2018 CVEs (page 72)
Page 72 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-4000 | High | 7.8 | 2018-10-01 | An exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted document can cau… |
CVE-2018-3999 | High | 7.8 | 2018-10-01 | An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embed… |
CVE-2018-3998 | High | 7.8 | 2018-10-01 | An exploitable heap-based buffer overflow vulnerability exists in the Windows enhanced metafile parser of Atlantis Word Processor, version 3.2.5.0. A specially… |
CVE-2018-3984 | High | 7.8 | 2018-10-01 | An exploitable uninitialized length vulnerability exists within the Word document-parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafte… |
CVE-2018-3982 | High | 7.8 | 2018-10-01 | An exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafted documen… |
CVE-2018-3981 | High | 7.8 | 2018-10-01 | An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this… |
CVE-2018-3978 | High | 8.8 | 2018-10-01 | An exploitable out-of-bounds write vulnerability exists in the Word Document parser of the Atlantis Word Processor 3.0.2.3, 3.0.2.5. A specially crafted docume… |
CVE-2018-3975 | High | 7.5 | 2018-10-01 | An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A specially crafted RTF f… |
CVE-2018-15702 | High | 8.8 | 2018-10-01 | The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field. |
CVE-2018-15701 | Medium | 6.5 | 2018-10-01 | The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header co… |
CVE-2018-15700 | Medium | 6.5 | 2018-10-01 | The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header co… |
CVE-2018-10605 | High | 8.8 | 2018-10-01 | Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify/upload a new system configuration or take the full control over… |
CVE-2018-14808 | Medium | 6.5 | 2018-10-01 | Emerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change executable and library files on the affected products. |
CVE-2018-14804 | Critical | 9.8 | 2018-10-01 | Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution. |
CVE-2018-1672 | Medium | 5.0 | 2018-10-01 | IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the… |
CVE-2018-1420 | Medium | 5.3 | 2018-10-01 | IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation… |
CVE-2018-14802 | Critical | 9.8 | 2018-10-01 | Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not prope… |
CVE-2018-14798 | Medium | 5.3 | 2018-10-01 | Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not prope… |
CVE-2018-14794 | Critical | 9.8 | 2018-10-01 | Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire co… |
CVE-2018-14790 | Critical | 9.8 | 2018-10-01 | Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnera… |
CVE-2018-14788 | Medium | 5.3 | 2018-10-01 | Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certain file types. |
CVE-2018-17854 | Medium | 6.5 | 2018-10-01 | SIMDComp before 0.1.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) because it can read (and then di… |
CVE-2018-17852 | Critical | 9.8 | 2018-10-01 | A SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php via the groupname parameter to the /index.php?m=coupon&f=card&v=detail… |
CVE-2018-17848 | High | 7.5 | 2018-10-01 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <math><template><mn><b></template>, leading to a "panic: runtime error" (index out of ran… |
CVE-2018-17847 | High | 7.5 | 2018-10-01 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (index out… |
CVE-2018-17846 | High | 7.5 | 2018-10-01 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Par… |
CVE-2018-17838 | High | 7.5 | 2018-10-01 | An issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file read operations are possible via a /console/#/console/file/manage.php?type=list&path=c:/ substring. |
CVE-2018-17837 | High | 7.5 | 2018-10-01 | An issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file deletion is possible via a /console/file/manage.php?type=action&action=delete&path=c%3A%2F substri… |
CVE-2018-17836 | High | 8.8 | 2018-10-01 | An issue was discovered in JTBC(PHP) 3.0.1.6. It allows remote attackers to execute arbitrary PHP code by using a /console/file/manage.php?type=action&action=a… |
CVE-2018-17835 | Medium | 4.8 | 2018-10-01 | An issue was discovered in GetSimple CMS 3.3.15. An administrator can insert stored XSS via the admin/settings.php Custom Permalink Structure parameter, which… |
CVE-2018-17832 | Medium | 6.1 | 2018-10-01 | XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter. |
CVE-2018-17831 | Critical | 9.8 | 2018-10-01 | In REDAXO before 5.6.3, a critical SQL injection vulnerability has been discovered in the rex_list class because of the prepareQuery function in core/lib/list… |
CVE-2018-17830 | Medium | 5.4 | 2018-10-01 | The $args variable in addons/mediapool/pages/index.php in REDAXO 5.6.2 is not effectively filtered, because names are not restricted (only values are restricte… |
CVE-2018-17828 | Medium | 5.5 | 2018-10-01 | Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function un… |
CVE-2018-17827 | High | 7.2 | 2018-10-01 | HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/… |
CVE-2018-17826 | High | 8.8 | 2018-10-01 | HisiPHP 1.0.8 allows CSRF via admin.php/admin/user/adduser.html to add an administrator account. The attacker can then use that account to execute arbitrary PH… |
CVE-2018-17825 | Critical | 9.8 | 2018-10-01 | An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDest… |
CVE-2018-17427 | Medium | 6.5 | 2018-10-01 | SIMDComp before 0.1.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) because it can read (and then di… |
CVE-2018-17218 | Medium | 5.4 | 2018-10-01 | An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function. |
CVE-2018-17217 | High | 7.5 | 2018-10-01 | An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key. |
CVE-2018-17216 | Medium | 6.5 | 2018-10-01 | An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users. |
CVE-2018-17798 | Medium | 6.5 | 2018-09-30 | An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete arbitrary files via an absolute pathname in the oldimg parameter in a… |
CVE-2018-17797 | Medium | 6.5 | 2018-09-30 | An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg paramet… |
CVE-2018-17796 | Critical | 9.8 | 2018-09-30 | An issue was discovered in MRCMS (aka mushroom) through 3.1.2. The WebParam.java file directly accepts the FIELD_T parameter in a request and uses it as a hash… |
CVE-2018-17795 | High | 8.8 | 2018-09-30 | The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and appl… |
