CVE-2018-10320: Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.
Published Apr 24, 2018 · Updated Aug 5, 2024
CVE archive
April 2018
Browse CVE records published in April 2018, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 1687 matching CVEs · Page 21 of 34.
CVE-2018-10361: An issue was discovered in KTextEditor 5.34.0 through 5.45.0.
An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauth_ktexteditor_helper service (as utilized in the Kate text editor) can allow other unprivileged users on the local system to gain root privileges. The attack occurs when one user (who has an unprivileged account but is also able to authenticate as root) writes a text file using Kate into a directory owned by a another unprivileged user. The latter unprivileged user conducts a symlink attack to achieve privilege escalation.
Published Apr 25, 2018 · Updated Aug 5, 2024
CVE-2018-10321: Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.
Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.
Published Apr 24, 2018 · Updated Aug 5, 2024
CVE-2018-10311: A vulnerability was discovered in WUZHI CMS 4.1.0.
A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tag[pinyin] parameter to the /index.php?m=tags&f=index&v=add URI.
Published Apr 24, 2018 · Updated Aug 5, 2024
CVE-2018-10318: Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.
Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.
Published Apr 24, 2018 · Updated Aug 5, 2024
CVE-2018-10319: Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.
Published Apr 24, 2018 · Updated Aug 5, 2024
CVE-2018-10301: Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium fo...
Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post.
Published Apr 23, 2018 · Updated Aug 5, 2024
CVE-2018-10310: A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK...
A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3.10 for WordPress that allows the execution of arbitrary HTML/script code in the context of a victim's browser.
Published Apr 25, 2018 · Updated Aug 5, 2024
CVE-2018-10305: The MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15 does not pr...
The MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15 does not properly use the possible_users variable in a query, which might allow attackers to bypass intended access restrictions.
Published Apr 24, 2018 · Updated Aug 5, 2024
CVE-2018-10299: An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem C...
An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), the Ethereum ERC20 token used in the Beauty Chain economic system, allows attackers to accomplish an unauthorized increase of digital assets by providing two _receivers arguments in conjunction with a large _value argument, as exploited in the wild in April 2018, aka the "batchOverflow" issue.
Published Apr 23, 2018 · Updated Aug 5, 2024
CVE-2018-10300: Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPr...
Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio.
Published Apr 23, 2018 · Updated Aug 5, 2024
CVE-2018-10188: phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related...
phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php.
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10266: BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list...
BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI.
Published Apr 21, 2018 · Updated Aug 5, 2024
CVE-2018-10265: An issue was discovered in HongCMS v3.0.0.
An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI.
Published Apr 21, 2018 · Updated Aug 5, 2024
CVE-2018-10220: Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter.
Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter. NOTE: the vendor indicates that this is intentional behavior because the product is a web application honeypot, and modules/handlers/emulators/rfi.py supports Remote File Inclusion emulation
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10242: Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner.
Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the allocated data because SSHParseBanner in app-layer-ssh.c lacks a length check.
Published Apr 4, 2019 · Updated Aug 5, 2024
CVE-2018-10237: Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to cond...
Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.
Published Apr 26, 2018 · Updated Aug 5, 2024
CVE-2018-10267: WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=add_pos...
WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=add_post URI.
Published Apr 21, 2018 · Updated Aug 5, 2024
CVE-2018-10295: ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.
ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.
Published Apr 22, 2018 · Updated Aug 5, 2024
CVE-2018-10244: Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU.
Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated data because DecodeENIPPDU in app-layer-enip-commmon.c has an integer overflow during a length check.
Published Apr 4, 2019 · Updated Aug 5, 2024
CVE-2018-10254: Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disas...
Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this vulnerability to cause a denial of service or possibly have unspecified other impact via a crafted ELF file.
Published Apr 21, 2018 · Updated Aug 5, 2024
CVE-2018-10238: bvlc.c in skarg BACnet Protocol Stack bacserv 0.9.1 and 0.8.5 is affected by a Buffer Overflow because of a...
bvlc.c in skarg BACnet Protocol Stack bacserv 0.9.1 and 0.8.5 is affected by a Buffer Overflow because of a lack of packet-size validation. The affected component is bacserv BACnet/IP BVLC forwarded NPDU. The function bvlc_bdt_forward_npdu() calls bvlc_encode_forwarded_npdu() which copies the content from the request into a local in the bvlc_bdt_forward_npdu() stack frame and clobbers the canary. The attack vector is: A BACnet/IP device with BBMD enabled based on this library connected to IP network. The fixed version is: 0.8.6.
Published Apr 20, 2018 · Updated Aug 5, 2024
CVE-2018-10243: htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-ba...
htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header.
Published Apr 4, 2019 · Updated Aug 5, 2024
CVE-2018-10285: The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms.
The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might bypass authentication.
Published Apr 22, 2018 · Updated Aug 5, 2024
CVE-2018-10286: The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin crede...
