2018 CVEs (page 71)
Page 71 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-16049 | Critical | 9.8 | 2018-10-03 | An issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before 11.1.5, and 11.2.x before 11.2.2. There is Sensitive Data Discl… |
CVE-2018-16048 | Medium | 6.5 | 2018-10-03 | An issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before 11.1.5, and 11.2.x before 11.2.2. There is Missing Authorizatio… |
CVE-2018-3995 | High | 8.8 | 2018-10-03 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.2.0.9297. A specially crafted PDF documen… |
CVE-2018-3994 | High | 8.8 | 2018-10-03 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF do… |
CVE-2018-3993 | High | 8.8 | 2018-10-03 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF do… |
CVE-2018-3967 | High | 7.8 | 2018-10-03 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF do… |
CVE-2018-3966 | High | 7.8 | 2018-10-03 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF do… |
CVE-2018-3965 | High | 7.8 | 2018-10-03 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF do… |
CVE-2018-3964 | High | 7.8 | 2018-10-03 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF do… |
CVE-2018-3946 | High | 8.8 | 2018-10-03 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document… |
CVE-2018-1794 | Medium | 6.1 | 2018-10-03 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using OAuth ear is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra… |
CVE-2018-1793 | Medium | 6.1 | 2018-10-03 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using SAML ear is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar… |
CVE-2018-14800 | High | 7.8 | 2018-10-03 | Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boundary allocated to… |
CVE-2018-6689 | High | 7.8 | 2018-10-03 | Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attack… |
CVE-2018-17947 | Medium | 6.1 | 2018-10-03 | The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter. |
CVE-2018-17946 | Medium | 6.1 | 2018-10-03 | The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter. |
CVE-2018-17942 | High | 8.8 | 2018-10-03 | The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0… |
CVE-2018-17938 | Medium | 5.3 | 2018-10-03 | Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value. |
CVE-2018-3962 | High | 7.3 | 2018-10-02 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur wh… |
CVE-2018-3961 | High | 7.8 | 2018-10-02 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur wh… |
CVE-2018-3960 | High | 7.8 | 2018-10-02 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur wh… |
CVE-2018-3959 | High | 7.8 | 2018-10-02 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur wh… |
CVE-2018-3958 | High | 7.8 | 2018-10-02 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur wh… |
CVE-2018-3957 | High | 7.8 | 2018-10-02 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur wh… |
CVE-2018-3944 | High | 8.8 | 2018-10-02 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF documen… |
CVE-2018-3943 | High | 8.8 | 2018-10-02 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF documen… |
CVE-2018-14826 | Critical | 9.8 | 2018-10-02 | Entes EMG12 versions 2.57 and prior The application uses a web interface where it is possible for an attacker to bypass authentication with a specially crafted… |
CVE-2018-14822 | Critical | 9.8 | 2018-10-02 | Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an at… |
CVE-2018-9515 | High | 7.8 | 2018-10-02 | In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation of privile… |
CVE-2018-9514 | High | 7.8 | 2018-10-02 | In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local escalation of privilege with no additiona… |
CVE-2018-9513 | High | 7.8 | 2018-10-02 | In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execut… |
CVE-2018-9511 | Medium | 5.5 | 2018-10-02 | In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. This could lead to l… |
CVE-2018-9510 | Medium | 6.5 | 2018-10-02 | In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over… |
CVE-2018-9509 | Medium | 6.5 | 2018-10-02 | In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure ove… |
CVE-2018-9508 | Medium | 6.5 | 2018-10-02 | In smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote informat… |
CVE-2018-9507 | Medium | 6.5 | 2018-10-02 | In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclo… |
CVE-2018-9506 | Medium | 6.5 | 2018-10-02 | In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bl… |
CVE-2018-9505 | Medium | 6.5 | 2018-10-02 | In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over… |
CVE-2018-9504 | High | 8.8 | 2018-10-02 | In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution ov… |
CVE-2018-9503 | High | 7.5 | 2018-10-02 | In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… |
CVE-2018-9502 | Medium | 6.5 | 2018-10-02 | In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disc… |
CVE-2018-9501 | High | 7.8 | 2018-10-02 | In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to local escalation of privilege with no a… |
CVE-2018-9499 | Medium | 5.5 | 2018-10-02 | In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DRM server w… |
CVE-2018-9498 | High | 7.8 | 2018-10-02 | In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no addit… |
CVE-2018-9497 | High | 7.8 | 2018-10-02 | In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to missing bounds check. This could lead to r… |
CVE-2018-9496 | High | 7.8 | 2018-10-02 | In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exec… |
CVE-2018-9493 | Medium | 5.5 | 2018-10-02 | In the content provider of the download manager, there is a possible SQL injection due to improper input validation. This could lead to local information discl… |
CVE-2018-9492 | High | 7.8 | 2018-10-02 | In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with… |
CVE-2018-9491 | High | 7.8 | 2018-10-02 | In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution… |
