |
CVE-2018-12474 | Medium | 5.4 | 2018-10-09 | Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information outside the current buil… |
CVE-2018-18071 | High | 7.5 | 2018-10-09 | An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server… |
CVE-2018-18070 | Medium | 5.9 | 2018-10-09 | An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route… |
CVE-2018-18069 | Medium | 6.1 | 2018-10-08 | process_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3 for WordPress has XSS via any locale_file_name_ parameter (such as locale_file_… |
CVE-2018-14656 | High | 7.0 | 2018-10-08 | A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address in… |
CVE-2018-18066 | High | 7.5 | 2018-10-08 | snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely caus… |
CVE-2018-18065 | Medium | 6.5 | 2018-10-08 | _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely c… |
CVE-2018-18064 | Medium | 6.5 | 2018-10-08 | cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-re… |
CVE-2018-17977 | Medium | 4.4 | 2018-10-08 | The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to ca… |
CVE-2018-17775 | High | 7.8 | 2018-10-08 | Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local users to gain privileges by replacing an… |
CVE-2018-15903 | Medium | 5.4 | 2018-10-08 | The Discuss v1.2.1 module in Claromentis 8.2.2 is vulnerable to stored Cross Site Scripting (XSS). An authenticated attacker will be able to place malicious Ja… |
CVE-2018-3997 | High | 8.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.2.0.9297. A specially crafted PDF d… |
CVE-2018-3996 | High | 8.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.2.0.9297. A specially crafted PDF documen… |
CVE-2018-3992 | High | 8.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.2.0.9297. A specially crafted PDF d… |
CVE-2018-3945 | High | 8.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF do… |
CVE-2018-3942 | High | 8.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF documen… |
CVE-2018-3941 | High | 8.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF do… |
CVE-2018-3940 | High | 8.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF documen… |
CVE-2018-17443 | Medium | 6.1 | 2018-10-08 | An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the UpdateSite endpoint is vulnerable to stored XS… |
CVE-2018-17442 | High | 8.8 | 2018-10-08 | An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerability in the onUploadLogPic endpoint allow… |
CVE-2018-17441 | Medium | 6.1 | 2018-10-08 | An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser endpoint is vulnerable to stored XSS. |
CVE-2018-17440 | Critical | 9.8 | 2018-10-08 | An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default on port 9000 and has hardcode… |
CVE-2018-17060 | Medium | 5.3 | 2018-10-08 | Telerik Extensions for ASP.NET MVC (all versions) does not whitelist requests, which can allow a remote attacker to access files inside the server's web direct… |
CVE-2018-16297 | High | 7.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability tha… |
CVE-2018-16296 | High | 7.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability tha… |
CVE-2018-16295 | High | 7.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability tha… |
CVE-2018-16294 | High | 7.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability tha… |
CVE-2018-16293 | High | 7.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability tha… |
CVE-2018-16292 | High | 7.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability tha… |
CVE-2018-16291 | High | 7.8 | 2018-10-08 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability tha… |
CVE-2018-5402 | Critical | 9.1 | 2018-10-08 | The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the ad… |
CVE-2018-5401 | Critical | 9.1 | 2018-10-08 | The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel tha… |
CVE-2018-5400 | Critical | 9.1 | 2018-10-08 | The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices. The origi… |
CVE-2018-5399 | Critical | 9.4 | 2018-10-08 | The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running. The Dropbea… |