2018 CVEs (page 96)
Page 96 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-14459 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store16 in helper.h. |
CVE-2018-14458 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store32 in helper.h. |
CVE-2018-14457 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::UpdateChunks in DLS.cpp. |
CVE-2018-14456 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::SaveString in DLS.cpp. |
CVE-2018-14455 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store32 in helper.h. |
CVE-2018-14454 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the function RIFF::Chunk::Read in RIFF.cpp. |
CVE-2018-14453 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store16 in helper.h. |
CVE-2018-14452 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "always assign the sample of the first dimension region of this region" feature… |
CVE-2018-14451 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in the function RIFF::Chunk::Read in RIFF.cpp. |
CVE-2018-14450 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "update dimension region's chunks" feature of the function gig::Region::UpdateCh… |
CVE-2018-14449 | High | 8.8 | 2018-07-20 | An issue was discovered in libgig 4.1.0. There is an out of bounds read in gig::File::UpdateChunks in gig.cpp. |
CVE-2018-14448 | Medium | 6.5 | 2018-07-20 | Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav. |
CVE-2018-14447 | High | 8.8 | 2018-07-20 | trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read. |
CVE-2018-14446 | High | 8.8 | 2018-07-20 | MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application cra… |
CVE-2018-14445 | Medium | 6.5 | 2018-07-20 | In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file. |
CVE-2018-14444 | High | 7.5 | 2018-07-20 | libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash. |
CVE-2018-14443 | Medium | 6.5 | 2018-07-20 | get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV). |
CVE-2018-14442 | Critical | 9.8 | 2018-07-20 | Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs. |
CVE-2018-8018 | Critical | 9.8 | 2018-07-20 | In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, wh… |
CVE-2018-14422 | Medium | 6.1 | 2018-07-20 | blog/index.php in SansCMS 0.7 has XSS via the q parameter. |
CVE-2018-14421 | High | 8.8 | 2018-07-20 | SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v_pic) to /admin/admin_video.php (aka /backend/admin_video.ph… |
CVE-2018-14420 | High | 8.8 | 2018-07-20 | MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?anyid=47&n=admin&c=ad… |
CVE-2018-14419 | Medium | 4.8 | 2018-07-20 | MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page. |
CVE-2018-14418 | Critical | 9.8 | 2018-07-20 | In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI. |
CVE-2018-14415 | Medium | 6.1 | 2018-07-20 | An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen. |
CVE-2018-14441 | Critical | 9.8 | 2018-07-20 | An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadAction_fileUpload.action allows arbitrary file upload, as de… |
CVE-2018-14440 | Critical | 9.8 | 2018-07-20 | An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeManageAction_queryNotice.action noticeInf… |
CVE-2018-14439 | High | 7.5 | 2018-07-20 | espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four digits after the decimal point, which mi… |
CVE-2018-14438 | High | 7.5 | 2018-07-20 | In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attack… |
CVE-2018-14437 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c. |
CVE-2018-14436 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c. |
CVE-2018-14435 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c. |
CVE-2018-14434 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c. |
CVE-2018-10870 | Critical | 9.8 | 2018-07-19 | redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potenti… |
CVE-2018-10869 | High | 7.5 | 2018-07-19 | redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by th… |
CVE-2018-14336 | High | 7.5 | 2018-07-19 | TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses. |
CVE-2018-12959 | High | 7.5 | 2018-07-19 | The approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all… |
CVE-2018-9062 | Medium | 6.8 | 2018-07-19 | In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code. |
CVE-2018-3871 | High | 7.8 | 2018-07-19 | An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the applic… |
CVE-2018-3870 | High | 7.8 | 2018-07-19 | An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the applic… |
CVE-2018-3860 | High | 7.8 | 2018-07-19 | An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the appl… |
CVE-2018-3859 | High | 7.8 | 2018-07-19 | An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the appl… |
CVE-2018-3858 | High | 7.8 | 2018-07-19 | An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the applicatio… |
CVE-2018-3857 | High | 7.8 | 2018-07-19 | An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the applicatio… |
CVE-2018-14423 | High | 7.5 | 2018-07-19 | Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote atta… |
CVE-2018-10620 | Critical | 9.8 | 2018-07-19 | AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to expl… |
CVE-2018-7602 | Critical | 9.8 | 2018-07-19 | A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vec… |
CVE-2018-14332 | Medium | 5.5 | 2018-07-19 | An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference… |
CVE-2018-5540 | Medium | 4.4 | 2018-07-19 | On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Clo… |
CVE-2018-5535 | High | 7.5 | 2018-07-19 | On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated… |
