2018 CVEs (page 90)
Page 90 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7060 | High | 8.8 | 2018-08-06 | Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authen… |
CVE-2018-7059 | High | 8.8 | 2018-08-06 | Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permission could u… |
CVE-2018-7058 | Critical | 9.8 | 2018-08-06 | Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to ga… |
CVE-2018-5390 | High | 7.5 | 2018-08-06 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can… |
CVE-2018-14716 | High | 7.5 | 2018-08-06 | A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorr… |
CVE-2018-13877 | High | 7.5 | 2018-08-06 | The doPayouts() function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract… |
CVE-2018-14978 | High | 8.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI. |
CVE-2018-14977 | Medium | 6.1 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-20… |
CVE-2018-14976 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS. |
CVE-2018-14975 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS. |
CVE-2018-14974 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS. |
CVE-2018-14973 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS. |
CVE-2018-14972 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS. |
CVE-2018-14971 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS. |
CVE-2018-14970 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS. |
CVE-2018-14969 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS. |
CVE-2018-14968 | Critical | 9.8 | 2018-08-06 | An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter. |
CVE-2018-14967 | High | 8.8 | 2018-08-06 | An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter. |
CVE-2018-14966 | High | 8.8 | 2018-08-06 | An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF. |
CVE-2018-14965 | High | 8.8 | 2018-08-06 | An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF. |
CVE-2018-14964 | Medium | 5.4 | 2018-08-06 | An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page. |
CVE-2018-14963 | High | 8.8 | 2018-08-06 | zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI. |
CVE-2018-14962 | Medium | 5.4 | 2018-08-06 | zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php. |
CVE-2018-14961 | Critical | 9.8 | 2018-08-06 | dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter. |
CVE-2018-14960 | High | 8.8 | 2018-08-06 | Xiao5uCompany 1.7 has CSRF via admin/Admin.asp. |
CVE-2018-1551 | Low | 3.1 | 2018-08-06 | IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator crea… |
CVE-2018-1528 | Medium | 4.3 | 2018-08-06 | IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API. IBM X-Force ID: 142290. |
CVE-2018-1422 | Medium | 5.4 | 2018-08-06 | IBM Jazz Foundation products (IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.5) are vulnerable to cross-site scripting. This vulnerab… |
CVE-2018-14959 | High | 8.8 | 2018-08-05 | An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI. |
CVE-2018-14958 | High | 8.8 | 2018-08-05 | An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and description) via index.php. |
CVE-2018-14955 | Medium | 6.1 | 2018-08-05 | The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute). |
CVE-2018-14954 | Medium | 6.1 | 2018-08-05 | The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute. |
CVE-2018-14953 | Medium | 6.1 | 2018-08-05 | The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack. |
CVE-2018-14952 | Medium | 6.1 | 2018-08-05 | The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack. |
CVE-2018-14951 | Medium | 6.1 | 2018-08-05 | The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack. |
CVE-2018-14950 | Medium | 6.1 | 2018-08-05 | The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack. |
CVE-2018-14948 | High | 7.8 | 2018-08-05 | An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory Management Routines (operator new [] v… |
CVE-2018-14947 | High | 8.8 | 2018-08-05 | An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines (operator new [] versus operator delete… |
CVE-2018-14946 | High | 8.8 | 2018-08-05 | An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines (malloc versus operator delete). |
CVE-2018-14945 | High | 7.8 | 2018-08-05 | An issue has been found in jpeg_encoder through 2015-11-27. It is a heap-based buffer overflow in the function readFromBMP in jpeg_encoder.cpp. |
CVE-2018-14944 | High | 7.8 | 2018-08-05 | An issue has been found in jpeg_encoder through 2015-11-27. It is a SEGV in the function readFromBMP in jpeg_encoder.cpp. The signal is caused by an out-of-bou… |
CVE-2018-14943 | Critical | 9.8 | 2018-08-05 | Harmonic NSG 9000 devices have a default password of nsgadmin for the admin account, a default password of nsgguest for the guest account, and a default passwo… |
CVE-2018-14942 | High | 8.8 | 2018-08-05 | Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "POST /PY/EMULATION_GET_FILE" or "POST /P… |
CVE-2018-14941 | Medium | 6.5 | 2018-08-05 | Harmonic NSG 9000 devices allow remote authenticated users to read the webapp.py source code via a direct request for the /webapp.py URI. |
CVE-2018-14940 | High | 7.5 | 2018-08-05 | PHPCMS 9 allows remote attackers to cause a denial of service (resource consumption) via large font_size, height, and width parameters in an api.php?op=checkco… |
CVE-2018-14939 | Critical | 9.8 | 2018-08-05 | The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environments such as FreeBSD l… |
CVE-2018-14938 | Critical | 9.1 | 2018-08-05 | An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen proces… |
CVE-2018-14937 | Medium | 4.8 | 2018-08-05 | The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field. |
CVE-2018-14936 | Medium | 4.8 | 2018-08-05 | The Add page option in my little forum 2.4.12 allows XSS via the Title field. |
CVE-2018-14933 | Critical | 9.8 | 2018-08-04 | upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command. |
CVE-2018-14593 | High | 8.8 | 2018-08-04 | An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged int… |
CVE-2018-14541 | Medium | 5.4 | 2018-08-04 | PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields. |
