2018 CVEs (page 77)
Page 77 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7929 | Medium | 6.8 | 2018-09-18 | Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167(C786) have a lock-screen bypass vulnerability. An attacker could unlock and use the pho… |
CVE-2018-14642 | Medium | 5.3 | 2018-09-18 | An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the b… |
CVE-2018-14641 | Medium | 6.5 | 2018-09-18 | A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, which can cause a… |
CVE-2018-16959 | Medium | 5.3 | 2018-09-18 | An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile community config… |
CVE-2018-16958 | Medium | 5.4 | 2018-09-18 | An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The ASP.NET_SessionID primary session cookie, when Internet Information Services (IIS) w… |
CVE-2018-16957 | Critical | 9.8 | 2018-09-18 | The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password. Authentication to the Oracle WCI sea… |
CVE-2018-16956 | Medium | 6.5 | 2018-09-18 | The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename requests. Pages can be… |
CVE-2018-16955 | Medium | 6.1 | 2018-09-18 | The login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). The content of the in_hi_redirect param… |
CVE-2018-16954 | Medium | 6.1 | 2018-09-18 | An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the portal is vulnerable to insecure redirection (also called an o… |
CVE-2018-16953 | Medium | 6.1 | 2018-09-18 | The AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site sc… |
CVE-2018-16952 | High | 8.8 | 2018-09-18 | The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitive actions… |
CVE-2018-14631 | High | 8.8 | 2018-09-17 | moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provid… |
CVE-2018-14630 | High | 8.8 | 2018-09-17 | moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing leg… |
CVE-2018-14320 | Medium | 6.5 | 2018-09-17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit thi… |
CVE-2018-1223 | High | 8.8 | 2018-09-17 | Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the a… |
CVE-2018-1198 | High | 8.8 | 2018-09-17 | Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs. A malicious user with access to the logs c… |
CVE-2018-11088 | High | 8.8 | 2018-09-17 | Pivotal Applications Manager in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which… |
CVE-2018-11086 | High | 8.8 | 2018-09-17 | Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may all… |
CVE-2018-8041 | Medium | 5.3 | 2018-09-17 | Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal. |
CVE-2018-17143 | High | 7.5 | 2018-09-17 | The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in p… |
CVE-2018-17142 | High | 7.5 | 2018-09-17 | The html package (aka x/net/html) through 2018-09-17 in Go mishandles <math><template><mo><template>, leading to a "panic: runtime error" in parseCurrentToken… |
CVE-2018-11781 | High | 7.8 | 2018-09-17 | Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax. |
CVE-2018-11780 | Critical | 9.8 | 2018-09-17 | A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2. |
CVE-2018-17140 | Medium | 5.4 | 2018-09-17 | The Quizlord plugin through 2.0 for WordPress is prone to Stored XSS via the title parameter in a ql_insert action to wp-admin/admin.php. |
CVE-2018-17139 | High | 8.8 | 2018-09-17 | UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with… |
CVE-2018-17138 | Medium | 5.4 | 2018-09-17 | The Jibu Pro plugin through 1.7 for WordPress is prone to Stored XSS via the wp-content/plugins/jibu-pro/quiz_action.php name (aka Quiz Name) field. |
CVE-2018-17137 | Critical | 9.8 | 2018-09-17 | Prezi Next 1.3.101.11 has a documented purpose of creating HTML5 presentations but has SE_DEBUG_PRIVILEGE on Windows, which might allow attackers to bypass int… |
CVE-2018-17136 | Critical | 9.8 | 2018-09-17 | zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header. |
CVE-2018-17134 | High | 7.2 | 2018-09-17 | admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the cfg_author field in conjunction with a crafted cfg_webpath field. |
CVE-2018-17133 | High | 7.2 | 2018-09-17 | admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the rewrite url setting. |
CVE-2018-17132 | High | 7.2 | 2018-09-17 | admin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue[] array parameter. |
CVE-2018-17131 | High | 7.2 | 2018-09-17 | admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the varvalue field. |
