2018 CVEs (page 75)
Page 75 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17003 | Medium | 6.1 | 2018-09-21 | In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveyls_title parameter to /index.php?r=admin/survey/sa/inser… |
CVE-2018-17002 | Medium | 6.1 | 2018-09-21 | On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter… |
CVE-2018-17001 | Medium | 6.1 | 2018-09-21 | On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn paramete… |
CVE-2018-16965 | Medium | 6.1 | 2018-09-21 | In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter. |
CVE-2018-16833 | Medium | 6.1 | 2018-09-21 | Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI. |
CVE-2018-16822 | Critical | 9.8 | 2018-09-21 | SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter. |
CVE-2018-16821 | Medium | 5.3 | 2018-09-21 | SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests. |
CVE-2018-15613 | High | 8.3 | 2018-09-21 | A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returne… |
CVE-2018-15612 | High | 8.3 | 2018-09-21 | A CSRF vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could allow an attacker to add, change, or remove administrative sett… |
CVE-2018-14732 | High | 7.5 | 2018-09-21 | An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6. Attackers are able to steal developer's code because the origin of requests is not… |
CVE-2018-14731 | High | 7.5 | 2018-09-21 | An issue was discovered in HMRServer.js in Parcel parcel-bundler. Attackers are able to steal developer's code because the origin of requests is not checked by… |
CVE-2018-14730 | High | 7.5 | 2018-09-21 | An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server… |
CVE-2018-13111 | Medium | 5.9 | 2018-09-21 | There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to crash the ONVIF servic… |
CVE-2018-12511 | High | 7.5 | 2018-09-21 | In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverag… |
CVE-2018-9282 | Medium | 6.1 | 2018-09-21 | An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to pod… |
CVE-2018-16793 | High | 8.6 | 2018-09-21 | Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA… |
CVE-2018-16597 | Medium | 5.5 | 2018-09-21 | An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate fi… |
CVE-2018-16281 | Critical | 9.8 | 2018-09-21 | The DEISER "Profields - Project Custom Fields" app before 6.0.2 for Jira has Incorrect Access Control. |
CVE-2018-14691 | Medium | 6.1 | 2018-09-21 | An issue was discovered in Subsonic 6.1.1. The music tags feature is affected by three stored cross-site scripting vulnerabilities in the c0-param2, c0-param3… |
CVE-2018-14690 | Medium | 6.1 | 2018-09-21 | An issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross-site scripting vulnerabilities in the title and subtitle param… |
CVE-2018-14689 | Medium | 6.1 | 2018-09-21 | An issue was discovered in Subsonic 6.1.1. The transcoding settings are affected by five stored cross-site scripting vulnerabilities in the name[x], sourceform… |
CVE-2018-14688 | Medium | 6.1 | 2018-09-21 | An issue was discovered in Subsonic 6.1.1. The radio settings are affected by three stored cross-site scripting vulnerabilities in the name[x], streamUrl[x], h… |
CVE-2018-11352 | Medium | 4.0 | 2018-09-21 | The Wallabag application 2.2.3 to 2.3.2 is affected by one cross-site scripting (XSS) vulnerability that is stored within the configuration page. This vulnerab… |
CVE-2018-3915 | High | 8.2 | 2018-09-21 | An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hu… |
CVE-2018-3914 | High | 7.8 | 2018-09-21 | An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hu… |
CVE-2018-3913 | Medium | 6.7 | 2018-09-21 | An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hu… |
CVE-2018-3906 | High | 8.2 | 2018-09-21 | An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub. Th… |
CVE-2018-3894 | High | 8.8 | 2018-09-21 | An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmw… |
CVE-2018-16786 | Medium | 6.1 | 2018-09-21 | DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedback_ajax.php. |
CVE-2018-16784 | High | 7.2 | 2018-09-21 | DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type='file' name='../" substring. |
CVE-2018-11241 | Critical | 9.8 | 2018-09-21 | An issue was discovered on SoftCase T-Router build 20112017 devices. A remote attacker can read and write to arbitrary files on the system as root, as demonstr… |
CVE-2018-11240 | Critical | 9.8 | 2018-09-21 | An issue was discovered on SoftCase T-Router build 20112017 devices. There are no restrictions on the 'exec command' feature of the T-Router protocol. If the c… |
CVE-2018-3877 | Critical | 9.9 | 2018-09-21 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware vers… |
CVE-2018-3876 | High | 8.8 | 2018-09-21 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware vers… |
CVE-2018-3874 | Critical | 9.9 | 2018-09-21 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware vers… |
CVE-2018-3873 | Critical | 9.9 | 2018-09-21 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware vers… |
CVE-2018-8023 | Medium | 5.9 | 2018-09-21 | Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT). In Apache Mesos versions pre-1.4.2, 1.5.0, 1… |
CVE-2018-1711 | High | 8.4 | 2018-09-21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges due to allowing modi… |
CVE-2018-1710 | High | 8.4 | 2018-09-21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerability that can poten… |
CVE-2018-1685 | Medium | 5.5 | 2018-09-21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability in db2cacpy that could allow a local user… |
CVE-2018-14645 | High | 7.5 | 2018-09-21 | A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a… |
CVE-2018-14643 | Critical | 9.8 | 2018-09-21 | An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remotely execute arbitr… |
CVE-2018-17302 | Medium | 5.4 | 2018-09-21 | Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message. |
CVE-2018-17301 | Medium | 5.4 | 2018-09-21 | Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel. |
CVE-2018-17300 | Medium | 4.8 | 2018-09-21 | Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator/#/component/table_manager/view/cu_menus section name. |
CVE-2018-17298 | Critical | 9.8 | 2018-09-21 | An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user changes its password. |
