CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In October 2018

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
151 CVE-2018-18546 89 Sql 2018-10-20 2018-12-04
7.5
None Remote Low Not required Partial Partial Partial
ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the key variable.
152 CVE-2018-18545 79 XSS 2018-10-20 2018-12-04
4.3
None Remote Medium Not required None Partial None
Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.
153 CVE-2018-18544 772 2018-10-20 2019-10-02
4.3
None Remote Medium Not required None None Partial
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.
154 CVE-2018-18541 20 2018-10-20 2019-07-23
5.0
None Remote Low Not required None None Partial
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download packets.
155 CVE-2018-18540 79 XSS 2018-10-20 2018-12-04
4.3
None Remote Medium Not required None Partial None
TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL.
156 CVE-2018-18531 Bypass 2018-10-19 2018-10-19
0.0
None ??? ??? ??? ??? ??? ???
text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random (rather than SecureRandom) function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force approach.
157 CVE-2018-18530 89 Sql 2018-10-19 2018-12-04
7.5
None Remote Low Not required Partial Partial Partial
ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI.
158 CVE-2018-18529 89 Sql 2018-10-19 2018-12-04
7.5
None Remote Low Not required Partial Partial Partial
ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI.
159 CVE-2018-18527 89 Sql 2018-10-19 2018-12-04
7.5
None Remote Low Not required Partial Partial Partial
OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.
160 CVE-2018-18521 369 DoS 2018-10-19 2019-06-10
4.3
None Remote Medium Not required None None Partial
Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero sh_entsize is mishandled.
161 CVE-2018-18520 119 DoS Overflow 2018-10-19 2019-06-10
4.3
None Remote Medium Not required None None Partial
An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-size is intended to support ar files inside ar files, handle_ar in size.c closes the outer ar file before handling all inner entries. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file.
162 CVE-2018-18517 79 XSS 2018-10-24 2018-12-06
3.5
None Remote Medium Single system None Partial None
Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS.
163 CVE-2018-18488 89 Sql 2018-10-18 2018-11-30
7.5
None Remote Low Not required Partial Partial Partial
In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter.
164 CVE-2018-18487 200 +Info 2018-10-18 2018-11-30
5.0
None Remote Low Not required Partial None None
In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in predictable database backup file locations.
165 CVE-2018-18486 89 Sql 2018-10-18 2018-12-03
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del user_id[] parameter.
166 CVE-2018-18485 22 Dir. Trav. 2018-10-18 2019-01-08
6.4
None Remote Low Not required None Partial Partial
An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock.
167 CVE-2018-18484 400 2018-10-18 2018-12-29
4.3
None Remote Medium Not required None None Partial
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack consumption problem caused by recursive stack frames: cplus_demangle_type, d_bare_function_type, d_function_type.
168 CVE-2018-18483 190 DoS Overflow 2018-10-18 2018-12-29
6.8
None Remote Medium Not required Partial Partial Partial
The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.
169 CVE-2018-18482 772 DoS 2018-10-18 2019-10-02
4.3
None Remote Medium Not required None None Partial
An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service.
170 CVE-2018-18481 125 2018-10-18 2018-12-03
4.3
None Remote Medium Not required None None Partial
A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadCHAR function in lib/dwg/io.cpp, resulting in an application crash.
171 CVE-2018-18480 125 2018-10-18 2018-12-03
4.3
None Remote Medium Not required None None Partial
A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash.
172 CVE-2018-18478 79 XSS 2018-10-18 2018-12-04
4.3
None Remote Medium Not required None Partial None
Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboard_name parameter in the /ajax_form.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and html/includes/forms/edit-dashboard.inc.php.
173 CVE-2018-18476 89 Sql 2018-10-24 2018-12-13
7.5
None Remote Low Not required Partial Partial Partial
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.
174 CVE-2018-18475 434 2018-10-23 2018-12-04
7.5
None Remote Low Not required Partial Partial Partial
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.
175 CVE-2018-18467 20 2018-10-23 2019-01-23
5.0
None Remote Low Not required None Partial None
An issue was discovered in Daniel Gultsch Conversations 2.3.4. It is possible to spoof a custom message to an existing opened conversation by sending an intent.