CVE-2018-17794 | Medium | 6.5 | 2018-09-30 | An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in work_stuff_copy_to_from wh… |
CVE-2018-17785 | High | 7.5 | 2018-09-30 | In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by readi… |
CVE-2018-17780 | Medium | 6.5 | 2018-09-29 | Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsaf… |
CVE-2018-17781 | High | 7.5 | 2018-09-29 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataVi… |
CVE-2018-17776 | High | 7.8 | 2018-09-28 | PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users to gain privileges by replacing an exec… |
CVE-2018-9082 | High | 8.8 | 2018-09-28 | For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the password changing functionality available to authenticated users does no… |
CVE-2018-9081 | Medium | 4.7 | 2018-09-28 | For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file name used for assets accessible through the Content Viewer applicat… |
CVE-2018-9080 | Medium | 5.9 | 2018-09-28 | For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, by setting the Iomega cookie to a known value before logging into the NAS's… |
CVE-2018-9079 | Critical | 9.8 | 2018-09-28 | For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model (DOM) of the… |
CVE-2018-9078 | High | 8.8 | 2018-09-28 | For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to… |
CVE-2018-9077 | High | 8.1 | 2018-09-28 | For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection… |
CVE-2018-9076 | High | 8.1 | 2018-09-28 | For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection… |
CVE-2018-9075 | High | 8.1 | 2018-09-28 | For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injectio… |
CVE-2018-9074 | Medium | 6.5 | 2018-09-28 | For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnera… |
CVE-2018-15764 | Critical | 9.8 | 2018-09-28 | Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A r… |
CVE-2018-1251 | High | 8.3 | 2018-09-28 | Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains a URL Redirection vulnerability. A remote unauthenticated attacker could potentially ex… |
CVE-2018-1250 | Medium | 6.5 | 2018-09-28 | Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially ex… |
CVE-2018-1246 | Medium | 4.7 | 2018-09-28 | Dell EMC Unity and UnityVSA contains reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerabili… |
CVE-2018-11075 | Medium | 5.8 | 2018-09-28 | RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticate… |
CVE-2018-11074 | Medium | 6.1 | 2018-09-28 | RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare He… |
CVE-2018-11073 | Medium | 6.5 | 2018-09-28 | RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. A malicious Operations Conso… |
CVE-2018-5393 | Critical | 9.8 | 2018-09-28 | The TP-LINK EAP Controller is TP-LINK's software for remotely controlling wireless access point devices. It utilizes a Java remote method invocation (RMI) serv… |
CVE-2018-15365 | Medium | 5.4 | 2018-09-28 | A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection a… |
CVE-2018-6925 | Medium | 5.5 | 2018-09-28 | In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 prot… |
CVE-2018-17155 | Medium | 5.5 | 2018-09-28 | In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984), and 10.4-RELEASE-p13, due to insufficient initialization of me… |
CVE-2018-17154 | Medium | 5.5 | 2018-09-28 | In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to insufficient memory checking in the freebsd4_getfsstat system call, a NUL… |
CVE-2018-1704 | Medium | 6.8 | 2018-09-28 | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker to conduct phishing attacks, using an… |
CVE-2018-1702 | High | 7.1 | 2018-09-28 | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML External Entity Injection (XXE) attack when… |
CVE-2018-14648 | High | 7.5 | 2018-09-28 | A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthentica… |
CVE-2018-17613 | Critical | 9.8 | 2018-09-28 | Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol. |
CVE-2018-17611 | Critical | 9.8 | 2018-09-28 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann… |
CVE-2018-17610 | Critical | 9.8 | 2018-09-28 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann… |
CVE-2018-17609 | Critical | 9.8 | 2018-09-28 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann… |
CVE-2018-17608 | Critical | 9.8 | 2018-09-28 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann… |
CVE-2018-17607 | Critical | 9.8 | 2018-09-28 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann… |
CVE-2018-17605 | High | 7.5 | 2018-09-28 | An issue was discovered in the Asset Pipeline plugin before 3.0.4 for Grails. An attacker can perform directory traversal via a crafted request when a servlet-… |
CVE-2018-17582 | High | 7.1 | 2018-09-28 | Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function unsafely to… |
CVE-2018-17581 | Medium | 6.5 | 2018-09-28 | CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service. |
CVE-2018-17580 | High | 7.1 | 2018-09-28 | A heap-based buffer over-read exists in the function fast_edit_packet() in the file send_packets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial of Servic… |
CVE-2018-17575 | Critical | 9.8 | 2018-09-28 | SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/ studentId parameter. |
CVE-2018-17574 | Medium | 5.4 | 2018-09-28 | An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project. |
CVE-2018-17573 | Critical | 9.8 | 2018-09-28 | The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/edi… |
CVE-2018-17571 | Medium | 6.1 | 2018-09-28 | Vanilla before 2.6.1 allows XSS via the email field of a profile. |
CVE-2018-17567 | High | 7.5 | 2018-09-28 | Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in t… |
CVE-2018-17397 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter. |
CVE-2018-17394 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter. |
CVE-2018-17391 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter. |
CVE-2018-17385 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radius] parameter. |
CVE-2018-17384 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter. |
CVE-2018-17383 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter. |
CVE-2018-17382 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter. |
CVE-2018-17380 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_end_date parameter. |
CVE-2018-17379 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order parameter. |
CVE-2018-17378 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter. |
CVE-2018-17377 | Critical | 9.8 | 2018-09-28 | SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter. |