2018 CVEs (page 83)
Page 83 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-16350 | Medium | 6.1 | 2018-09-02 | WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter. |
CVE-2018-16349 | Medium | 6.1 | 2018-09-02 | WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter. |
CVE-2018-16348 | Medium | 4.8 | 2018-09-02 | SeaCMS V6.61 has XSS via the admin_video.php v_content parameter, related to the site name. |
CVE-2018-16347 | Medium | 6.1 | 2018-09-02 | An issue was discovered in Gleez CMS v1.2.0. There is XSS via media/imagecache/resize. |
CVE-2018-16346 | Medium | 4.8 | 2018-09-02 | ChemCMS 1.0.6 has XSS via the "setting -> website information" field. |
CVE-2018-16345 | High | 8.8 | 2018-09-02 | An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin password via index.php?s=/admin/rbacuser/update/navTabId/listus… |
CVE-2018-16344 | High | 7.5 | 2018-09-02 | An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be… |
CVE-2018-16343 | High | 7.2 | 2018-09-02 | SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS. |
CVE-2018-16342 | Medium | 5.4 | 2018-09-02 | ShowDoc v1.8.0 has XSS via a new page. |
CVE-2018-16339 | High | 8.8 | 2018-09-02 | An issue was discovered in EmpireCMS 7.0. There is a CSRF vulnerability that can add administrators via upload/e/admin/user/AddUser.php?enews=AddUser. |
CVE-2018-16338 | High | 8.8 | 2018-09-02 | An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add… |
CVE-2018-16337 | Medium | 6.5 | 2018-09-02 | An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save. |
CVE-2018-16336 | Medium | 6.5 | 2018-09-02 | Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image… |
CVE-2018-16335 | High | 8.8 | 2018-09-02 | newoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer… |
CVE-2018-16334 | High | 8.8 | 2018-09-02 | An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The mac parameter in a POST request is used directly in a doSystem… |
CVE-2018-16333 | High | 7.5 | 2018-09-02 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-16332 | High | 8.8 | 2018-09-02 | An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability. |
CVE-2018-16331 | High | 8.8 | 2018-09-02 | admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password. |
CVE-2018-16330 | Medium | 6.1 | 2018-09-02 | Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element. |
CVE-2018-16329 | Critical | 9.8 | 2018-09-01 | In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c. |
CVE-2018-16328 | Critical | 9.8 | 2018-09-01 | In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c. |
CVE-2018-16327 | Medium | 4.8 | 2018-09-01 | There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration. |
CVE-2018-16325 | Medium | 6.1 | 2018-09-01 | There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field. |
CVE-2018-16324 | Medium | 6.1 | 2018-09-01 | In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field. |
CVE-2018-16323 | Medium | 6.5 | 2018-09-01 | ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affect… |
CVE-2018-16320 | High | 7.2 | 2018-09-01 | idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution of arbitrary PHP code from a ZIP file. |
CVE-2018-16316 | Medium | 5.4 | 2018-09-01 | A stored Cross-site scripting (XSS) vulnerability in Portainer through 1.19.1 allows remote authenticated users to inject arbitrary JavaScript and/or HTML via… |
CVE-2018-16315 | Medium | 6.5 | 2018-09-01 | In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add. |
CVE-2018-16314 | High | 8.8 | 2018-09-01 | An issue was discovered in admincp.php in idreamsoft iCMS 7.0.11. When verifying CSRF_TOKEN, if CSRF_TOKEN does not exist, only the Referer header is validated… |
CVE-2018-16313 | Medium | 6.1 | 2018-09-01 | Bludit 2.3.4 allows XSS via a user name. |
CVE-2018-16308 | High | 8.6 | 2018-09-01 | The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection. |
CVE-2018-16303 | High | 7.5 | 2018-09-01 | PDF-XChange Editor through 7.0.326.1 allows remote attackers to cause a denial of service (resource consumption) via a crafted x:xmpmeta structure, a related i… |
CVE-2018-16302 | High | 7.8 | 2018-09-01 | MediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a crafted file. |
CVE-2018-15161 | Medium | 6.5 | 2018-09-01 | The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a cra… |
CVE-2018-15160 | Medium | 6.5 | 2018-09-01 | The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buf… |
CVE-2018-15159 | Medium | 6.5 | 2018-09-01 | The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a cra… |
CVE-2018-15158 | Medium | 6.5 | 2018-09-01 | The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a c… |
CVE-2018-15157 | Medium | 6.5 | 2018-09-01 | The libfsclfs_block_read function in libfsclfs_block.c in libfsclfs before 2018-07-25 allows remote attackers to cause a heap-based buffer over-read via a craf… |
CVE-2018-15514 | High | 8.8 | 2018-09-01 | HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\docker… |
CVE-2018-16298 | Medium | 6.1 | 2018-08-31 | An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request. |
CVE-2018-6259 | Low | 2.5 | 2018-08-31 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled, an attacker has system access, and certai… |
CVE-2018-6258 | Medium | 4.7 | 2018-08-31 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker who has system acces… |
CVE-2018-6257 | High | 7.0 | 2018-08-31 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to… |
CVE-2018-11057 | Medium | 5.9 | 2018-08-31 | RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA de… |
CVE-2018-11056 | Medium | 6.5 | 2018-08-31 | RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled R… |
CVE-2018-11055 | Medium | 5.5 | 2018-08-31 | RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release… |
CVE-2018-11054 | High | 7.5 | 2018-08-31 | RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to pot… |
CVE-2018-3787 | High | 7.5 | 2018-08-31 | Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server. |
CVE-2018-16278 | Critical | 9.8 | 2018-08-31 | phpkaiyuancms PhpOpenSourceCMS (POSCMS) V3.2.0 allows an unauthenticated user to execute arbitrary SQL commands via the diy/module/member/controllers/Api.php a… |