CVE-2018-5534 | High | 7.5 | 2018-07-19 | Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward pr… |
CVE-2018-5533 | High | 7.5 | 2018-07-19 | Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic. |
CVE-2018-5532 | Medium | 5.3 | 2018-07-19 | On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache… |
CVE-2018-1587 | Medium | 4.3 | 2018-07-19 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 throu… |
CVE-2018-1585 | Medium | 5.4 | 2018-07-19 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 throu… |
CVE-2018-1536 | Medium | 5.4 | 2018-07-19 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 throu… |
CVE-2018-1535 | Medium | 5.4 | 2018-07-19 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 throu… |
CVE-2018-1529 | Medium | 5.4 | 2018-07-19 | IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 through 5.0.2 are vulnerable to cross-site s… |
CVE-2018-14404 | Medium | 6.5 | 2018-07-19 | A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression… |
CVE-2018-12911 | Critical | 9.8 | 2018-07-19 | WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and… |
CVE-2018-14403 | Critical | 9.8 | 2018-07-19 | MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The r… |
CVE-2018-14402 | High | 7.5 | 2018-07-19 | axmldec 1.2.0 has an out-of-bounds write in the jitana::axml_parser::parse_start_namespace function in lib/jitana/util/axml_parser.cpp. |
CVE-2018-14401 | High | 7.5 | 2018-07-19 | CopyData in AxmlParser.c in AXML Parser through 2018-01-04 has an out-of-bounds read. |
CVE-2018-14399 | Critical | 9.8 | 2018-07-19 | libs\classes\attachment.class.php in PHPCMS 9.6.0 allows remote attackers to upload and execute arbitrary PHP code via a .txt?.php#.jpg URI in the SRC attribut… |
CVE-2018-14395 | Medium | 6.5 | 2018-07-19 | libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user cra… |
CVE-2018-14394 | Medium | 6.5 | 2018-07-19 | libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user craf… |
CVE-2018-14392 | Medium | 6.1 | 2018-07-19 | The New Threads plugin before 1.2 for MyBB has XSS. |
CVE-2018-14370 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking… |
CVE-2018-14369 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by veri… |
CVE-2018-14368 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/diss… |
CVE-2018-14367 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checki… |
CVE-2018-14344 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by valida… |
CVE-2018-14343 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by en… |
CVE-2018-14342 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/… |
CVE-2018-14341 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissec… |
CVE-2018-14340 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zli… |
CVE-2018-14339 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by addi… |
CVE-2018-0403 | Critical | 9.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote att… |
CVE-2018-0402 | High | 8.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote att… |
CVE-2018-0401 | Medium | 6.1 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote att… |
CVE-2018-0400 | Medium | 6.1 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote att… |
CVE-2018-0399 | Critical | 9.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext passwor… |
CVE-2018-0398 | Critical | 9.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side reques… |
CVE-2018-0396 | Medium | 6.1 | 2018-07-18 | A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker… |
CVE-2018-0394 | High | 8.8 | 2018-07-18 | A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to obtain restricted shell acces… |
CVE-2018-0393 | Medium | 6.5 | 2018-07-18 | A Read-Only User Effect Change vulnerability in the Policy Builder interface of Cisco Policy Suite could allow an authenticated, remote attacker to make policy… |
CVE-2018-0392 | Medium | 5.5 | 2018-07-18 | A vulnerability in the CLI of Cisco Policy Suite could allow an authenticated, local attacker to access files owned by another user. The vulnerability is due t… |
CVE-2018-0390 | Medium | 6.1 | 2018-07-18 | A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based (DOM-based) cross-… |
CVE-2018-0387 | High | 8.8 | 2018-07-18 | A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, po… |
CVE-2018-0380 | Medium | 5.5 | 2018-07-18 | Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attac… |
CVE-2018-0379 | High | 7.8 | 2018-07-18 | Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attac… |
CVE-2018-0377 | Critical | 9.8 | 2018-07-18 | A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before 18.1.0 could allow an unauthenticated, remote attacker to… |
CVE-2018-0376 | Critical | 9.8 | 2018-07-18 | A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Policy Builde… |
CVE-2018-0375 | Critical | 9.8 | 2018-07-18 | A vulnerability in the Cluster Manager of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to log in to an affected system usin… |
CVE-2018-0374 | Critical | 9.8 | 2018-07-18 | A vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to connect directly to the P… |
CVE-2018-0372 | High | 7.5 | 2018-07-18 | A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure (ACI) Mode could allow an unauthenti… |
CVE-2018-0351 | High | 7.8 | 2018-07-18 | A vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that… |
CVE-2018-0350 | High | 8.8 | 2018-07-18 | A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that… |
CVE-2018-0349 | Critical | 9.8 | 2018-07-18 | A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of a… |
CVE-2018-0348 | High | 7.2 | 2018-07-18 | A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root… |