2018 CVEs (page 88)
Page 88 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-8353 | High | 7.5 | 2018-08-15 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory… |
CVE-2018-8351 | Medium | 6.5 | 2018-08-15 | An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft Browser Information Di… |
CVE-2018-8350 | High | 8.8 | 2018-08-15 | A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vu… |
CVE-2018-8349 | High | 8.8 | 2018-08-15 | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows… |
CVE-2018-8348 | Medium | 4.7 | 2018-08-15 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnera… |
CVE-2018-8347 | High | 7.8 | 2018-08-15 | An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka "Wi… |
CVE-2018-8346 | High | 8.8 | 2018-08-15 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Exec… |
CVE-2018-8345 | High | 7.5 | 2018-08-15 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Exec… |
CVE-2018-8344 | High | 8.8 | 2018-08-15 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote… |
CVE-2018-8343 | High | 7.8 | 2018-08-15 | An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior t… |
CVE-2018-8342 | High | 7.8 | 2018-08-15 | An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior t… |
CVE-2018-8341 | Medium | 4.7 | 2018-08-15 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnera… |
CVE-2018-8340 | Medium | 6.5 | 2018-08-15 | A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles multi-factor authentication requests, aka "… |
CVE-2018-8339 | High | 7.0 | 2018-08-15 | An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure libr… |
CVE-2018-8316 | High | 7.5 | 2018-08-15 | A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka "Internet Explorer… |
CVE-2018-8302 | Critical | 9.8 | 2018-08-15 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchan… |
CVE-2018-8273 | Critical | 9.8 | 2018-08-15 | A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remo… |
CVE-2018-8266 | High | 7.5 | 2018-08-15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
CVE-2018-8253 | Medium | 4.6 | 2018-08-15 | An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of… |
CVE-2018-8204 | Medium | 5.3 | 2018-08-15 | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "De… |
CVE-2018-8200 | Medium | 5.3 | 2018-08-15 | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "De… |
CVE-2018-15172 | High | 7.5 | 2018-08-15 | TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header. |
CVE-2018-15156 | High | 8.8 | 2018-08-15 | OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted r… |
CVE-2018-15155 | High | 8.8 | 2018-08-15 | OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted r… |
CVE-2018-15154 | High | 8.8 | 2018-08-15 | OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted r… |
CVE-2018-15153 | High | 8.8 | 2018-08-15 | OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted r… |
CVE-2018-15152 | Critical | 9.1 | 2018-08-15 | Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access (1) portal/add_edit… |
CVE-2018-15151 | High | 8.8 | 2018-08-15 | SQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attack… |
CVE-2018-15150 | High | 8.8 | 2018-08-15 | SQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in versions of OpenEMR before 5.0.1.4 allows a remote authentica… |
CVE-2018-15149 | High | 8.8 | 2018-08-15 | SQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms.inc in versions of OpenEMR before 5.0.1.4 allows a remote aut… |
CVE-2018-15148 | High | 8.8 | 2018-08-15 | SQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to… |
CVE-2018-15147 | High | 8.8 | 2018-08-15 | SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR before 5.0.1.4 allows a remote authentica… |
CVE-2018-15146 | High | 8.8 | 2018-08-15 | SQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticate… |
CVE-2018-15138 | High | 7.5 | 2018-08-15 | Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs. |
CVE-2018-12056 | High | 7.5 | 2018-08-15 | The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables… |
CVE-2018-11687 | High | 7.5 | 2018-08-15 | An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereum ERC20 token, allows the owner to accom… |
CVE-2018-10917 | Medium | 6.8 | 2018-08-15 | pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible… |
CVE-2018-10369 | Critical | 9.8 | 2018-08-15 | A Cross-site scripting (XSS) vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login. |
CVE-2018-0952 | High | 7.8 | 2018-08-15 | An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standar… |
CVE-2018-1455 | Medium | 4.3 | 2018-08-15 | IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou… |
CVE-2018-6973 | High | 8.8 | 2018-08-15 | VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow… |
CVE-2018-13394 | Medium | 6.5 | 2018-08-15 | The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in… |
CVE-2018-13393 | Medium | 6.5 | 2018-08-15 | The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed… |
CVE-2018-3938 | Critical | 9.1 | 2018-08-14 | An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00… |
CVE-2018-3937 | Critical | 9.1 | 2018-08-14 | An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A… |
CVE-2018-3646 | Medium | 5.6 | 2018-08-14 | Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data… |
CVE-2018-3620 | Medium | 5.6 | 2018-08-14 | Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data… |
CVE-2018-3615 | High | 7.3 | 2018-08-14 | Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information r… |
CVE-2018-12539 | High | 7.8 | 2018-08-14 | In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same mac… |
CVE-2018-12537 | Medium | 5.3 | 2018-08-14 | In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters f… |
CVE-2018-14922 | Medium | 6.1 | 2018-08-14 | Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) first name o… |
