2018 CVEs (page 79)
Page 79 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-8337 | Medium | 5.3 | 2018-09-13 | A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem for Linux Security… |
CVE-2018-8336 | Medium | 5.5 | 2018-09-13 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnera… |
CVE-2018-8335 | High | 7.5 | 2018-09-13 | A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to the server, aka "Wind… |
CVE-2018-8332 | High | 8.8 | 2018-09-13 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Cod… |
CVE-2018-8331 | High | 7.8 | 2018-09-13 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
CVE-2018-8315 | Medium | 4.2 | 2018-09-13 | An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Di… |
CVE-2018-8271 | Medium | 5.5 | 2018-09-13 | An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory, aka "Windo… |
CVE-2018-8269 | High | 7.5 | 2018-09-13 | A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsof… |
CVE-2018-0965 | High | 8.4 | 2018-09-13 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest opera… |
CVE-2018-16981 | High | 8.8 | 2018-09-12 | stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function. |
CVE-2018-16980 | Medium | 6.1 | 2018-09-12 | dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters. |
CVE-2018-16979 | Medium | 6.1 | 2018-09-12 | Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943. |
CVE-2018-16978 | Medium | 6.1 | 2018-09-12 | Monstra CMS V3.0.4 has XSS when ones tries to register an account with a crafted password parameter to users/registration, a different vulnerability than CVE-2… |
CVE-2018-16977 | Medium | 5.3 | 2018-09-12 | Monstra CMS V3.0.4 has an information leakage risk (e.g., PATH, DOCUMENT_ROOT, and SERVER_ADMIN) in libraries/Gelato/ErrorHandler/Resources/Views/Errors/except… |
CVE-2018-16976 | High | 8.1 | 2018-09-12 | Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the process of bei… |
CVE-2018-16975 | Critical | 9.8 | 2018-09-12 | An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in /designer/add/stylesheet.php by using a .php extension in t… |
CVE-2018-16974 | Critical | 9.8 | 2018-09-12 | An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in apps/filemanager/upload/drop.php by using /filemanager/api/… |
CVE-2018-15610 | High | 7.3 | 2018-09-12 | A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system. Affected ve… |
CVE-2018-16971 | Medium | 4.3 | 2018-09-12 | Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) v… |
CVE-2018-16970 | Medium | 4.3 | 2018-09-12 | Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified i… |
CVE-2018-16962 | High | 7.8 | 2018-09-12 | Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges. |
CVE-2018-3686 | Medium | 6.7 | 2018-09-12 | Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbitrary code via loca… |
CVE-2018-3679 | Critical | 9.6 | 2018-09-12 | Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially ex… |
CVE-2018-3669 | High | 7.5 | 2018-09-12 | A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to pote… |
CVE-2018-3659 | Medium | 6.8 | 2018-09-12 | A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to… |
CVE-2018-3658 | Medium | 5.3 | 2018-09-12 | Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially ca… |
CVE-2018-3657 | Medium | 6.7 | 2018-09-12 | Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code… |
CVE-2018-3655 | High | 7.3 | 2018-09-12 | A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firm… |
CVE-2018-3643 | High | 8.2 | 2018-09-12 | A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8… |
CVE-2018-3616 | Medium | 5.9 | 2018-09-12 | Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to… |
CVE-2018-12176 | High | 8.2 | 2018-09-12 | Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure… |
CVE-2018-12175 | High | 7.8 | 2018-09-12 | Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileges via local acces… |
CVE-2018-12171 | Critical | 9.8 | 2018-09-12 | Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute… |
CVE-2018-12168 | High | 7.8 | 2018-09-12 | Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user to potentially execu… |
CVE-2018-12163 | Medium | 4.8 | 2018-09-12 | A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modif… |
CVE-2018-12162 | High | 7.8 | 2018-09-12 | Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially execute code using def… |
CVE-2018-12160 | Medium | 5.3 | 2018-09-12 | DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentiall… |
CVE-2018-12151 | Medium | 5.5 | 2018-09-12 | Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentiall… |
CVE-2018-12150 | Medium | 6.7 | 2018-09-12 | Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose i… |
CVE-2018-12149 | Medium | 5.5 | 2018-09-12 | Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny service to the applicatio… |
CVE-2018-12148 | High | 7.8 | 2018-09-12 | Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as ad… |
CVE-2018-7572 | Medium | 6.8 | 2018-09-12 | Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to bypass Windows authent… |
CVE-2018-16729 | Medium | 5.4 | 2018-09-12 | Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?action=files. |
CVE-2018-16728 | Medium | 5.4 | 2018-09-12 | feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new. |
CVE-2018-16727 | Medium | 5.4 | 2018-09-12 | razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component. |
CVE-2018-16726 | Medium | 5.4 | 2018-09-12 | razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component. |
CVE-2018-16605 | Medium | 5.4 | 2018-09-12 | D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page. |
CVE-2018-16389 | Medium | 6.5 | 2018-09-12 | e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter. |
CVE-2018-16388 | High | 7.2 | 2018-09-12 | e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content ty… |
CVE-2018-15834 | Medium | 5.5 | 2018-09-12 | In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signatu… |
CVE-2018-15502 | High | 7.5 | 2018-09-12 | Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https requests for predicta… |
CVE-2018-13412 | High | 7.8 | 2018-09-12 | An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM… |
CVE-2018-13411 | High | 8.8 | 2018-09-12 | An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate… |
