2018 CVEs (page 81)
Page 81 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0644 | Medium | 6.5 | 2018-09-07 | Buffer overflow in Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA (Online Receipt… |
CVE-2018-0643 | Medium | 6.6 | 2018-09-07 | Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-server) 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute a… |
CVE-2018-0642 | Medium | 6.1 | 2018-09-07 | Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified… |
CVE-2018-0624 | High | 7.8 | 2018-09-07 | Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and… |
CVE-2018-0623 | High | 7.8 | 2018-09-07 | Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and… |
CVE-2018-16655 | Medium | 6.1 | 2018-09-07 | Gxlcms 1.0 has XSS via the PATH_INFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php. |
CVE-2018-16654 | Medium | 6.1 | 2018-09-07 | Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1. |
CVE-2018-16653 | Medium | 6.1 | 2018-09-07 | rejucms 2.1 has XSS via the ucenter/cms_user_add.php u_name parameter. |
CVE-2018-16651 | High | 7.2 | 2018-09-07 | The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports. |
CVE-2018-16650 | High | 8.8 | 2018-09-07 | phpMyFAQ before 2.9.11 allows CSRF. |
CVE-2018-6320 | Critical | 9.8 | 2018-09-06 | A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and Pulse Policy Secure… |
CVE-2018-16648 | Medium | 5.5 | 2018-09-06 | In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fault) via a crafted p… |
CVE-2018-16647 | Medium | 5.5 | 2018-09-06 | In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault in fz_write… |
CVE-2018-16646 | Medium | 6.5 | 2018-09-06 | In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS at… |
CVE-2018-16590 | Critical | 9.8 | 2018-09-06 | FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication. |
CVE-2018-16517 | Medium | 5.5 | 2018-09-06 | asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file. |
CVE-2018-16310 | Medium | 6.5 | 2018-09-06 | Technicolor TG588V V2 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by m… |
CVE-2018-16285 | Medium | 6.1 | 2018-09-06 | The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro_shortcode_template action to wp-admin/admin-ajax.php. |
CVE-2018-16261 | Medium | 6.8 | 2018-09-06 | In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Trust. |
CVE-2018-15865 | High | 7.8 | 2018-09-06 | The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability. |
CVE-2018-15749 | Medium | 5.5 | 2018-09-06 | The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability. |
CVE-2018-15726 | Medium | 5.3 | 2018-09-06 | The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability. |
CVE-2018-14366 | Medium | 6.1 | 2018-09-06 | download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX befo… |
CVE-2018-12234 | Medium | 6.1 | 2018-09-06 | A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed b… |
CVE-2018-16645 | Medium | 6.5 | 2018-09-06 | There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which all… |
CVE-2018-16644 | Medium | 6.5 | 2018-09-06 | There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remo… |
CVE-2018-16643 | Medium | 6.5 | 2018-09-06 | The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0… |
CVE-2018-16642 | Medium | 6.5 | 2018-09-06 | The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-b… |
CVE-2018-16641 | Medium | 6.5 | 2018-09-06 | ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c. |
CVE-2018-16640 | Medium | 6.5 | 2018-09-06 | ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c. |
CVE-2018-5391 | High | 7.5 | 2018-09-06 | The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An… |
CVE-2018-5389 | Medium | 5.9 | 2018-09-06 | The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IK… |
CVE-2018-5005 | Medium | 6.1 | 2018-09-06 | Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead to sensitive inform… |
CVE-2018-16622 | Medium | 5.4 | 2018-09-06 | Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via… |
CVE-2018-1000670 | Medium | 6.1 | 2018-09-06 | KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting (XSS) vulnerability in Multiple fields… |
CVE-2018-1000669 | High | 8.8 | 2018-09-06 | KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Request Forgery (CSRF) vulnerability in /cgi-bin/… |
CVE-2018-1000801 | Medium | 5.5 | 2018-09-06 | okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result i… |
CVE-2018-1000671 | Medium | 6.1 | 2018-09-06 | sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The "referer" parameter of the wwsympa… |
CVE-2018-1000800 | Critical | 9.8 | 2018-09-06 | zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (er… |
CVE-2018-1000668 | Medium | 6.5 | 2018-09-06 | jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to s… |
CVE-2018-1000667 | Medium | 5.5 | 2018-09-06 | NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assem… |
CVE-2018-1000666 | Critical | 9.8 | 2018-09-06 | GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Eleme… |
CVE-2018-1000665 | Medium | 6.1 | 2018-09-06 | Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n… |
CVE-2018-1000664 | Medium | 5.9 | 2018-09-06 | daneren2005 DSub for Subsonic (Android client) version 5.4.1 contains a CWE-295: Improper Certificate Validation vulnerability in HTTPS Client that can result… |
CVE-2018-1000663 | Medium | 6.5 | 2018-09-06 | jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can result in Crash due to segmentation fault… |
CVE-2018-1000661 | Medium | 6.5 | 2018-09-06 | jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fau… |
CVE-2018-1000660 | High | 7.5 | 2018-09-06 | TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb26605feed. For example dfde28196cd12071fcf6669f7654be7df482b85d contains a Insecure Permissions vul… |
CVE-2018-1000659 | High | 8.8 | 2018-09-06 | LimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows upload of webshell vulnerability in file upload functionality t… |
CVE-2018-1000658 | High | 8.8 | 2018-09-06 | LimeSurvey version prior to 3.14.4 contains a file upload vulnerability in upload functionality that can result in an attacker gaining code execution via websh… |
CVE-2018-16606 | Medium | 6.5 | 2018-09-06 | In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted papers (Title and Abstract) and their author… |
