2018 CVEs (page 80)
Page 80 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-16831 | Medium | 5.9 | 2018-09-11 | Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement. |
CVE-2018-1571 | High | 8.8 | 2018-09-11 | IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an atta… |
CVE-2018-16807 | High | 7.5 | 2018-09-11 | In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser. |
CVE-2018-16806 | Medium | 6.5 | 2018-09-10 | A Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it e… |
CVE-2018-16805 | Medium | 4.8 | 2018-09-10 | In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to… |
CVE-2018-11775 | High | 7.4 | 2018-09-10 | TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Jav… |
CVE-2018-3875 | Critical | 9.9 | 2018-09-10 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware vers… |
CVE-2018-14636 | Medium | 5.3 | 2018-09-10 | Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the… |
CVE-2018-14635 | Medium | 6.5 | 2018-09-10 | When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address valid… |
CVE-2018-14620 | Medium | 4.7 | 2018-09-10 | The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an… |
CVE-2018-16705 | Critical | 9.8 | 2018-09-10 | FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This incl… |
CVE-2018-16591 | Critical | 9.8 | 2018-09-10 | FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the p… |
CVE-2018-12608 | High | 7.5 | 2018-09-10 | An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificat… |
CVE-2018-16802 | High | 7.8 | 2018-09-10 | An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling c… |
CVE-2018-3897 | High | 8.8 | 2018-09-10 | An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub with Firmware ve… |
CVE-2018-3896 | High | 8.8 | 2018-09-10 | An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub with Firmware ve… |
CVE-2018-16797 | High | 7.8 | 2018-09-10 | A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSe… |
CVE-2018-16608 | High | 8.8 | 2018-09-10 | In Monstra CMS 3.0.4, an attacker with 'Editor' privileges can change the password of the administrator via an admin/index.php?id=users&action=edit&user_id=1… |
CVE-2018-15886 | High | 7.2 | 2018-09-10 | Monstra CMS 3.0.4 does not properly restrict modified Snippet content, as demonstrated by the admin/index.php?id=snippets&action=edit_snippet&filename=google-a… |
CVE-2018-14625 | Medium | 5.3 | 2018-09-10 | A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition betwe… |
CVE-2018-16790 | High | 8.1 | 2018-09-10 | _bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafte… |
CVE-2018-16782 | High | 8.8 | 2018-09-10 | libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr_read_rle_internal function in imagew-bmp.c. |
CVE-2018-16781 | Medium | 6.5 | 2018-09-10 | ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman t… |
CVE-2018-16780 | Medium | 5.4 | 2018-09-10 | Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment. |
CVE-2018-16779 | Medium | 6.1 | 2018-09-10 | BlogCMS through 2016-10-25 has XSS via a comment. |
CVE-2018-16776 | Medium | 4.8 | 2018-09-10 | wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page. |
CVE-2018-16775 | Medium | 4.8 | 2018-09-10 | An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu. |
CVE-2018-16774 | High | 7.5 | 2018-09-10 | HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete. |
CVE-2018-16773 | Medium | 4.8 | 2018-09-10 | EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field. |
CVE-2018-16772 | Medium | 4.8 | 2018-09-10 | Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new. |
CVE-2018-16771 | Critical | 9.8 | 2018-09-10 | Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php. |
CVE-2018-16770 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2018-16769 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2018-16768 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2018-16767 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2018-16766 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2018-16765 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2018-16764 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2018-16763 | Critical | 9.8 | 2018-09-09 | FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Executio… |
CVE-2018-16762 | Critical | 9.8 | 2018-09-09 | FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items. |
CVE-2018-16761 | Medium | 6.1 | 2018-09-09 | Eventum before 3.4.0 has an open redirect vulnerability. |
CVE-2018-16759 | Medium | 6.1 | 2018-09-09 | The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCMS v1.4 allows XSS via an onhashchange ev… |
CVE-2018-16750 | Medium | 6.5 | 2018-09-09 | In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found. |
CVE-2018-16749 | Medium | 6.5 | 2018-09-09 | In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob asserti… |
CVE-2018-16736 | Medium | 5.4 | 2018-09-09 | In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the _whatfilter and _messages parameters (in the Filters section of the settings). |
CVE-2018-16733 | High | 7.5 | 2018-09-08 | In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block. |
CVE-2018-16732 | High | 8.8 | 2018-09-08 | \upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save. |
CVE-2018-16731 | Critical | 9.8 | 2018-09-08 | CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathna… |
CVE-2018-16730 | Medium | 6.1 | 2018-09-08 | \upload\plugins\sys\Install.php in CScms 4.1 has XSS via the site name. |
CVE-2018-16725 | Medium | 6.1 | 2018-09-08 | An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka "Non-standard use of the flash… |
CVE-2018-16724 | Critical | 9.8 | 2018-09-08 | An issue is discovered in baijiacms V4. Blind SQL Injection exists via the order parameter in an index.php?act=index request. |
CVE-2018-16715 | High | 8.8 | 2018-09-08 | An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\CTES folder and sub-folders m… |
CVE-2018-9283 | Medium | 5.4 | 2018-09-07 | An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting (XSS) vulnerabilities in the firstname, lastname, billing_addr… |
CVE-2018-16454 | High | 7.5 | 2018-09-07 | PHP Scripts Mall Currency Converter Script 2.0.5 allows remote attackers to cause a denial of service (web-interface change) via an inverted comma. |