CVE-2018-7939 | Medium | 4.6 | 2018-09-12 | Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008… |
CVE-2018-7923 | High | 7.8 | 2018-09-12 | Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter che… |
CVE-2018-7922 | High | 7.8 | 2018-09-12 | Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter che… |
CVE-2018-7921 | Medium | 6.5 | 2018-09-12 | Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjacent attackers may exploit this vulnerabi… |
CVE-2018-7906 | Medium | 5.5 | 2018-09-12 | Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability. An attacker ca… |
CVE-2018-6924 | High | 7.1 | 2018-09-12 | In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could all… |
CVE-2018-3885 | High | 8.8 | 2018-09-12 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulti… |
CVE-2018-3884 | High | 8.8 | 2018-09-12 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulti… |
CVE-2018-3883 | High | 8.8 | 2018-09-12 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulti… |
CVE-2018-3882 | High | 8.8 | 2018-09-12 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulti… |
CVE-2018-1773 | Medium | 4.3 | 2018-09-12 | IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication mechanisms once the initial login is comp… |
CVE-2018-13807 | High | 8.6 | 2018-09-12 | A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SCALANCE X414 (All versions). The web inte… |
CVE-2018-13806 | High | 7.8 | 2018-09-12 | A vulnerability has been identified in SIEMENS TD Keypad Designer (All versions). A DLL hijacking vulnerability exists in all versions of SIEMENS TD Keypad Des… |
CVE-2018-13799 | Critical | 9.1 | 2018-09-12 | A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access control to a data point of the affected pr… |
CVE-2018-16950 | Medium | 6.5 | 2018-09-12 | Inteno DG400 WU7U_ELION3.11.6-170614_1328 devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random M… |
CVE-2018-16951 | High | 8.0 | 2018-09-12 | xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832. |
CVE-2018-16949 | High | 7.5 | 2018-09-12 | An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used as RPC input variables were implemented as unbounded array typ… |
CVE-2018-16948 | High | 7.5 | 2018-09-12 | An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully initialize their output variables before ret… |
CVE-2018-16947 | Critical | 9.8 | 2018-09-12 | An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (… |
CVE-2018-16946 | High | 7.5 | 2018-09-12 | LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /updownload/t.report (aka Log & Report) f… |
CVE-2018-15898 | Medium | 5.9 | 2018-09-11 | The Subsonic Music Streamer application 4.4 for Android has Improper Certificate Validation of the Subsonic server certificate, which might allow man-in-the-mi… |
CVE-2018-11078 | Medium | 4.0 | 2018-09-11 | Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from… |
CVE-2018-11070 | Medium | 5.9 | 2018-09-11 | RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during PKCS #1 unpadding o… |
CVE-2018-11069 | Medium | 5.9 | 2018-09-11 | RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decry… |
CVE-2018-11068 | Medium | 4.6 | 2018-09-11 | RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sens… |
CVE-2018-16836 | Critical | 9.8 | 2018-09-11 | Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary file… |
CVE-2018-10937 | Medium | 4.6 | 2018-09-11 | A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to create pods can use t… |
CVE-2018-2465 | High | 7.5 | 2018-09-11 | SAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not sufficiently validate XML. By exploiting, an unauthorized hac… |
CVE-2018-2464 | Medium | 6.1 | 2018-09-11 | SAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting (XSS… |
CVE-2018-2463 | High | 8.6 | 2018-09-11 | The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks. This is due to a misconf… |
CVE-2018-2462 | High | 8.8 | 2018-09-11 | In certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7.30, 7.31. 7.40, 7.41, 7.50, does not sufficiently validate an XML document acce… |
CVE-2018-2461 | High | 8.8 | 2018-09-11 | Missing authorization check in SAP HCM Fiori "People Profile" (GBX01 HR version 6.0) for an authenticated user which may result in an escalation of privileges. |
CVE-2018-2460 | Medium | 5.9 | 2018-09-11 | SAP Business One Android application, version 1.2, does not verify the certificate properly for HTTPS connection. This allows attacker to do MITM attack. |
CVE-2018-2459 | High | 7.5 | 2018-09-11 | Users of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData-supplied delta tokens (which is on by default), occasionally… |
CVE-2018-2458 | High | 7.5 | 2018-09-11 | Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would oth… |
CVE-2018-2457 | Medium | 6.5 | 2018-09-11 | Under certain conditions SAP Adaptive Server Enterprise, version 16.0, allows some privileged users to access information which would otherwise be restricted. |
CVE-2018-2455 | High | 8.8 | 2018-09-11 | SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_SEPA) does not perform necessary authorizat… |
CVE-2018-2454 | High | 8.8 | 2018-09-11 | SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_2) does not perform necessary authorization… |
CVE-2018-2452 | Medium | 6.1 | 2018-09-11 | The logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does not sufficiently encode user-controlled inputs, resulting in a c… |
CVE-2018-1127 | Medium | 4.2 | 2018-09-11 | Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few min… |
CVE-2018-1114 | Medium | 6.5 | 2018-09-11 | It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaus… |
CVE-2018-10935 | Medium | 6.5 | 2018-09-11 | A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with server side sort. |
CVE-2018-10893 | High | 7.6 | 2018-09-11 | Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the cli… |
CVE-2018-6976 | Medium | 5.3 | 2018-09-11 | The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted file… |
CVE-2018-6975 | Medium | 5.5 | 2018-09-11 | The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entries in the Agent are not encrypted. |
CVE-2018-10853 | High | 7.0 | 2018-09-11 | A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(… |
CVE-2018-16832 | Medium | 6.5 | 2018-09-11 | CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite th… |