2018 CVEs (page 85)
Page 85 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-15864 | Medium | 5.5 | 2018-08-25 | Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereferenc… |
CVE-2018-15863 | Medium | 5.5 | 2018-08-25 | Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer… |
CVE-2018-15862 | Medium | 5.5 | 2018-08-25 | Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference)… |
CVE-2018-15861 | Medium | 5.5 | 2018-08-25 | Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference)… |
CVE-2018-15859 | Medium | 5.5 | 2018-08-25 | Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash… |
CVE-2018-15858 | Medium | 5.5 | 2018-08-25 | Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local att… |
CVE-2018-15857 | High | 7.8 | 2018-08-25 | An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parser… |
CVE-2018-15856 | Medium | 5.5 | 2018-08-25 | An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause… |
CVE-2018-15855 | Medium | 5.5 | 2018-08-25 | Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a… |
CVE-2018-15854 | Medium | 5.5 | 2018-08-25 | Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a… |
CVE-2018-15853 | Medium | 5.5 | 2018-08-25 | Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by suppl… |
CVE-2018-15852 | Medium | 6.5 | 2018-08-25 | Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by m… |
CVE-2018-15851 | High | 8.8 | 2018-08-25 | An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add. |
CVE-2018-15850 | High | 8.8 | 2018-08-25 | An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.php?page=user. |
CVE-2018-15849 | Medium | 4.3 | 2018-08-25 | An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php. |
CVE-2018-15848 | High | 8.8 | 2018-08-25 | An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin/portfolio.php?newpage=true. |
CVE-2018-15847 | Medium | 6.1 | 2018-08-25 | An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field. |
CVE-2018-15846 | High | 8.8 | 2018-08-25 | An issue was discovered in fledrCMS through 2014-02-03. There is a CSRF vulnerability that can change the administrator's password via index.php?p=done&savedat… |
CVE-2018-15845 | High | 8.8 | 2018-08-25 | There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add. |
CVE-2018-15844 | High | 8.8 | 2018-08-25 | An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit. |
CVE-2018-15843 | Medium | 4.8 | 2018-08-25 | GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field. |
CVE-2018-15842 | Medium | 4.8 | 2018-08-25 | WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter. |
CVE-2018-15875 | Medium | 6.1 | 2018-08-25 | Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the descri… |
CVE-2018-15874 | Medium | 6.1 | 2018-08-25 | Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page… |
CVE-2018-15871 | Medium | 6.5 | 2018-08-25 | An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a se… |
CVE-2018-15870 | Medium | 6.5 | 2018-08-25 | An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault… |
CVE-2018-15869 | Medium | 5.3 | 2018-08-25 | An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source… |
CVE-2018-14059 | Medium | 5.4 | 2018-08-24 | Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, P… |
CVE-2018-15576 | High | 8.1 | 2018-08-24 | An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decry… |
CVE-2018-11654 | High | 7.5 | 2018-08-24 | Information disclosure in Netwave IP camera at get_status.cgi (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information fr… |
CVE-2018-11653 | Critical | 9.8 | 2018-08-24 | Information disclosure in Netwave IP camera at //etc/RT2870STA.dat (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive informati… |
CVE-2018-11502 | Medium | 6.5 | 2018-08-24 | An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. An attacker… |
CVE-2018-3786 | Critical | 9.8 | 2018-08-24 | A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument. |
CVE-2018-15728 | High | 8.8 | 2018-08-24 | Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role… |
CVE-2018-15605 | Medium | 6.1 | 2018-08-24 | An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted file to manipulate… |
CVE-2018-15536 | Medium | 5.5 | 2018-08-24 | /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 does not properly validate file paths in archives, allowing for the extraction of c… |
CVE-2018-15535 | High | 7.5 | 2018-08-24 | /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted dire… |
CVE-2018-15499 | Medium | 4.7 | 2018-08-24 | GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service (Race Condition and BSoD on Windows) by not checki… |
CVE-2018-15120 | Medium | 6.5 | 2018-08-24 | libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or pos… |
CVE-2018-14600 | Critical | 9.8 | 2018-08-24 | An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an… |
CVE-2018-14599 | Critical | 9.8 | 2018-08-24 | An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server resp… |
CVE-2018-14598 | High | 7.5 | 2018-08-24 | An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causi… |
CVE-2018-11065 | Low | 2.7 | 2018-08-24 | The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injectio… |
CVE-2018-11061 | Critical | 9.1 | 2018-08-24 | RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulne… |
CVE-2018-11749 | Critical | 9.8 | 2018-08-24 | When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are sent via plaintext to the LDAP server. This affects Puppet… |
CVE-2018-1755 | Medium | 5.9 | 2018-08-24 | IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by incorrect transport being used when Liberty i… |
CVE-2018-1722 | Critical | 10.0 | 2018-08-24 | IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control or Federation services are running. IB… |
CVE-2018-1699 | Medium | 6.3 | 2018-08-24 | IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow… |
CVE-2018-3909 | High | 8.6 | 2018-08-24 | An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The v… |
CVE-2018-3907 | Critical | 10.0 | 2018-08-24 | An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The v… |
CVE-2018-15822 | High | 7.5 | 2018-08-23 | The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure. |
CVE-2018-3911 | High | 8.6 | 2018-08-23 | An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore… |