176 CVE-2018-18461 94 Exec Code 2018-10-18 2018-11-30
7.5
None Remote Low Not required Partial Partial Partial
The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary code via PHP code in attachments[] data to models/attachment.php.
177 CVE-2018-18460 79 XSS 2018-10-18 2018-11-30
4.3
None Remote Medium Not required None Partial None
XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the modules/gdpr.php term parameter in a wp-admin/admin.php wplivechat-menu-gdpr-page request.
178 CVE-2018-18459 476 DoS 2018-10-18 2018-11-30
4.3
None Remote Medium Not required None None Partial
The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
179 CVE-2018-18458 476 DoS 2018-10-18 2018-11-30
4.3
None Remote Medium Not required None None Partial
The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
180 CVE-2018-18457 476 DoS 2018-10-18 2018-11-30
4.3
None Remote Medium Not required None None Partial
The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
181 CVE-2018-18456 125 DoS 2018-10-18 2018-11-30
4.3
None Remote Medium Not required None None Partial
The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
182 CVE-2018-18455 125 DoS 2018-10-18 2018-11-30
4.3
None Remote Medium Not required None None Partial
The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
183 CVE-2018-18454 125 DoS 2018-10-18 2019-10-02
4.3
None Remote Medium Not required None None Partial
CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
184 CVE-2018-18450 89 Sql 2018-10-17 2018-12-18
7.5
None Remote Low Not required Partial Partial Partial
apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI.
185 CVE-2018-18445 125 2018-10-17 2019-04-08
7.2
None Local Low Not required Complete Complete Complete
In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.
186 CVE-2018-18444 787 2018-10-17 2019-09-23
6.8
None Remote Medium Not required Partial Partial Partial
makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact.
187 CVE-2018-18443 772 2018-10-17 2019-10-02
4.3
None Remote Medium Not required None None Partial
OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview.
188 CVE-2018-18438 190 Overflow 2018-10-19 2019-04-22
2.1
None Local Low Not required None None Partial
Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.
189 CVE-2018-18437 79 XSS 2018-10-23 2018-12-04
4.3
None Remote Medium Not required None Partial None
In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc parameter.
190 CVE-2018-18436 352 CSRF 2018-10-17 2018-11-30
6.8
None Remote Medium Not required Partial Partial Partial
JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI.
191 CVE-2018-18434 22 Dir. Trav. 2018-10-17 2018-11-29
5.0
None Remote Low Not required Partial None None
An issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory traversal in linlinjava/litemall/wx/web/WxStorageController.java in the litemall-wx-api component.
192 CVE-2018-18433 79 XSS 2018-10-17 2018-11-29
3.5
None Remote Medium Single system None Partial None
An issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the category[catname] parameter to the admin.php URI.
193 CVE-2018-18432 352 CSRF 2018-10-17 2018-11-29
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in DESTOON B2B 7.0. CSRF exists via the admin.php URI in an action=add request.
194 CVE-2018-18431 79 XSS 2018-10-17 2018-11-29
3.5
None Remote Medium Single system None Partial None
An issue was discovered in DESTOON B2B 7.0. XSS exists via certain text boxes to the admin.php?moduleid=2&action=add URI.
195 CVE-2018-18430 79 XSS 2018-10-17 2018-11-29
3.5
None Remote Medium Single system None Partial None
An issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box to the admin.php URI.
196 CVE-2018-18428 200 +Info 2018-10-19 2019-01-23
5.0
None Remote Low Not required Partial None None
TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg URI.
197 CVE-2018-18427 89 Sql 2018-10-17 2018-12-03
7.5
None Remote Low Not required Partial Partial Partial
s-cms 3.0 allows SQL Injection via the member/post.php 0_id parameter or the POST data to member/member_login.php.
198 CVE-2018-18426 94 Exec Code 2018-10-17 2018-12-03
9.0
None Remote Low Single system Complete Complete Complete
s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter.
199 CVE-2018-18422 352 CSRF 2018-10-17 2018-11-30
6.8
None Remote Medium Not required Partial Partial Partial
UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI.
200 CVE-2018-18420 352 CSRF 2018-10-19 2018-12-04
6.8
None Remote Medium Not required Partial Partial Partial
Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.
Total number of vulnerabilities : 1473   Page : 1 2 3 4 (This Page)5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.