CVE-2018-14888 | Medium | 6.1 | 2018-08-14 | inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject. |
CVE-2018-14429 | High | 7.5 | 2018-08-14 | man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI. |
CVE-2018-14424 | High | 7.8 | 2018-08-14 | The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to… |
CVE-2018-14348 | High | 8.1 | 2018-08-14 | libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information. |
CVE-2018-5392 | High | 7.5 | 2018-08-14 | mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by… |
CVE-2018-2451 | Medium | 6.6 | 2018-08-14 | XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an unintentional prolon… |
CVE-2018-2450 | High | 7.2 | 2018-08-14 | SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify… |
CVE-2018-2449 | High | 8.6 | 2018-08-14 | SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for valid repository user. T… |
CVE-2018-2448 | Medium | 5.3 | 2018-08-14 | Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence whic… |
CVE-2018-2447 | Medium | 6.5 | 2018-08-14 | SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS… |
CVE-2018-2446 | High | 7.5 | 2018-08-14 | Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (server name), hence l… |
CVE-2018-2445 | Critical | 9.6 | 2018-08-14 | AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted request… |
CVE-2018-2444 | Medium | 6.1 | 2018-08-14 | SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)… |
CVE-2018-2442 | High | 8.8 | 2018-08-14 | In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details ca… |
CVE-2018-2441 | Medium | 5.5 | 2018-08-14 | Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7… |
CVE-2018-0131 | Medium | 5.9 | 2018-08-14 | A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker t… |
CVE-2018-7100 | Medium | 5.5 | 2018-08-14 | A potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series (HP 1810-24G - P.2.22 and previous versions, HP 1810-48G PK.1.34… |
CVE-2018-7099 | Medium | 5.5 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow discl… |
CVE-2018-7098 | High | 8.4 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow direc… |
CVE-2018-7097 | High | 8.8 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cros… |
CVE-2018-7096 | Critical | 9.8 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow code… |
CVE-2018-7095 | Critical | 9.8 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow acce… |
CVE-2018-7094 | Medium | 5.5 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability may be exploited locally to allow discl… |
CVE-2018-7093 | High | 8.6 | 2018-08-14 | A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to… |
CVE-2018-7077 | High | 7.5 | 2018-08-14 | A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Configuration Manager (CM… |
CVE-2018-6970 | Medium | 6.5 | 2018-08-13 | VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerab… |
CVE-2018-15125 | High | 7.5 | 2018-08-13 | Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface. |
CVE-2018-15124 | Critical | 9.8 | 2018-08-13 | Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwo… |
CVE-2018-15123 | Critical | 9.8 | 2018-08-13 | Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows remote attacker perform new attack vectors… |
CVE-2018-14781 | Medium | 5.3 | 2018-08-13 | Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-default), are vulnerab… |
CVE-2018-10636 | High | 8.8 | 2018-08-13 | CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to c… |
CVE-2018-10634 | Medium | 4.8 | 2018-08-13 | Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these t… |
CVE-2018-10598 | High | 8.1 | 2018-08-13 | CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking… |
CVE-2018-3781 | Medium | 5.4 | 2018-08-13 | A missing sanitization of search results for an autocomplete field in NextCloud Talk <3.2.5 could lead to a stored XSS requiring user-interaction. The missing… |
CVE-2018-3780 | Medium | 5.4 | 2018-08-13 | A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missi… |
CVE-2018-15145 | Critical | 9.8 | 2018-08-13 | Multiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL… |
CVE-2018-15144 | High | 8.8 | 2018-08-13 | SQL injection vulnerability in interface/de_identification_forms/find_drug_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attack… |
CVE-2018-15143 | Critical | 9.8 | 2018-08-13 | Multiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQ… |
CVE-2018-15142 | High | 8.8 | 2018-08-13 | Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute… |
CVE-2018-15141 | Medium | 6.5 | 2018-08-13 | Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete… |
CVE-2018-15140 | Medium | 6.5 | 2018-08-13 | Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read ar… |
CVE-2018-15139 | High | 8.8 | 2018-08-13 | Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbit… |
CVE-2018-14878 | High | 7.8 | 2018-08-13 | JetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or… |
CVE-2018-14850 | Medium | 5.4 | 2018-08-13 | Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administ… |
CVE-2018-14849 | Medium | 5.4 | 2018-08-13 | Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php. |
CVE-2018-13417 | Critical | 9.8 | 2018-08-13 | In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote… |
CVE-2018-13415 | Critical | 9.8 | 2018-08-13 | In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, u… |
CVE-2018-12587 | Medium | 6.1 | 2018-08-13 | A cross-site scripting (XSS) vulnerability was found in valeuraddons German Spelling Dictionary v1.3 (an Opera Browser add-on). Instead of providing text for a… |
CVE-2018-10864 | Medium | 5.3 | 2018-08-13 | An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded. A remote attacker may provide an existin… |