CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 6 and 6.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1601 CVE-2018-6700 426 Exec Code 2018-09-24 2018-11-20
6.8
None Remote Medium Not required Partial Partial Partial
DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local users to execute arbitrary code via specially crafted malware.
1602 CVE-2018-6678 77 Exec Code 2018-07-23 2018-09-19
6.5
None Remote Low Single system Partial Partial Partial
Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors.
1603 CVE-2018-6664 284 Bypass 2018-05-25 2018-06-27
6.5
None Remote Low Single system Partial Partial Partial
Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.
1604 CVE-2018-6661 426 +Priv 2018-04-02 2018-05-15
6.8
None Remote Medium Not required Partial Partial Partial
DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature.
1605 CVE-2018-6654 284 2018-02-05 2018-03-13
6.8
None Remote Medium Not required Partial Partial Partial
The Grammarly extension before 2018-02-02 for Chrome allows remote attackers to discover authentication tokens via an 'action: "user"' request to iframe.gr_-ifr, because the exposure of these tokens is not restricted to any specific web site.
1606 CVE-2018-6635 310 Bypass 2018-02-05 2018-03-13
6.0
None Remote Medium Single system Partial Partial Partial
System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote attackers to bypass intended Remote Method Invocation (RMI) restrictions, aka SMGR-26896.
1607 CVE-2018-6633 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000038.
1608 CVE-2018-6632 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000110.
1609 CVE-2018-6631 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110009.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000170.
1610 CVE-2018-6630 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000014c.
1611 CVE-2018-6629 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000118.
1612 CVE-2018-6628 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000010c.
1613 CVE-2018-6627 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002054.
1614 CVE-2018-6626 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000035.
1615 CVE-2018-6625 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002010.
1616 CVE-2018-6623 264 Exec Code 2018-03-12 2018-04-11
6.5
None Remote Low Single system Partial Partial Partial
An issue was discovered in Hola 1.79.859. An unprivileged user could modify or overwrite the executable with arbitrary code, which would be executed the next time the service is started. Depending on the user that the service runs as, this could result in privilege escalation. The issue exists because of the SERVICE_ALL_ACCESS access right for the hola_svc and hola_updater services.
1617 CVE-2018-6611 125 2018-02-04 2018-02-26
6.8
None Remote Medium Not required Partial Partial Partial
soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file.
1618 CVE-2018-6596 200 +Info 2018-02-03 2018-03-02
6.4
None Remote Low Not required Partial Partial None
webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK_AUTHORIZATION secret, which allows remote attackers to post arbitrary e-mail tracking events.
1619 CVE-2018-6563 352 CSRF 2018-06-20 2018-10-09
6.8
None Remote Medium Not required Partial Partial Partial
Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to hijack the authentication of users for requests that (1) change user settings, (2) send emails, or (3) change contact information by leveraging lack of an anti-CSRF token.
1620 CVE-2018-6543 190 DoS Overflow 2018-02-02 2018-11-27
6.8
None Remote Medium Not required Partial Partial Partial
In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
1621 CVE-2018-6525 20 DoS 2018-02-01 2018-02-21
6.1
None Local Low Not required Partial Partial Complete
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220458.
1622 CVE-2018-6524 20 DoS 2018-02-01 2018-02-21
6.1
None Local Low Not required Partial Partial Complete
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220c20.
1623 CVE-2018-6523 20 DoS 2018-02-01 2018-02-21
6.1
None Local Low Not required Partial Partial Complete
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c.
1624 CVE-2018-6522 20 DoS 2018-02-01 2018-02-21
6.1
None Local Low Not required Partial Partial Complete
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220408.
1625 CVE-2018-6516 264 2018-06-14 2018-08-22
6.8
None Remote Medium Not required Partial Partial Partial
On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation.
1626 CVE-2018-6515 20 2018-06-11 2018-08-02
6.8
None Remote Medium Not required Partial Partial Partial
Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted configuration file an attacker could get pxp-agent to load arbitrary code with privilege escalation.
1627 CVE-2018-6514 426 2018-06-11 2018-08-02
6.8
None Remote Medium Not required Partial Partial Partial
In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation.
1628 CVE-2018-6513 264 2018-06-11 2018-08-01
6.5
None Remote Low Single system Partial Partial Partial
Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2, were vulnerable to an attack where an unprivileged user on Windows agents could write custom facts that can escalate privileges on the next puppet run. This was possible through the loading of shared libraries from untrusted paths.
1629 CVE-2018-6508 134 2018-02-09 2018-05-24
6.0
None Remote Medium Single system Partial Partial Partial
Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or puppet_conf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this vulnerability.
