2018 CVEs (page 97)
Page 97 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0347 | High | 7.8 | 2018-07-18 | A vulnerability in the Zero Touch Provisioning (ZTP) subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary co… |
CVE-2018-0346 | High | 7.5 | 2018-07-18 | A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of servic… |
CVE-2018-0345 | High | 8.8 | 2018-07-18 | A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary co… |
CVE-2018-0344 | High | 7.2 | 2018-07-18 | A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacke… |
CVE-2018-0343 | High | 8.8 | 2018-07-18 | A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary cod… |
CVE-2018-0342 | Medium | 6.7 | 2018-07-18 | A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code… |
CVE-2018-14389 | Critical | 9.8 | 2018-07-18 | joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter. |
CVE-2018-14388 | Medium | 5.4 | 2018-07-18 | joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can_search_device array parameter. |
CVE-2018-14387 | High | 8.8 | 2018-07-18 | An issue was discovered in WonderCMS before 2.5.2. An attacker can create a new session on a web application and record the associated session identifier. The… |
CVE-2018-14364 | Critical | 9.8 | 2018-07-18 | GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant… |
CVE-2018-7546 | Medium | 5.5 | 2018-07-18 | wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file. |
CVE-2018-14082 | Medium | 5.4 | 2018-07-18 | PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 has Cross-site Scripting (XSS) via the search bar. |
CVE-2018-12429 | Medium | 5.4 | 2018-07-18 | JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie. |
CVE-2018-8042 | High | 8.1 | 2018-07-18 | Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store… |
CVE-2018-14382 | Medium | 6.1 | 2018-07-18 | InstantCMS 2.10.1 has /redirect?url= XSS. |
CVE-2018-14381 | Medium | 6.1 | 2018-07-18 | Pagekit before 1.0.14 has a /user/login?redirect= open redirect vulnerability. |
CVE-2018-14380 | Medium | 6.1 | 2018-07-18 | In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/QueryInput.ts. |
CVE-2018-10877 | High | 7.3 | 2018-07-18 | Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image. |
CVE-2018-10616 | High | 7.8 | 2018-07-18 | ABB Panel Builder 800 all versions has an improper input validation vulnerability which may allow an attacker to insert and run arbitrary code on a computer wh… |
CVE-2018-8011 | High | 7.5 | 2018-07-18 | By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be used… |
CVE-2018-5232 | Medium | 6.1 | 2018-07-18 | The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arbitrary HTM… |
CVE-2018-3105 | Medium | 4.3 | 2018-07-18 | Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Health Care FastPath). Supported versions that are affected are 11.1… |
CVE-2018-3104 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3103 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3102 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3101 | Medium | 5.3 | 2018-07-18 | Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: Portlet Services). Supported versions that are affected are 1… |
CVE-2018-3100 | Critical | 9.1 | 2018-07-18 | Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: Process Analysis & Discovery). Supported ver… |
CVE-2018-3099 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3098 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3097 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3096 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3095 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3094 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3093 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3092 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3091 | Medium | 6.3 | 2018-07-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. E… |
CVE-2018-3090 | High | 8.6 | 2018-07-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. E… |
CVE-2018-3089 | High | 8.6 | 2018-07-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. E… |
CVE-2018-3088 | High | 8.6 | 2018-07-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. E… |
CVE-2018-3087 | High | 8.6 | 2018-07-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. E… |
CVE-2018-3086 | High | 8.6 | 2018-07-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. E… |
CVE-2018-3085 | High | 8.5 | 2018-07-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. E… |
CVE-2018-3084 | Low | 2.8 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell: Core / Client). Supported versions that are affected are 8.0.11 and prior. Ea… |
CVE-2018-3082 | Low | 2.7 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily expl… |
CVE-2018-3081 | Medium | 5.0 | 2018-07-18 | Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.60 and prior, 5.6.40… |
CVE-2018-3080 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily expl… |
CVE-2018-3079 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.11 and prior. Easily exploitab… |
CVE-2018-3078 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily expl… |
CVE-2018-3077 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 a… |
CVE-2018-3076 | Low | 2.7 | 2018-07-18 | Vulnerability in the PeopleSoft Enterprise CS Financial Aid component of Oracle PeopleSoft Products (subcomponent: ISIR Processing). Supported versions that ar… |
CVE-2018-3075 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.11 and p… |
CVE-2018-3074 | Medium | 5.3 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.11 and prior… |
CVE-2018-3073 | Medium | 6.5 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.11 and prior. Easil… |
CVE-2018-3072 | Medium | 5.3 | 2018-07-18 | Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). The supported version that is affected is 9.2… |
CVE-2018-3071 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log). Supported versions that are affected are 5.7.22 and prior. Easily exploi… |
CVE-2018-3070 | Medium | 6.5 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.60 and prior, 5.6.40… |
CVE-2018-3069 | Low | 2.7 | 2018-07-18 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: Installation). The su… |
CVE-2018-3068 | Medium | 6.1 | 2018-07-18 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products (subcomponent: Compensation). The supported version that… |
CVE-2018-3067 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.11 and prior. Eas… |
CVE-2018-3066 | Low | 3.3 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40… |
CVE-2018-3065 | Medium | 6.5 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior and 8.0.11 a… |
CVE-2018-3064 | High | 7.1 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior… |
CVE-2018-3063 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and p… |
CVE-2018-3062 | Medium | 5.3 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.40 and prior, 5.7.2… |
CVE-2018-3061 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior. Easily expl… |
CVE-2018-3060 | Medium | 6.5 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and pr… |
CVE-2018-3058 | Medium | 4.3 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior… |
CVE-2018-3057 | High | 8.2 | 2018-07-18 | Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version th… |
CVE-2018-3056 | Medium | 4.3 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.22 and p… |
CVE-2018-3055 | High | 7.1 | 2018-07-18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. E… |
CVE-2018-3054 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 a… |
CVE-2018-3053 | Medium | 6.4 | 2018-07-18 | Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Internal Operations)… |
CVE-2018-3052 | Medium | 6.4 | 2018-07-18 | Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affect… |
CVE-2018-3051 | High | 8.1 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2018-3050 | High | 8.1 | 2018-07-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-3049 | Medium | 5.4 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2018-3048 | Medium | 5.4 | 2018-07-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-3047 | Medium | 5.3 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2018-3046 | Medium | 5.3 | 2018-07-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-3045 | Medium | 5.4 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2018-3044 | Medium | 5.4 | 2018-07-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-3043 | Medium | 5.4 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2018-3042 | Medium | 5.4 | 2018-07-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-3041 | Medium | 6.5 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2018-3040 | Medium | 6.5 | 2018-07-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-3039 | Medium | 5.3 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2018-3038 | Medium | 5.3 | 2018-07-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-3037 | Medium | 6.3 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2018-3036 | Medium | 6.3 | 2018-07-18 | Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that… |
CVE-2018-3035 | High | 8.1 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions… |
CVE-2018-3034 | Medium | 5.4 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions… |
CVE-2018-3033 | Medium | 5.3 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions… |
CVE-2018-3032 | Medium | 5.4 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions… |
CVE-2018-3031 | Medium | 5.4 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions… |
CVE-2018-3030 | Medium | 6.5 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions… |
CVE-2018-3029 | Medium | 5.3 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions… |
CVE-2018-3028 | Medium | 6.3 | 2018-07-18 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions… |
CVE-2018-3027 | High | 8.1 | 2018-07-18 | Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are aff… |
CVE-2018-3026 | Medium | 5.4 | 2018-07-18 | Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are aff… |
CVE-2018-3025 | Medium | 5.3 | 2018-07-18 | Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are aff… |