CVE-2018-16363 | Medium | 5.4 | 2018-09-07 | The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request because set_transie… |
CVE-2018-16059 | Medium | 5.3 | 2018-09-07 | Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter. |
CVE-2018-15552 | High | 7.5 | 2018-09-07 | The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with pu… |
CVE-2018-15486 | Critical | 9.1 | 2018-09-07 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the… |
CVE-2018-15485 | Critical | 9.1 | 2018-09-07 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03. |
CVE-2018-15484 | Critical | 9.8 | 2018-09-07 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface… |
CVE-2018-15483 | High | 7.5 | 2018-09-07 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04. |
CVE-2018-15474 | Critical | 9.6 | 2018-09-07 | CSV Injection (aka Excel Macro Injection or Formula Injection) in /lib/plugins/usermanager/admin.php in DokuWiki 2018-04-22a and earlier allows remote attacker… |
CVE-2018-14398 | Medium | 6.1 | 2018-09-07 | An issue was discovered in Creme CRM 1.6.12. The value of the cancel button uses the content of the HTTP Referer header, and could be used to trick a user into… |
CVE-2018-14397 | Medium | 5.4 | 2018-09-07 | An issue was discovered in Creme CRM 1.6.12. The organization creation page is affected by 9 stored cross-site scripting vulnerabilities involving the name, bi… |
CVE-2018-14396 | Medium | 5.4 | 2018-09-07 | An issue was discovered in Creme CRM 1.6.12. The salesman creation page is affected by 10 stored cross-site scripting vulnerabilities involving the firstname… |
CVE-2018-12897 | High | 7.8 | 2018-09-07 | SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow. |
CVE-2018-16710 | Critical | 9.1 | 2018-09-07 | OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor d… |
CVE-2018-16709 | Critical | 9.8 | 2018-09-07 | Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre… |
CVE-2018-16460 | Critical | 9.8 | 2018-09-07 | A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID. |
CVE-2018-16704 | Medium | 4.3 | 2018-09-07 | An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (logged in users) to vi… |
CVE-2018-16703 | Medium | 5.3 | 2018-09-07 | A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote attacker to perform multiple user enumerations, which can further help… |
CVE-2018-16667 | High | 7.0 | 2018-09-07 | An issue was discovered in Contiki-NG through 4.1. There is a buffer over-read in lookup in os/storage/antelope/lvm.c while parsing AQL (lvm_register_variable… |
CVE-2018-16666 | High | 7.8 | 2018-09-07 | An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in next_string in os/storage/antelope/aql-lexer.c while parsing AQL (… |
CVE-2018-16665 | Medium | 6.1 | 2018-09-07 | An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow while parsing AQL in lvm_shift_for_operator in os/storage/antelope/lvm.c. |
CVE-2018-16664 | High | 7.0 | 2018-09-07 | An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow in lvm_set_type in os/storage/antelope/lvm.c while parsing AQL (lvm_set_op, lvm_s… |
CVE-2018-16663 | High | 7.8 | 2018-09-07 | An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in parse_relations in os/storage/antelope/aql-parser.c while parsing… |
CVE-2018-4010 | High | 7.8 | 2018-09-07 | An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause… |
CVE-2018-3952 | High | 8.8 | 2018-09-07 | An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privil… |
CVE-2018-1789 | High | 8.4 | 2018-09-07 | IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack. IBM X-… |
CVE-2018-1757 | Medium | 5.3 | 2018-09-07 | IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 could allow an attacker to obtain sensitive information due to missing authentication in IG… |
CVE-2018-1756 | High | 7.5 | 2018-09-07 | IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statemen… |
CVE-2018-1567 | Critical | 9.8 | 2018-09-07 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through the SOAP connector with a serialize… |
CVE-2018-16658 | Medium | 6.1 | 2018-09-07 | An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local atta… |
CVE-2018-16657 | Critical | 9.8 | 2018-09-07 | In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason… |
CVE-2018-0663 | High | 8.8 | 2018-09-07 | Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 a… |
CVE-2018-0662 | Medium | 6.8 | 2018-09-07 | Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 a… |
CVE-2018-0661 | High | 8.8 | 2018-09-07 | Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 a… |
CVE-2018-0660 | Low | 3.3 | 2018-09-07 | Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create arbitrary files via specially crafted ATC… |
CVE-2018-0659 | Medium | 5.5 | 2018-09-07 | Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create or overwrite existing files via specially… |
CVE-2018-0658 | High | 7.2 | 2018-09-07 | Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Mo… |
CVE-2018-0657 | Medium | 4.8 | 2018-09-07 | Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) ve… |
CVE-2018-0655 | Medium | 4.8 | 2018-09-07 | Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app setti… |
CVE-2018-0654 | Medium | 6.1 | 2018-09-07 | Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for creating Wiki… |
CVE-2018-0653 | Medium | 6.1 | 2018-09-07 | Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view. |
CVE-2018-0652 | Medium | 4.8 | 2018-09-07 | Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup… |
CVE-2018-0650 | High | 7.4 | 2018-09-07 | The LINE MUSIC for Android version 3.1.0 to versions prior to 3.6.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attacke… |
CVE-2018-0649 | High | 7.8 | 2018-09-07 | Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs (ESET Smart Security Premium, ESET Internet Securit… |
CVE-2018-0648 | High | 7.8 | 2018-09-07 | Untrusted search path vulnerability in installer of ChatWork Desktop App for Windows 2.3.0 and earlier allows an attacker to gain privileges via a Trojan horse… |
CVE-2018-0647 | High | 8.8 | 2018-09-07 | Cross-site request forgery (CSRF) vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allows remote attackers to hijack the authentication of adminis… |
CVE-2018-0645 | Critical | 9.8 | 2018-09-07 | MTAppjQuery 1.8.1 and earlier allows remote PHP code execution via unspecified vectors. |