CVE-2018-3880 | Critical | 9.9 | 2018-08-23 | An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of video-core's HTTP server of Samsung SmartTh… |
CVE-2018-3872 | Critical | 9.9 | 2018-08-23 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware ve… |
CVE-2018-3866 | Critical | 9.9 | 2018-08-23 | An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmwar… |
CVE-2018-3856 | Critical | 9.9 | 2018-08-23 | An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The device i… |
CVE-2018-15809 | Medium | 5.5 | 2018-08-23 | AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installation path. This may allow local attackers t… |
CVE-2018-15808 | Critical | 9.8 | 2018-08-23 | POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user. "root" access to POSIM EVO's database may result in a breach… |
CVE-2018-15807 | High | 7.8 | 2018-08-23 | POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's "override" feature. This Override prom… |
CVE-2018-6558 | Medium | 6.5 | 2018-08-23 | The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which a… |
CVE-2018-14797 | High | 7.8 | 2018-08-23 | Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded as an internal and… |
CVE-2018-14791 | High | 7.8 | 2018-08-23 | Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable and library files on the affected produc… |
CVE-2018-14786 | Critical | 9.4 | 2018-08-23 | Becton, Dickinson and Company (BD) Alaris Plus medical syringe pumps (models Alaris GS, Alaris GH, Alaris CC, and Alaris TIVA) versions 2.3.6 and prior are aff… |
CVE-2018-1159 | Medium | 6.5 | 2018-08-23 | Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An authenticated remote attacker can crash the HTTP server by ra… |
CVE-2018-1158 | Medium | 6.5 | 2018-08-23 | Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server via re… |
CVE-2018-1157 | Medium | 6.5 | 2018-08-23 | Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server and i… |
CVE-2018-1156 | High | 8.8 | 2018-08-23 | Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface. This vulnerability could theoretically… |
CVE-2018-3912 | High | 7.8 | 2018-08-23 | On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of i… |
CVE-2018-1999047 | Medium | 6.5 | 2018-08-23 | A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins… |
CVE-2018-1999046 | Medium | 4.3 | 2018-08-23 | A exposure of sensitive information vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in Computer.java that allows attackers With Overall/… |
CVE-2018-1999045 | Medium | 5.4 | 2018-08-23 | A improper authentication vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in SecurityRealm.java, TokenBasedRememberMeServices2.java that… |
CVE-2018-1999044 | Medium | 6.5 | 2018-08-23 | A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission t… |
CVE-2018-1999043 | High | 7.5 | 2018-08-23 | A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator… |
CVE-2018-1999042 | Medium | 5.3 | 2018-08-23 | A vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allows attackers to have Jenkins resolve a domain name when dese… |
CVE-2018-15804 | High | 8.8 | 2018-08-23 | An issue was discovered in the MapR File System in MapR Converged Data Platform and MapR-XD 6.x and earlier. Under certain conditions, it is possible for MapR… |
CVE-2018-8028 | High | 8.8 | 2018-08-23 | An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthoriz… |
CVE-2018-3925 | High | 8.5 | 2018-08-23 | An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 d… |
CVE-2018-3919 | Critical | 9.9 | 2018-08-23 | An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP server of Samsung SmartThings Hub STH-… |
CVE-2018-3917 | Critical | 9.9 | 2018-08-23 | On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of i… |
CVE-2018-3905 | Critical | 9.9 | 2018-08-23 | An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices w… |
CVE-2018-3903 | Critical | 9.9 | 2018-08-23 | On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON pa… |
CVE-2018-3902 | Critical | 9.9 | 2018-08-23 | An exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices… |
CVE-2018-3879 | High | 8.8 | 2018-08-23 | An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with f… |
CVE-2018-3878 | Critical | 9.9 | 2018-08-23 | Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 device… |
CVE-2018-3867 | Critical | 9.9 | 2018-08-23 | An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings… |
CVE-2018-3863 | Critical | 9.9 | 2018-08-23 | On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON pa… |
CVE-2018-15748 | High | 8.8 | 2018-08-23 | On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65, and Network Firmware Version V4.02.15(2335dn MFP) 11-22-2010… |
CVE-2018-3833 | High | 7.5 | 2018-08-23 | An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub… |
CVE-2018-3832 | Critical | 9.0 | 2018-08-23 | An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows for uploading arbitrary MPFS binaries… |
CVE-2018-15685 | High | 8.1 | 2018-08-23 | GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options… |
CVE-2018-11758 | High | 8.1 | 2018-08-22 | This affects Apache Cayenne 4.1.M1, 3.2.M1, 4.0.M2 to 4.0.M5, 4.0.B1, 4.0.B2, 4.0.RC1, 3.1, 3.1.1, 3.1.2. CayenneModeler is a desktop GUI tool shipped with Apa… |
CVE-2018-14801 | Medium | 6.2 | 2018-08-22 | In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical acce… |
CVE-2018-14799 | Low | 3.7 | 2018-08-22 | In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user… |
CVE-2018-14789 | Medium | 6.7 | 2018-08-22 | In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulner… |
CVE-2018-14787 | High | 7.8 | 2018-08-22 | In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escalated privileges cou… |
CVE-2018-5238 | High | 7.8 | 2018-08-22 | Norton Power Eraser (prior to 5.3.0.24) and SymDiag (prior to 2.1.242) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can… |
CVE-2018-5235 | Medium | 6.0 | 2018-08-22 | Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks t… |
CVE-2018-10919 | Medium | 4.3 | 2018-08-22 | The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker cou… |
CVE-2018-10918 | Medium | 5.2 | 2018-08-22 | A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw… |
CVE-2018-10858 | Medium | 4.3 | 2018-08-22 | A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to… |