CVE-2018-21242: An issue was discovered in Foxit PhantomPDF before 8.3.6.
An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action.
Published Jun 4, 2020 · Updated Aug 5, 2024
CVE archive
June 2018
Browse CVE records published in June 2018, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 1447 matching CVEs · Page 11 of 29.
CVE-2018-21259: An issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2.
An issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2. It allows attackers to cause a denial of service (application hang) via a malformed link in a channel.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-21257: An issue was discovered in Mattermost Server before 5.1.
An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (for setting a channel header) via the Channel header slash command API.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-21255: An issue was discovered in Mattermost Server before 5.1.
An issue was discovered in Mattermost Server before 5.1. Non-members of a channel could use the Channel PATCH API to modify that channel.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-21265: An issue was discovered in Mattermost Desktop App before 4.0.0.
An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler (e.g., video, audio, and notifications).
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-21261: An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3.
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team invite_id, which leads to unintended excessive invitation privileges.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-21260: An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3.
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-21241: An issue was discovered in Foxit PhantomPDF before 8.3.6.
An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code.
Published Jun 4, 2020 · Updated Aug 5, 2024
CVE-2018-21250: An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4.
An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service (memory consumption) via crafted image dimensions.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-21253: An issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2.
An issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2. An attacker could use the invite_people slash command to invite a non-permitted user.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-21248: An issue was discovered in Mattermost Server before 5.4.0.
An issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of superfluous authentication credentials.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-25016: Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injec...
Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.
Published Jun 21, 2021 · Updated Aug 5, 2024
CVE-2018-21247: An issue was discovered in LibVNCServer before 0.9.13.
An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.
Published Jun 17, 2020 · Updated Aug 5, 2024
CVE-2018-21246: Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caus...
Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.
Published Jun 15, 2020 · Updated Aug 5, 2024
CVE-2018-21243: An issue was discovered in Foxit PhantomPDF before 8.3.6.
An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used.
Published Jun 4, 2020 · Updated Aug 5, 2024
CVE-2018-21235: An issue was discovered in Foxit E-mail advertising system before September 2018.
An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related to Interspire Email Marketer.
Published Jun 4, 2020 · Updated Aug 5, 2024
CVE-2018-21239: An issue was discovered in Foxit Reader and PhantomPDF before 9.2.
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action.
Published Jun 4, 2020 · Updated Aug 5, 2024
CVE-2018-21252: An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3.
An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3. Attackers could use multiple e-mail addresses to bypass a domain-based policy for signups.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-21238: An issue was discovered in Foxit PhantomPDF before 8.3.7.
An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.
Published Jun 4, 2020 · Updated Aug 5, 2024
CVE-2018-21256: An issue was discovered in Mattermost Server before 5.1.
An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (for group-message channel creation) via the Group message slash command.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-21251: An issue was discovered in Mattermost Server before 5.2 and 5.1.1.
An issue was discovered in Mattermost Server before 5.2 and 5.1.1. Authorization could be bypassed if the channel name were not the same in the params and the body.
Published Jun 19, 2020 · Updated Aug 5, 2024
CVE-2018-20849: Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.
Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.
Published Jun 30, 2019 · Updated Aug 5, 2024
CVE-2018-20848: Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as de...
Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] parameter to the latter.
Published Jun 30, 2019 · Updated Aug 5, 2024
CVE-2018-20847: An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in ope...
An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow.
Published Jun 26, 2019 · Updated Aug 5, 2024
CVE-2018-20845: Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/p...
Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
Published Jun 26, 2019 · Updated Aug 5, 2024
CVE-2018-20846: Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpc...
Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
Published Jun 26, 2019 · Updated Aug 5, 2024
CVE-2018-20841: HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command...
HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mac_table request.
Published Jun 11, 2019 · Updated Aug 5, 2024
CVE-2018-20655: When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet all...
When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for iOS prior to v2.18.90.24 and WhatsApp Business for iOS prior to v2.18.90.24.