CVE-2018-17130 | Medium | 5.4 | 2018-09-17 | PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header, |
CVE-2018-17129 | Medium | 4.9 | 2018-09-17 | MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class.php via the class1 field. |
CVE-2018-17128 | Medium | 5.4 | 2018-09-17 | A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode. |
CVE-2018-17127 | High | 7.5 | 2018-09-17 | blocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (NULL pointer dereference and dev… |
CVE-2018-17126 | Critical | 9.8 | 2018-09-17 | CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to upload\plugins\sys\Install.php. |
CVE-2018-17125 | High | 7.5 | 2018-09-17 | CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin\Plugins.php. |
CVE-2018-17113 | Medium | 6.1 | 2018-09-17 | App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to… |
CVE-2018-17110 | Critical | 9.8 | 2018-09-17 | Simple POS 4.0.24 allows SQL Injection via a products/get_products/ columns[0][search][value] parameter in the management panel, as demonstrated by products/ge… |
CVE-2018-17108 | High | 8.8 | 2018-09-16 | The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by intercepting a security-qu… |
CVE-2018-17106 | High | 7.5 | 2018-09-16 | In Tinyftp Tinyftpd 1.1, a buffer overflow exists in the text variable of the do_mkd function in the ftpproto.c file. An attacker can overwrite ebp via a long… |
CVE-2018-17104 | High | 8.8 | 2018-09-16 | An issue was discovered in Microweber 1.0.7. There is a CSRF attack (against the admin user) that can add an administrative account via api/save_user. |
CVE-2018-17103 | High | 8.8 | 2018-09-16 | An issue was discovered in GetSimple CMS v3.3.13. There is a CSRF vulnerability that can change the administrator's password via admin/settings.php. NOTE: The… |
CVE-2018-17102 | High | 8.8 | 2018-09-16 | An issue was discovered in QuickAppsCMS (aka QACMS) through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI. |
CVE-2018-17101 | High | 8.8 | 2018-09-16 | An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of serv… |
CVE-2018-17100 | High | 8.8 | 2018-09-16 | An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause a denial of service (crash) or possibly… |
CVE-2018-17098 | High | 8.8 | 2018-09-16 | The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption from size inconsis… |
CVE-2018-17097 | High | 8.8 | 2018-09-16 | The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unsp… |
CVE-2018-17096 | Medium | 6.5 | 2018-09-16 | The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failu… |
CVE-2018-17095 | High | 8.8 | 2018-09-16 | An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Exp… |
CVE-2018-17092 | Medium | 5.4 | 2018-09-16 | An issue was discovered in DonLinkage 6.6.8. SQL injection in /pages/proxy/php.php and /pages/proxy/add.php can be exploited via specially crafted input, allow… |
CVE-2018-17091 | Medium | 5.4 | 2018-09-16 | An issue was discovered in DonLinkage 6.6.8. It allows remote attackers to obtain potentially sensitive information via a direct request for files/temporary.tx… |
CVE-2018-17090 | Medium | 5.4 | 2018-09-16 | An issue was discovered in DonLinkage 6.6.8. The modules /pages/bazy/bazy_adresow.php and /pages/proxy/add.php are vulnerable to stored XSS that can be trigger… |
CVE-2018-17088 | High | 7.8 | 2018-09-16 | The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via… |
CVE-2018-17086 | Medium | 6.1 | 2018-09-16 | An issue was discovered in OTCMS 3.61. XSS exists in admin/share_switch.php via these parameters: fieldName fieldName2 tabName. |
CVE-2018-17085 | Medium | 6.1 | 2018-09-16 | An issue was discovered in OTCMS 3.61. XSS exists in admin/users.php via these parameters: dataTypeCN dataMode dataModeStr. |
CVE-2018-17062 | Medium | 6.1 | 2018-09-16 | An issue was discovered in SeaCMS 6.64. XSS exists in admin_video.php via the action, area, type, yuyan, jqtype, v_isunion, v_recycled, v_ismoney, or v_ispsd p… |
CVE-2018-17082 | Medium | 6.1 | 2018-09-16 | The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding… |
CVE-2018-17077 | Medium | 6.1 | 2018-09-16 | An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed. |
CVE-2018-17076 | High | 8.8 | 2018-09-16 | GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a c… |
CVE-2018-17075 | High | 7.5 | 2018-09-16 | The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of <templ… |