1630 CVE-2018-6504 352 CSRF 2018-09-20 2018-11-08
6.8
None Remote Medium Not required Partial Partial Partial
A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF).
1631 CVE-2018-6503 284 2018-09-20 2018-11-08
6.8
None Remote Low Single system Complete None None
A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls.
1632 CVE-2018-6497 352 CSRF 2018-06-15 2018-08-11
6.8
None Remote Medium Not required Partial Partial Partial
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 and CMS Server version 2018.05 BACKGROUND which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
1633 CVE-2018-6496 352 CSRF 2018-06-15 2018-08-14
6.8
None Remote Medium Not required Partial Partial Partial
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
1634 CVE-2018-6493 89 Sql 2018-05-22 2018-06-25
6.5
None Remote Low Single system Partial Partial Partial
SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection.
1635 CVE-2018-6480 704 2018-01-31 2018-02-21
6.8
None Remote Medium Not required Partial Partial Partial
A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature (which, for example, helped with loop prevention). ccnl_fwd_handleInterest assumes that the union member s is of type ccnl_pktdetail_ndntlv_s. However, if the type is in fact struct ccnl_pktdetail_ccntlv_s or struct ccnl_pktdetail_iottlv_s, the memory at that point is either uninitialised or points to data that is not a nonce, which renders the code using the local variable nonce pointless. A later nonce check is insufficient.
1636 CVE-2018-6474 20 DoS 2018-01-31 2018-02-13
6.1
None Local Low Not required Partial Partial Complete
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402148.
1637 CVE-2018-6473 20 DoS 2018-01-31 2018-02-13
6.1
None Local Low Not required Partial Partial Complete
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402080.
1638 CVE-2018-6472 20 DoS 2018-01-31 2018-02-13
6.1
None Local Low Not required Partial Partial Complete
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40204c.
1639 CVE-2018-6471 20 DoS 2018-01-31 2018-02-13
6.1
None Local Low Not required Partial Partial Complete
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402078.
1640 CVE-2018-6467 352 CSRF 2018-02-06 2018-02-28
6.8
None Remote Medium Not required Partial Partial Partial
The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php.
1641 CVE-2018-6462 19 Exec Code 2018-01-31 2018-09-05
6.8
None Remote Medium Not required Partial Partial Partial
Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.
1642 CVE-2018-6458 352 CSRF 2018-05-11 2018-06-13
6.8
None Remote Medium Not required Partial Partial Partial
Easy Hosting Control Panel (EHCP) v0.37.12.b allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging lack of CSRF protection.
1643 CVE-2018-6442 77 Exec Code 2018-11-08 2018-12-12
6.5
None Remote Low Single system Partial Partial Partial
A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute arbitrary commands.
1644 CVE-2018-6408 352 CSRF 2018-01-30 2018-02-27
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. CSRF exists in hy-cgi/user.cgi, as demonstrated by changing an administrator password or adding a new administrator account.
1645 CVE-2018-6406 119 DoS Overflow +Info 2018-01-30 2018-02-22
6.8
None Remote Medium Not required Partial Partial Partial
The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service (heap-based buffer over-read and later out-of-bounds write), or possibly have unspecified other impact.
1646 CVE-2018-6393 89 Sql 2018-01-29 2018-02-15
6.5
None Remote Low Single system Partial Partial Partial
** DISPUTED ** FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2) allow post-authentication SQL injection via the order parameter. NOTE: the vendor disputes this issue because it is intentional that a user can "directly modify SQL tables ... [or] run shell scripts ... once ... logged in to the administration interface; there is no need to try to find input validation errors."
1647 CVE-2018-6391 352 CSRF 2018-01-29 2018-02-14
6.8
None Remote Medium Not required Partial Partial Partial
A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings.
1648 CVE-2018-6383 184 Exec Code 2018-01-29 2018-02-21
6.5
None Remote Low Single system Partial Partial Partial
Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php (and similar) file extensions but not the .pht or .phar extension, which allows remote authenticated Admins or Editors to execute arbitrary PHP code by uploading a file, a different vulnerability than CVE-2017-18048.
1649 CVE-2018-6374 295 2018-01-31 2018-02-24
6.4
None Remote Low Not required None Partial Partial
The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set.
1650 CVE-2018-6360 20 Exec Code 2018-01-27 2018-10-21
6.8
None Remote Medium Not required Partial Partial Partial
mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and accepts arbitrary URLs in a src attribute without a protocol whitelist in player/lua/ytdl_hook.lua. For example, an av://lavfi:ladspa=file= URL signifies that the product should call dlopen on a shared object file located at an arbitrary local pathname. The issue exists because the product does not consider that youtube-dl can provide a potentially unsafe URL.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.