CVE-2018-16604 | High | 7.2 | 2018-09-06 | An issue was discovered in Nibbleblog v4.0.5. With an admin's username and password, an attacker can execute arbitrary PHP code by changing the username becaus… |
CVE-2018-1000773 | High | 8.8 | 2018-09-06 | WordPress version 4.9.8 and earlier contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remote code execution due to an… |
CVE-2018-1695 | High | 7.3 | 2018-09-06 | IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID… |
CVE-2018-16585 | High | 7.8 | 2018-09-06 | An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys PostScript command is accepted even though it is not intended for use during… |
CVE-2018-14632 | High | 7.7 | 2018-09-06 | An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker ca… |
CVE-2018-14624 | High | 7.5 | 2018-09-06 | A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the error log was not correctly used when r… |
CVE-2018-11263 | High | 8.8 | 2018-09-06 | In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is received from the FW and is used to acc… |
CVE-2018-16459 | Medium | 6.1 | 2018-09-06 | An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser. |
CVE-2018-16552 | High | 8.8 | 2018-09-05 | MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs. |
CVE-2018-16551 | Medium | 5.4 | 2018-09-05 | LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit. |
CVE-2018-16550 | Critical | 9.8 | 2018-09-05 | TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes i… |
CVE-2018-16549 | Medium | 5.3 | 2018-09-05 | HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter. |
CVE-2018-16548 | Medium | 6.5 | 2018-09-05 | An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a… |
CVE-2018-16381 | Medium | 6.1 | 2018-09-05 | e107 2.1.8 has XSS via the e107_admin/users.php?mode=main&action=list user_loginname parameter. |
CVE-2018-16361 | Medium | 6.1 | 2018-09-05 | An issue was discovered in BTITeam XBTIT 2.5.4. news.php allows XSS via the id parameter. |
CVE-2018-16307 | High | 7.5 | 2018-09-05 | An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50 devices. It is possible to induce the application to retrieve t… |
CVE-2018-16252 | Low | 3.3 | 2018-09-05 | FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection. |
CVE-2018-16148 | Medium | 6.1 | 2018-09-05 | The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting. |
CVE-2018-16147 | Medium | 6.1 | 2018-09-05 | The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting. |
CVE-2018-16146 | High | 7.2 | 2018-09-05 | The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications that… |
CVE-2018-16145 | High | 8.1 | 2018-09-05 | The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited… |
CVE-2018-16144 | Critical | 9.8 | 2018-09-05 | The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command injection due to impr… |
CVE-2018-15918 | Medium | 5.4 | 2018-09-05 | An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissions to read and modify sensitive informat… |
CVE-2018-15917 | Medium | 5.4 | 2018-09-05 | Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the language parameter to sessio… |
CVE-2018-15684 | Medium | 5.3 | 2018-09-05 | An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory (/include/logs) using predictable file names, which can lead to full p… |
CVE-2018-15683 | Medium | 6.1 | 2018-09-05 | An issue was discovered in BTITeam XBTIT. The "returnto" parameter of the login page is vulnerable to an open redirect due to a lack of validation. If a user i… |
CVE-2018-15682 | High | 8.8 | 2018-09-05 | An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private mess… |
CVE-2018-15681 | Critical | 9.8 | 2018-09-05 | An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie… |
CVE-2018-15680 | Critical | 9.8 | 2018-09-05 | An issue was discovered in BTITeam XBTIT 2.5.4. The hashed passwords stored in the xbtit_users table are stored as unsalted MD5 hashes, which makes it easier f… |
CVE-2018-15679 | Medium | 6.1 | 2018-09-05 | An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable… |
CVE-2018-15678 | Medium | 6.1 | 2018-09-05 | An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=signup is vulnerable to reflected cross-si… |
CVE-2018-15677 | Medium | 6.1 | 2018-09-05 | The newsfeed (aka /index.php?page=viewnews) in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item. This is also exploitable via CSRF. |
CVE-2018-15676 | Medium | 5.3 | 2018-09-05 | An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_protection.php anti-XSS mechanism that lo… |
CVE-2018-14771 | High | 8.8 | 2018-09-05 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi. |
CVE-2018-14770 | High | 8.8 | 2018-09-05 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service… |
CVE-2018-14769 | High | 8.8 | 2018-09-05 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF. |
CVE-2018-16546 | Medium | 5.9 | 2018-09-05 | Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptograph… |
CVE-2018-16437 | Medium | 4.9 | 2018-09-05 | Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator. |
CVE-2018-16436 | High | 7.2 | 2018-09-05 | Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator. |
CVE-2018-16545 | High | 7.8 | 2018-09-05 | Kaizen Asset Manager (Enterprise Edition) and Training Manager (Enterprise Edition) allow a remote attacker to achieve arbitrary code execution via file impers… |
CVE-2018-14618 | High | 7.5 | 2018-09-05 | curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the le… |
CVE-2018-16543 | High | 7.8 | 2018-09-05 | In Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution allow attackers to have an unspecified impact. |
CVE-2018-16542 | Medium | 5.5 | 2018-09-05 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handl… |
CVE-2018-16541 | Medium | 5.5 | 2018-09-05 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the int… |
CVE-2018-16540 | High | 7.8 | 2018-09-05 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice h… |
CVE-2018-16539 | Medium | 5.5 | 2018-09-05 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose con… |
CVE-2018-16521 | Critical | 9.8 | 2018-09-05 | An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0. |
CVE-2018-16518 | Critical | 9.8 | 2018-09-05 | A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows… |
CVE-2018-16516 | Medium | 6.1 | 2018-09-05 | helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. |
CVE-2018-9194 | Medium | 5.9 | 2018-09-05 | A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server'… |