CVE-2018-17074 | Medium | 6.1 | 2018-09-16 | The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter. |
CVE-2018-17073 | High | 7.5 | 2018-09-16 | wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image. |
CVE-2018-17072 | Critical | 9.8 | 2018-09-16 | JSON++ through 2016-06-15 has a buffer over-read in yyparse() in json.y. |
CVE-2018-16554 | High | 7.8 | 2018-09-16 | The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via… |
CVE-2018-17070 | Medium | 6.5 | 2018-09-15 | An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=… |
CVE-2018-17069 | Medium | 6.5 | 2018-09-15 | An issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd%2Farticle&render=overlay&render=overlay. |
CVE-2018-17068 | Critical | 9.8 | 2018-09-15 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the… |
CVE-2018-17067 | Critical | 9.8 | 2018-09-15 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform/formLogin could lead to a stack-based buffer overflow and overwr… |
CVE-2018-17066 | Critical | 9.8 | 2018-09-15 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the… |
CVE-2018-17065 | Critical | 9.8 | 2018-09-15 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/DDNS route, a very long password could lead to a stac… |
CVE-2018-17064 | Critical | 9.8 | 2018-09-15 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of… |
CVE-2018-17063 | Critical | 9.8 | 2018-09-15 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of… |
CVE-2018-17061 | Medium | 6.1 | 2018-09-15 | BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results. |
CVE-2018-16706 | High | 7.5 | 2018-09-14 | LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080. |
CVE-2018-16288 | High | 8.6 | 2018-09-14 | LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs. |
CVE-2018-16287 | Critical | 9.8 | 2018-09-14 | LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs. |
CVE-2018-16286 | Critical | 9.8 | 2018-09-14 | LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to fo… |
CVE-2018-16242 | Medium | 5.3 | 2018-09-14 | oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to r… |
CVE-2018-12585 | High | 8.2 | 2018-09-14 | An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service. |
CVE-2018-12086 | High | 7.5 | 2018-09-14 | Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests. |
CVE-2018-10814 | High | 7.8 | 2018-09-14 | Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials. |
CVE-2018-10763 | Medium | 4.8 | 2018-09-14 | Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial Bra… |
CVE-2018-17057 | Critical | 9.8 | 2018-09-14 | An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper. |
CVE-2018-11087 | Medium | 5.9 | 2018-09-14 | Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation… |
CVE-2018-11058 | Critical | 9.8 | 2018-09-14 | RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5… |
CVE-2018-14638 | High | 7.5 | 2018-09-14 | A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are… |
CVE-2018-1791 | Medium | 4.9 | 2018-09-14 | IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request property. By submitting s… |
CVE-2018-1719 | Medium | 5.9 | 2018-09-14 | IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions. This could result in a downgrade of TLS prot… |
CVE-2018-0718 | Critical | 9.8 | 2018-09-14 | Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands… |
CVE-2018-17051 | Medium | 6.1 | 2018-09-14 | K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php. |
CVE-2018-17049 | Medium | 6.1 | 2018-09-14 | CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action. |
CVE-2018-17046 | Medium | 6.1 | 2018-09-14 | translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js. |
CVE-2018-17045 | High | 8.8 | 2018-09-14 | An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksi_users.ph… |
CVE-2018-17044 | Medium | 4.8 | 2018-09-14 | In YzmCMS 5.1, stored XSS exists via the admin/system_manage/user_config_add.html title parameter. |
CVE-2018-17043 | High | 7.8 | 2018-09-14 | An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parse_doc i… |
CVE-2018-17042 | Medium | 5.5 | 2018-09-14 | An issue has been found in dbf2txt through 2012-07-19. It is a infinite loop. |
CVE-2018-17039 | Medium | 6.1 | 2018-09-14 | MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled. |
CVE-2018-17037 | High | 8.8 | 2018-09-14 | user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3. |