CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 6 and 6.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
2151 CVE-2018-6769 20 DoS 2018-02-06 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008020.
2152 CVE-2018-6768 20 DoS 2018-02-06 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008090.
2153 CVE-2018-6767 119 Overflow 2018-02-06 2018-03-15
6.8
None Remote Medium Not required Partial Partial Partial
A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a maliciously crafted RF64 file.
2154 CVE-2018-6700 426 Exec Code 2018-09-24 2018-11-20
6.8
None Remote Medium Not required Partial Partial Partial
DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local users to execute arbitrary code via specially crafted malware.
2155 CVE-2018-6678 77 Exec Code 2018-07-23 2018-09-19
6.5
None Remote Low Single system Partial Partial Partial
Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors.
2156 CVE-2018-6664 284 Bypass 2018-05-25 2018-06-27
6.5
None Remote Low Single system Partial Partial Partial
Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.
2157 CVE-2018-6661 426 +Priv 2018-04-02 2018-05-15
6.8
None Remote Medium Not required Partial Partial Partial
DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature.
2158 CVE-2018-6654 284 2018-02-05 2018-03-13
6.8
None Remote Medium Not required Partial Partial Partial
The Grammarly extension before 2018-02-02 for Chrome allows remote attackers to discover authentication tokens via an 'action: "user"' request to iframe.gr_-ifr, because the exposure of these tokens is not restricted to any specific web site.
2159 CVE-2018-6635 310 Bypass 2018-02-05 2018-03-13
6.0
None Remote Medium Single system Partial Partial Partial
System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote attackers to bypass intended Remote Method Invocation (RMI) restrictions, aka SMGR-26896.
2160 CVE-2018-6633 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000038.
2161 CVE-2018-6632 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000110.
2162 CVE-2018-6631 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110009.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000170.
2163 CVE-2018-6630 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000014c.
2164 CVE-2018-6629 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000118.
2165 CVE-2018-6628 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000010c.
2166 CVE-2018-6627 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002054.
2167 CVE-2018-6626 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000035.
2168 CVE-2018-6625 20 DoS 2018-02-05 2018-02-22
6.1
None Local Low Not required Partial Partial Complete
In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002010.
2169 CVE-2018-6623 264 Exec Code 2018-03-12 2018-04-11
6.5
None Remote Low Single system Partial Partial Partial
An issue was discovered in Hola 1.79.859. An unprivileged user could modify or overwrite the executable with arbitrary code, which would be executed the next time the service is started. Depending on the user that the service runs as, this could result in privilege escalation. The issue exists because of the SERVICE_ALL_ACCESS access right for the hola_svc and hola_updater services.
2170 CVE-2018-6611 125 2018-02-04 2018-02-26
6.8
None Remote Medium Not required Partial Partial Partial
soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file.
2171 CVE-2018-6596 200 +Info 2018-02-03 2018-03-02
6.4
None Remote Low Not required Partial Partial None
webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK_AUTHORIZATION secret, which allows remote attackers to post arbitrary e-mail tracking events.
2172 CVE-2018-6563 352 CSRF 2018-06-20 2018-10-09
6.8
None Remote Medium Not required Partial Partial Partial
Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to hijack the authentication of users for requests that (1) change user settings, (2) send emails, or (3) change contact information by leveraging lack of an anti-CSRF token.
2173 CVE-2018-6543 190 DoS Overflow 2018-02-02 2018-11-27
6.8
None Remote Medium Not required Partial Partial Partial
In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
2174 CVE-2018-6525 20 DoS 2018-02-01 2018-02-21
6.1
None Local Low Not required Partial Partial Complete
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220458.
2175 CVE-2018-6524 20 DoS 2018-02-01 2018-02-21
6.1
None Local Low Not required Partial Partial Complete
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220c20.
2176 CVE-2018-6523 20 DoS 2018-02-01 2018-02-21
6.1
None Local Low Not required Partial Partial Complete
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c.
2177 CVE-2018-6522 20 DoS 2018-02-01 2018-02-21
6.1
None Local Low Not required Partial Partial Complete
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220408.
2178 CVE-2018-6516 264 2018-06-14 2018-08-22
6.8
None Remote Medium Not required Partial Partial Partial
On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation.
2179 CVE-2018-6515 20 2018-06-11 2018-08-02
6.8
None Remote Medium Not required Partial Partial Partial
Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted configuration file an attacker could get pxp-agent to load arbitrary code with privilege escalation.