Published Jun 14, 2019 · Updated Aug 5, 2024
CVE-2018-20523: Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows cont...
Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleartext browser history via an app.provider.query content://com.android.browser.searchhistory/searchhistory request.
Published Jun 7, 2019 · Updated Aug 5, 2024
CVE-2018-20468: An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside an automation script that, when exported after execution, results in code execution.
Published Jun 17, 2019 · Updated Aug 5, 2024
CVE-2018-20470: An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files.
Published Jun 17, 2019 · Updated Aug 5, 2024
CVE-2018-20469: An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to h2 SQL injection. This can be exploited to inject SQL queries and run standard h2 system functions.
Published Jun 17, 2019 · Updated Aug 5, 2024
CVE-2018-20472: An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.
Published Jun 17, 2019 · Updated Aug 5, 2024
CVE-2018-20356: An invalid read of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi functio...
An invalid read of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Published Jun 10, 2019 · Updated Aug 5, 2024
CVE-2018-20352: Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded W...
Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Published Jun 10, 2019 · Updated Aug 5, 2024
CVE-2018-20353: An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mg_http_get_pr...
An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Published Jun 10, 2019 · Updated Aug 5, 2024
CVE-2018-20354: An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mg_http_get_proto...
An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Published Jun 10, 2019 · Updated Aug 5, 2024
CVE-2018-20355: An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi functi...
An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Published Jun 10, 2019 · Updated Aug 5, 2024
CVE-2018-20135: Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installa...
Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps into using an arbitrary hostname for which the attacker can provide a valid SSL certificate, and emulate the API of the app store to modify existing apps at installation time. The specific flaw involves an HTTP method to obtain the load-balanced hostname that enforces SSL only after obtaining a hostname from the load balancer, and a missing app signature validation in the application XML. An attacker can exploit this vulnerability to achieve Remote Code Execution on the device. The Samsung ID is SVE-2018-12071.
Published Jun 7, 2019 · Updated Aug 5, 2024
CVE-2018-20091: An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.
An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allow any authenticated user to run arbitrary queries against CDSW's internal database. The database contains user contact information, encrypted CDSW passwords (in the case of local authentication), API keys, and stored Kerberos keytabs.
Published Jun 7, 2019 · Updated Aug 5, 2024
CVE-2018-20073: Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to...
Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem.
Published Jun 27, 2019 · Updated Aug 5, 2024
CVE-2018-20013: In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a f...
In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::ProcessPacket metadata_id!=0 assertion, leading to shutting down the client application.
Published Jun 18, 2019 · Updated Aug 5, 2024
CVE-2018-20014: In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a f...
In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereference, leading to shutting down the client application.
Published Jun 7, 2019 · Updated Aug 5, 2024
CVE-2018-19999: The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that...
The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the application and execute code in the context of the Windows SYSTEM account, leading to privilege escalation. To exploit this vulnerability, an attacker must have local access the the host running Serv-U, and a Serv-U administrator have an active management console session.
Published Jun 7, 2019 · Updated Aug 5, 2024
CVE-2018-19878: An issue was discovered on Teltonika RTU950 R_31.04.89 devices.
An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every successful login request, the application saves a session. A user can re-login without logging out, causing the application to store the session in memory. Exploitation of this vulnerability will increase memory use and consume free space.
Published Jun 19, 2019 · Updated Aug 5, 2024
CVE-2018-19860: Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02,...
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.
Published Jun 7, 2019 · Updated Aug 5, 2024
CVE-2018-19801: aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid n_filters.
aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid n_filters.
Published Jun 7, 2019 · Updated Aug 5, 2024
CVE-2018-19802: aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.
aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.
Published Jun 7, 2019 · Updated Aug 5, 2024
CVE-2018-19800: aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo.
aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo.
Published Jun 7, 2019 · Updated Aug 5, 2024
CVE-2018-19451: A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5....
A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field. An attacker can leverage this to gain remote code execution.
Published Jun 7, 2019 · Updated Aug 5, 2024