CVE-2018-9490 | High | 7.8 | 2018-10-02 | In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege… |
CVE-2018-9476 | Critical | 9.8 | 2018-10-02 | In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in… |
CVE-2018-9473 | High | 7.8 | 2018-10-02 | In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execu… |
CVE-2018-9452 | Medium | 5.5 | 2018-10-02 | In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This could lead to remote denial of service if… |
CVE-2018-11752 | Medium | 5.5 | 2018-10-02 | Previous releases of the Puppet cisco_ios module output SSH session debug information including login credentials to a world readable file on every run. These… |
CVE-2018-11750 | Medium | 6.5 | 2018-10-02 | Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of cisco_ios, hos… |
CVE-2018-11748 | High | 7.8 | 2018-10-02 | Previous releases of the Puppet device_manager module creates configuration files containing credentials that are world readable. This issue has been resolved… |
CVE-2018-17886 | Medium | 5.4 | 2018-10-02 | An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, as demonstrated by a… |
CVE-2018-17884 | Medium | 6.1 | 2018-10-02 | XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5.4 for WordPress via the PATH_INFO to wp-admin/index.php |
CVE-2018-17787 | Critical | 9.8 | 2018-10-02 | On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent dire… |
CVE-2018-17786 | Critical | 9.8 | 2018-10-02 | On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi do not require authentication, which allows r… |
CVE-2018-17596 | Medium | 6.1 | 2018-10-02 | In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter. |
CVE-2018-17595 | Medium | 6.1 | 2018-10-02 | In the 5.4.0 version of the Fork CMS software, HTML Injection and Stored XSS vulnerabilities were discovered via the /backend/ajax URI. |
CVE-2018-17594 | Medium | 6.1 | 2018-10-02 | AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. |
CVE-2018-17593 | Medium | 6.1 | 2018-10-02 | AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. |
CVE-2018-17591 | Medium | 6.1 | 2018-10-02 | AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. |
CVE-2018-17590 | Medium | 6.1 | 2018-10-02 | AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. |
CVE-2018-17589 | Medium | 6.1 | 2018-10-02 | AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. |
CVE-2018-17588 | Medium | 6.1 | 2018-10-02 | AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. |
CVE-2018-17587 | Medium | 6.1 | 2018-10-02 | AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. |
CVE-2018-16984 | Medium | 4.9 | 2018-10-02 | An issue was discovered in Django 2.1 before 2.1.2, in which unprivileged users can read the password hashes of arbitrary accounts. The read-only password widg… |
CVE-2018-15753 | High | 7.5 | 2018-10-02 | An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. The use of a Hard-coded DES Cryptographic Key allows an attac… |
CVE-2018-15752 | High | 8.1 | 2018-10-02 | An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. Cleartext Transmission of Sensitive Information allows man-in… |
CVE-2018-15563 | Medium | 6.1 | 2018-10-02 | _core/admin/pages/add/ in Subrion CMS 4.2.1 has XSS via the titles[en] parameter. |
CVE-2018-6262 | Low | 2.5 | 2018-10-02 | NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive user information may be available to users… |
CVE-2018-6261 | High | 7.0 | 2018-10-02 | NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permissions on a file, which may to code execu… |
CVE-2018-1692 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1691 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1605 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1601 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1593 | Low | 3.7 | 2018-10-02 | IBM Multi-Cloud Data Encryption (MDE) 2.1 could allow an unauthorized user to manipulate data due to missing file checksums. IBM X-Force ID: 143568. |
CVE-2018-1558 | Medium | 5.4 | 2018-10-02 | IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users… |
CVE-2018-1557 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1522 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1509 | Low | 3.7 | 2018-10-02 | IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity… |
CVE-2018-1498 | Medium | 6.2 | 2018-10-02 | IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223. |
CVE-2018-1440 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1439 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1405 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1404 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1403 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-1395 | Medium | 5.4 | 2018-10-02 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2018-12473 | Low | 3.1 | 2018-10-02 | A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause access files not in the current build. O… |
CVE-2018-9069 | Medium | 5.9 | 2018-10-02 | In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially a… |
CVE-2018-11072 | High | 7.8 | 2018-10-02 | Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the applica… |
CVE-2018-17874 | Medium | 6.1 | 2018-10-01 | ExpressionEngine before 4.3.5 has reflected XSS. |
CVE-2018-17870 | Medium | 6.1 | 2018-10-01 | An issue was discovered in BTITeam XBTIT 2.5.4. The "returnto" parameter of account_change.php is vulnerable to an open redirect, a different vulnerability tha… |
CVE-2018-17869 | High | 8.8 | 2018-10-01 | DASAN H660GW devices do not implement any CSRF protection mechanism. |
CVE-2018-17868 | Medium | 4.8 | 2018-10-01 | DASAN H660GW devices have Stored XSS in the Port Forwarding functionality. |
CVE-2018-17867 | High | 7.2 | 2018-10-01 | The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/adv_nat_vir… |
CVE-2018-4001 | High | 7.8 | 2018-10-01 | An exploitable uninitialized pointer vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted docume… |