CVE-2018-14497 | Medium | 5.4 | 2018-08-04 | Tenda D152 ADSL routers allow XSS via a crafted SSID. |
CVE-2018-14473 | Critical | 9.1 | 2018-08-04 | OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be exploited by an attacker sending a craft… |
CVE-2018-14417 | Critical | 9.8 | 2018-08-04 | A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize… |
CVE-2018-12483 | High | 8.8 | 2018-08-04 | OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscover_analyser rzo GE… |
CVE-2018-12482 | High | 8.8 | 2018-08-04 | OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues. |
CVE-2018-14929 | Medium | 6.1 | 2018-08-03 | Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by the /contingency/web/index.jsp (aka home page) url parameter. |
CVE-2018-14928 | High | 7.5 | 2018-08-03 | /contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter. |
CVE-2018-14927 | Medium | 5.3 | 2018-08-03 | Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to system files outside the default application folder) via the /contingency/servlet/Servle… |
CVE-2018-14926 | High | 8.8 | 2018-08-03 | Matera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSend/messageSendHandler.jsp request. |
CVE-2018-14925 | Critical | 9.8 | 2018-08-03 | Matera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a stack trace revealing use of net.sf.acegisecurity components. |
CVE-2018-14924 | Medium | 6.1 | 2018-08-03 | Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" (aka user fullname) field. |
CVE-2018-9866 | Critical | 9.8 | 2018-08-03 | A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow… |
CVE-2018-3777 | Critical | 9.8 | 2018-08-03 | Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests. |
CVE-2018-14923 | High | 7.8 | 2018-08-03 | A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a targeted system via video playback. |
CVE-2018-5490 | High | 8.8 | 2018-08-03 | Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" a… |
CVE-2018-14912 | High | 7.5 | 2018-08-03 | cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cg… |
CVE-2018-14911 | High | 7.2 | 2018-08-03 | A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker… |
CVE-2018-14910 | High | 8.8 | 2018-08-03 | SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address (aka ip) to /admin/admin_ip.php (aka /adm1n/admin_ip.php). The code is e… |
CVE-2018-7748 | High | 8.8 | 2018-08-03 | report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in… |
CVE-2018-14908 | High | 8.8 | 2018-08-03 | Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for… |
CVE-2018-14907 | Medium | 5.3 | 2018-08-03 | The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discover… |
CVE-2018-14906 | Medium | 6.1 | 2018-08-03 | The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters. |
CVE-2018-14905 | Medium | 6.1 | 2018-08-03 | The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter. |
CVE-2018-14904 | Medium | 6.1 | 2018-08-03 | Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFw_pid. |
CVE-2018-14728 | Critical | 9.8 | 2018-08-03 | upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter. |
CVE-2018-14715 | High | 7.5 | 2018-08-03 | The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old bl… |
CVE-2018-14576 | High | 7.5 | 2018-08-03 | The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable. |
CVE-2018-14504 | Medium | 6.1 | 2018-08-03 | An issue was discovered in manage_filter_edit_page.php in MantisBT 2.x through 2.15.0. A cross-site scripting (XSS) vulnerability in the Edit Filter page allow… |
CVE-2018-13055 | Medium | 6.1 | 2018-08-03 | A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) in MantisBT 2.1.0 through 2.15.0 allows remote attackers to inject… |
CVE-2018-12989 | Medium | 6.7 | 2018-08-03 | The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Ex… |
CVE-2018-12607 | Medium | 5.4 | 2018-08-03 | An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The charts feature cont… |
CVE-2018-12606 | Medium | 5.4 | 2018-08-03 | An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The wiki contains a per… |
CVE-2018-12605 | Medium | 5.4 | 2018-08-03 | An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'url_for' contained a XSS issue due to it allowin… |
CVE-2018-14774 | High | 7.2 | 2018-08-03 | An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13… |
CVE-2018-14773 | Medium | 6.5 | 2018-08-03 | An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0… |
CVE-2018-14574 | Medium | 6.1 | 2018-08-03 | django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect. |
CVE-2018-13416 | Critical | 9.8 | 2018-08-03 | In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remo… |
CVE-2018-1524 | High | 8.8 | 2018-08-03 | IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could use to gain administrator access to th… |
CVE-2018-6590 | Medium | 6.1 | 2018-08-03 | CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability. |
CVE-2018-5489 | Medium | 6.5 | 2018-08-03 | NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have been intended to be restricted to administ… |
CVE-2018-14884 | High | 7.5 | 2018-08-03 | An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentati… |
CVE-2018-14883 | High | 7.5 | 2018-08-03 | An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffe… |
CVE-2018-14877 | Medium | 5.4 | 2018-08-03 | An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page. |
CVE-2018-14876 | Medium | 5.5 | 2018-08-03 | An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can trigger a longjmp that leads to an uni… |
CVE-2018-14873 | Medium | 5.4 | 2018-08-03 | An issue was discovered in Rincewind 0.1. There is a cross-site scripting (XSS) vulnerability involving a p=account request to index.php and another file named… |
CVE-2018-14872 | High | 7.5 | 2018-08-03 | An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and another file named commonPages.php allows a… |
CVE-2018-14858 | High | 7.5 | 2018-08-02 | An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does not block private… |
CVE-2018-3834 | High | 7.4 | 2018-08-02 | An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via… |