CVE-2018-17297 | High | 7.5 | 2018-09-21 | The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename… |
CVE-2018-17294 | Medium | 6.5 | 2018-09-21 | The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a de… |
CVE-2018-17293 | High | 8.8 | 2018-09-21 | An issue was discovered in WAVM before 2018-09-16. The run function in Programs/wavm/wavm.cpp does not check whether there is Emscripten memory to store the co… |
CVE-2018-17292 | Medium | 6.5 | 2018-09-21 | An issue was discovered in WAVM before 2018-09-16. The loadModule function in Include/Inline/CLI.h lacks checking of the file length before a file magic compar… |
CVE-2018-17283 | High | 7.5 | 2018-09-21 | Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=… |
CVE-2018-17282 | Medium | 6.5 | 2018-09-20 | An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference. |
CVE-2018-16752 | High | 8.8 | 2018-09-20 | LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools… |
CVE-2018-16282 | High | 8.8 | 2018-09-20 | A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands… |
CVE-2018-15832 | High | 8.8 | 2018-09-20 | upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vu… |
CVE-2018-14592 | Critical | 9.8 | 2018-09-20 | The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within do… |
CVE-2018-6505 | High | 7.5 | 2018-09-20 | A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerabi… |
CVE-2018-6504 | High | 8.8 | 2018-09-20 | A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulne… |
CVE-2018-6503 | Medium | 6.5 | 2018-09-20 | A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be e… |
CVE-2018-6502 | Medium | 6.5 | 2018-09-20 | A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81… |
CVE-2018-14829 | Critical | 9.8 | 2018-09-20 | Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet… |
CVE-2018-14827 | High | 7.5 | 2018-09-20 | Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP pack… |
CVE-2018-14821 | High | 7.5 | 2018-09-20 | Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malf… |
CVE-2018-14796 | High | 7.5 | 2018-09-20 | Tec4Data SmartCooler, all versions prior to firmware 180806, the device responds to a remote unauthenticated reboot command that may be used to perform a denia… |
CVE-2018-6501 | Medium | 6.5 | 2018-09-20 | Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions prior to 2.81. This vul… |
CVE-2018-6500 | High | 7.5 | 2018-09-20 | A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerabil… |
CVE-2018-3865 | High | 8.8 | 2018-09-20 | An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmwa… |
CVE-2018-3864 | High | 8.8 | 2018-09-20 | An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmwa… |
CVE-2018-1800 | Medium | 5.1 | 2018-09-20 | IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a short time period whe… |
CVE-2018-1674 | Medium | 6.3 | 2018-09-20 | IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL… |
CVE-2018-17254 | Critical | 9.8 | 2018-09-20 | The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter. |
CVE-2018-5871 | Medium | 6.5 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD… |
CVE-2018-5837 | High | 7.5 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD… |
CVE-2018-11982 | High | 8.8 | 2018-09-20 | In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD… |
CVE-2018-11292 | High | 7.8 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/1… |
CVE-2018-11291 | High | 7.5 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA… |
CVE-2018-11290 | High | 7.5 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 425, SD 427, SD… |
CVE-2018-11287 | Critical | 9.8 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 45… |
CVE-2018-11285 | High | 7.8 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 45… |
CVE-2018-11277 | High | 7.8 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD… |
CVE-2018-11269 | High | 7.8 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205… |
CVE-2018-11268 | High | 7.8 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205… |
CVE-2018-11267 | High | 7.8 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, S… |
CVE-2018-17243 | Critical | 9.8 | 2018-09-20 | Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection. |
CVE-2018-17237 | Medium | 6.5 | 2018-09-20 | A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF fi… |
CVE-2018-17236 | Medium | 6.5 | 2018-09-20 | The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls free() on a invalid pointer, raising a SIGABRT signal. |
CVE-2018-17235 | Medium | 6.5 | 2018-09-20 | The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads… |
CVE-2018-17234 | Medium | 6.5 | 2018-09-20 | Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory… |
CVE-2018-17233 | Medium | 6.5 | 2018-09-20 | A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of… |
CVE-2018-17232 | Critical | 9.8 | 2018-09-20 | SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot (aka slack-archive-bot) before 2018-09-19 allows remote attackers to execute arbi… |
CVE-2018-17231 | High | 7.5 | 2018-09-19 | Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette"… |
CVE-2018-17230 | Medium | 6.5 | 2018-09-19 | Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file. |
CVE-2018-17229 | Medium | 6.5 | 2018-09-19 | Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file. |
CVE-2018-17228 | Critical | 9.8 | 2018-09-19 | nmap4j 1.1.0 allows attackers to execute arbitrary commands via shell metacharacters in an includeHosts call. |
CVE-2018-8889 | Medium | 4.7 | 2018-09-19 | A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server (BEMS) 2.8.17.29 and earlier could allow an attacker to… |
CVE-2018-3831 | High | 8.8 | 2018-09-19 | Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elas… |
CVE-2018-3830 | Medium | 6.1 | 2018-09-19 | Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could allow an attacker to obtain sensitive i… |
CVE-2018-3829 | Medium | 5.3 | 2018-09-19 | In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on new hosts with an invalid roles token. An… |
CVE-2018-3828 | High | 7.5 | 2018-09-19 | Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability. It was discovered that certain exception conditions would… |
CVE-2018-3827 | High | 8.1 | 2018-09-19 | A sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly elasticsearch-cloud-azure) plugin. When the repository-azure plugin… |