The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certain HTTP POST requests. In order to be able to see the credentials in cleartext, an attacker needs to be authenticated.
Published Apr 22, 2018 · Updated Aug 5, 2024
CVE-2018-10268: An issue was discovered in FastAdmin V1.0.0.20180417_beta.
An issue was discovered in FastAdmin V1.0.0.20180417_beta. There is XSS via the application\api\controller\User.php avatar parameter.
Published Apr 21, 2018 · Updated Aug 5, 2024
CVE-2018-10235: POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\a...
POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache['setting']['ucssocfg'] in diy\module\member\models\Member_model.php and write this code into the api/ucsso/config.php file.
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10205: hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the container_setup_modules and hyper_rescan_scsi fun...
hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the container_setup_modules and hyper_rescan_scsi functions in container.c, related to runV 1.0.0 for Docker.
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10253: Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.
Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.
Published Apr 21, 2018 · Updated Aug 5, 2024
CVE-2018-10201: An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11.
An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11. It is possible to read arbitrary files outside the root directory of the web server. This vulnerability could be exploited remotely by a crafted URL without credentials, with .../ or ...\ or ..../ or ....\ as a directory-traversal pattern to TCP port 8667.
Published Apr 20, 2018 · Updated Aug 5, 2024
CVE-2018-10193: LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an...
LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements.
Published Apr 18, 2018 · Updated Aug 5, 2024
CVE-2018-10222: An issue was discovered in idreamsoft iCMS V7.0.
An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=article_category&do=save&frame=iPHP.
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10230: Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455.
Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455.
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10234: Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPre...
Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the wp-admin/admin.php?page=um_options§ion=account page.
Published Apr 23, 2018 · Updated Aug 5, 2024
CVE-2018-10194: The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscrip...
The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
Published Apr 18, 2018 · Updated Aug 5, 2024
CVE-2018-10249: baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account.
baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account.
Published Apr 20, 2018 · Updated Aug 5, 2024
CVE-2018-10191: In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when...
In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. An attacker that can cause Ruby code to be run can use this to possibly execute arbitrary code.
Published Apr 17, 2018 · Updated Aug 5, 2024
CVE-2018-10224: An issue was discovered in YzmCMS 3.8.
An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html.
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10174: Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbit...
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role.
Published Apr 20, 2018 · Updated Aug 5, 2024
CVE-2018-10177: In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file.
In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file.
Published Apr 16, 2018 · Updated Aug 5, 2024
CVE-2018-10172: 7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRight...
7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privilege to the user's account, which makes it easier for attackers to bypass intended access restrictions by using this privilege in the context of a sandboxed process. Note: This has been disputed by 3rd parties who argue this is a valid feature of Windows.
Published Apr 16, 2018 · Updated Aug 5, 2024
CVE-2018-10236: POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Sy...
POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Syscontroller.php 'add' function because an attacker can control the value of $data['name'] with no restrictions, and this value is written to the FCPATH.$file file.
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10233: The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cros...
The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a structural finding throughout the entire plugin.
Published Apr 23, 2018 · Updated Aug 5, 2024
CVE-2018-10219: baijiacms V3 has physical path leakage via an index.php?mod=mobile&name=member&do=index request.
baijiacms V3 has physical path leakage via an index.php?mod=mobile&name=member&do=index request.
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10221: An issue was discovered in WUZHI CMS V4.1.0.
An issue was discovered in WUZHI CMS V4.1.0. There is a persistent XSS vulnerability that can steal the administrator cookies via the tag[tag] parameter to the index.php?m=tags&f=index&v=add&&_su=wuzhicms URI. After a website editor (whose privilege is lower than the administrator) logs in, he can add a new TAGS with the XSS payload.
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10187: In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik...
In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this issue is different from CVE-2018-8809, which was patched earlier.
Published Apr 17, 2018 · Updated Aug 5, 2024
CVE-2018-10223: An issue was discovered in YzmCMS 3.8.
An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/admin_manage/add.html.
Published Apr 19, 2018 · Updated Aug 5, 2024
CVE-2018-10175: Digital Guardian Management Console 7.1.2.0015 has an XXE issue.
Digital Guardian Management Console 7.1.2.0015 has an XXE issue.
Published Apr 20, 2018 · Updated Aug 5, 2024
CVE-2018-10183: An issue was discovered in BigTree 4.2.22.
An issue was discovered in BigTree 4.2.22. There is cross-site scripting (XSS) in /core/inc/lib/less.php/test/index.php because of a $_SERVER['REQUEST_URI'] echo, as demonstrated by the dir parameter in a file=charsets action.
Published Apr 17, 2018 · Updated Aug 5, 2024
CVE-2018-10186: In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c).
In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368.
Published Apr 17, 2018 · Updated Aug 5, 2024