2180 CVE-2018-6514 426 2018-06-11 2018-08-02
6.8
None Remote Medium Not required Partial Partial Partial
In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation.
2181 CVE-2018-6513 264 2018-06-11 2018-08-01
6.5
None Remote Low Single system Partial Partial Partial
Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2, were vulnerable to an attack where an unprivileged user on Windows agents could write custom facts that can escalate privileges on the next puppet run. This was possible through the loading of shared libraries from untrusted paths.
2182 CVE-2018-6508 134 2018-02-09 2018-05-24
6.0
None Remote Medium Single system Partial Partial Partial
Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or puppet_conf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this vulnerability.
2183 CVE-2018-6504 352 CSRF 2018-09-20 2018-11-08
6.8
None Remote Medium Not required Partial Partial Partial
A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF).
2184 CVE-2018-6503 284 2018-09-20 2018-11-08
6.8
None Remote Low Single system Complete None None
A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls.
2185 CVE-2018-6497 352 CSRF 2018-06-15 2018-08-11
6.8
None Remote Medium Not required Partial Partial Partial
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 and CMS Server version 2018.05 BACKGROUND which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
2186 CVE-2018-6496 352 CSRF 2018-06-15 2018-08-14
6.8
None Remote Medium Not required Partial Partial Partial
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
2187 CVE-2018-6493 89 Sql 2018-05-22 2018-06-25
6.5
None Remote Low Single system Partial Partial Partial
SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection.
2188 CVE-2018-6480 704 2018-01-31 2018-02-21
6.8
None Remote Medium Not required Partial Partial Partial
A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature (which, for example, helped with loop prevention). ccnl_fwd_handleInterest assumes that the union member s is of type ccnl_pktdetail_ndntlv_s. However, if the type is in fact struct ccnl_pktdetail_ccntlv_s or struct ccnl_pktdetail_iottlv_s, the memory at that point is either uninitialised or points to data that is not a nonce, which renders the code using the local variable nonce pointless. A later nonce check is insufficient.
2189 CVE-2018-6474 20 DoS 2018-01-31 2018-02-13
6.1
None Local Low Not required Partial Partial Complete
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402148.
2190 CVE-2018-6473 20 DoS 2018-01-31 2018-02-13
6.1
None Local Low Not required Partial Partial Complete
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402080.
2191 CVE-2018-6472 20 DoS 2018-01-31 2018-02-13
6.1
None Local Low Not required Partial Partial Complete
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40204c.
2192 CVE-2018-6471 20 DoS 2018-01-31 2018-02-13
6.1
None Local Low Not required Partial Partial Complete
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402078.
2193 CVE-2018-6467 352 CSRF 2018-02-06 2018-02-28
6.8
None Remote Medium Not required Partial Partial Partial
The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php.
2194 CVE-2018-6462 19 Exec Code 2018-01-31 2018-09-05
6.8
None Remote Medium Not required Partial Partial Partial
Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.
2195 CVE-2018-6458 352 CSRF 2018-05-11 2018-06-13
6.8
None Remote Medium Not required Partial Partial Partial
Easy Hosting Control Panel (EHCP) v0.37.12.b allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging lack of CSRF protection.
2196 CVE-2018-6442 77 Exec Code 2018-11-08 2018-12-12
6.5
None Remote Low Single system Partial Partial Partial
A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute arbitrary commands.
2197 CVE-2018-6408 352 CSRF 2018-01-30 2018-02-27
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. CSRF exists in hy-cgi/user.cgi, as demonstrated by changing an administrator password or adding a new administrator account.
2198 CVE-2018-6406 119 DoS Overflow +Info 2018-01-30 2018-02-22
6.8
None Remote Medium Not required Partial Partial Partial
The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service (heap-based buffer over-read and later out-of-bounds write), or possibly have unspecified other impact.
2199 CVE-2018-6393 89 Sql 2018-01-29 2019-04-16
6.5
None Remote Low Single system Partial Partial Partial
** DISPUTED ** FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2) allow post-authentication SQL injection via the order parameter. NOTE: the vendor disputes this issue because it is intentional that a user can "directly modify SQL tables ... [or] run shell scripts ... once ... logged in to the administration interface; there is no need to try to find input validation errors."
2200 CVE-2018-6391 352 CSRF 2018-01-29 2018-02-14
6.8
None Remote Medium Not required Partial Partial Partial
A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.