CVE-2018-16276 | High | 7.8 | 2018-08-31 | An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with inc… |
CVE-2018-7685 | High | 7.8 | 2018-08-31 | The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not disp… |
CVE-2018-16275 | High | 7.8 | 2018-08-31 | OPSWAT MetaDefender before v4.11.2 allows CSV injection. |
CVE-2018-16239 | Critical | 9.8 | 2018-08-30 | An issue was discovered in damiCMS V6.0.1. It relies on the PHP time() function for cookies, which makes it possible to determine the cookie for an existing ad… |
CVE-2018-16238 | High | 7.2 | 2018-08-30 | An issue was discovered in damiCMS V6.0.1. Remote code execution can occur via PHP code in a multipart/form-data POST to the admin.php?s=/Tpl/Update.html URI… |
CVE-2018-16237 | Low | 2.7 | 2018-08-30 | An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the s parameter to admin.php, as demonstrated by an admin.php?s=T… |
CVE-2018-16236 | Medium | 6.1 | 2018-08-30 | cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/in… |
CVE-2018-16234 | Medium | 6.1 | 2018-08-30 | MorningStar WhatWeb 0.4.9 has XSS via JSON report files. |
CVE-2018-16233 | Medium | 6.1 | 2018-08-30 | MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter. |
CVE-2018-16231 | High | 7.5 | 2018-08-30 | Michael Roth Software Personal FTP Server (PFTP) through 8.4f allows remote attackers to cause a denial of service (daemon crash) via an unspecified sequence o… |
CVE-2018-6499 | High | 7.1 | 2018-08-30 | Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized… |
CVE-2018-6498 | High | 8.8 | 2018-08-30 | Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized… |
CVE-2018-15364 | Medium | 4.7 | 2018-08-30 | A Named Pipe Request Processing Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro OfficeScan XG (12.0) could allow a local attacker to dis… |
CVE-2018-15363 | High | 7.8 | 2018-08-30 | An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges o… |
CVE-2018-10514 | High | 7.8 | 2018-08-30 | A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges… |
CVE-2018-10513 | High | 7.8 | 2018-08-30 | A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalat… |
CVE-2018-15745 | High | 7.5 | 2018-08-30 | Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE param… |
CVE-2018-15480 | High | 8.8 | 2018-08-30 | An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip be… |
CVE-2018-15479 | Medium | 6.5 | 2018-08-30 | An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip be… |
CVE-2018-15478 | High | 8.1 | 2018-08-30 | An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip be… |
CVE-2018-15477 | Critical | 9.8 | 2018-08-30 | myStrom WiFi Switch V1 devices before 2.66 did not sanitize a parameter received from the cloud that was used in an OS command. Malicious servers were able to… |
CVE-2018-15476 | High | 8.1 | 2018-08-30 | An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip be… |
CVE-2018-14903 | High | 7.5 | 2018-08-30 | EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a printer malfunction… |
CVE-2018-14902 | High | 7.5 | 2018-08-30 | The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read sca… |
CVE-2018-14901 | High | 7.5 | 2018-08-30 | The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services. |
CVE-2018-14900 | High | 7.5 | 2018-08-30 | On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port… |
CVE-2018-14899 | Medium | 6.1 | 2018-08-30 | On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious s… |
CVE-2018-11720 | High | 7.5 | 2018-08-30 | Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal. |
CVE-2018-11719 | Medium | 4.9 | 2018-08-30 | Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE. |
CVE-2018-11718 | High | 8.8 | 2018-08-30 | Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF. |
CVE-2018-16159 | Critical | 9.8 | 2018-08-30 | The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template… |
CVE-2018-15691 | Critical | 9.8 | 2018-08-30 | Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute arbitrary… |
CVE-2018-13826 | Critical | 9.1 | 2018-08-30 | An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote… |
CVE-2018-13825 | Medium | 6.1 | 2018-08-30 | Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows re… |
CVE-2018-13824 | Critical | 9.8 | 2018-08-30 | Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to… |
CVE-2018-13823 | High | 7.5 | 2018-08-30 | An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote… |
CVE-2018-13822 | High | 7.5 | 2018-08-30 | Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive infor… |
CVE-2018-13821 | Critical | 9.8 | 2018-08-30 | A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including fil… |
CVE-2018-13820 | High | 7.5 | 2018-08-30 | A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information. |
CVE-2018-13819 | High | 7.5 | 2018-08-30 | A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information. |
CVE-2018-16157 | Medium | 5.3 | 2018-08-30 | waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the… |
CVE-2018-16131 | High | 7.5 | 2018-08-30 | The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a de… |
CVE-2018-14622 | High | 7.5 | 2018-08-30 | A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, wh… |
CVE-2018-14621 | Medium | 5.3 | 2018-08-30 | An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors w… |
CVE-2018-10936 | High | 8.1 | 2018-08-30 | A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier wa… |
CVE-2018-14619 | High | 7.8 | 2018-08-30 | A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was fre… |
CVE-2018-14317 | High | 8.8 | 2018-08-30 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to ex… |
CVE-2018-11616 | High | 8.8 | 2018-08-30 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interaction is required to… |
CVE-2018-11615 | High | 7.5 | 2018-08-30 | This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1. Authentication is not required to exploit this vulne… |
CVE-2018-16158 | Critical | 9.8 | 2018-08-30 | Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installations and do not proper… |
CVE-2018-16142 | Medium | 6.1 | 2018-08-30 | PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/login_control.php via the _back parameter to the ok_f function. |