CVE-2018-13445: An issue was discovered in SeaCMS 6.61.
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/admin_manager.php?action=add.
Published Jul 8, 2018 · Updated Sep 16, 2024
CVE archive
July 2018
Browse CVE records published in July 2018, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 2018 matching CVEs · Page 11 of 41.
CVE-2018-1245: Authorization ByPass Vulnerability
RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component (ACM). A remote authenticated malicious user with non-admin privileges could potentially bypass the Java Security Policies. Once bypassed, a malicious user could potentially run arbitrary system commands at the OS level with application owner privileges on the affected system.
Published Jul 13, 2018 · Updated Sep 16, 2024
CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to...
It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
Published Jul 10, 2018 · Updated Sep 16, 2024
CVE-2018-1002203: unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arb...
unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Published Jul 25, 2018 · Updated Sep 16, 2024
CVE-2018-5864: While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MS...
While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read and information leak can potentially occur.
Published Jul 6, 2018 · Updated Sep 16, 2024
CVE-2018-3870: An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0.
An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3871.
Published Jul 19, 2018 · Updated Sep 16, 2024
CVE-2018-1000615: ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability...
ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB component in ONOS that can result in An adversary can remotely crash OVSDB service ONOS controller via a normal switch.. This attack appear to be exploitable via the attacker should be able to control or forge a switch in the network..
Published Jul 9, 2018 · Updated Sep 16, 2024
CVE-2018-13073: The mintToken function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has...
The mintToken function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
Published Jul 2, 2018 · Updated Sep 16, 2024
CVE-2018-7771: The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder softwar...
The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vulnerability allows a caller with standard user privileges to write arbitrary php files anywhere in the web service directory tree.
Published Jul 3, 2018 · Updated Sep 16, 2024
CVE-2018-3749: The utilities function in all versions < 1.0.1 of the deap node module can be tricked into modifying the pr...
The utilities function in all versions < 1.0.1 of the deap node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all objects.
Published Jul 3, 2018 · Updated Sep 16, 2024
CVE-2018-1408: IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138446.
Published Jul 10, 2018 · Updated Sep 16, 2024
CVE-2018-7781: In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29....
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.
Published Jul 3, 2018 · Updated Sep 16, 2024
CVE-2018-13867: An issue was discovered in the HDF HDF5 1.8.20 library.
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.
Published Jul 10, 2018 · Updated Sep 16, 2024
CVE-2018-0029: Junos OS: Kernel crash (vmcore) during broadcast storm after enabling 'monitor traffic interface fxp0'
While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash and restart (vmcore). This issue only affects Junos OS 15.1 and later releases, and affects both single core and multi-core REs. Releases prior to Junos OS 15.1 are unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S11, 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D140; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400; 15.1X53 versions prior to 15.1X53-D67 on QFX10K; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX; 16.1 versions prior to 16.1R3-S8, 16.1R5-S4, 16.1R6-S1, 16.1R7; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D90, 17.2X75-D110; 17.3 versions prior to 17.3R1-S4, 17.3R2; 17.4 versions prior to 17.4R1-S3, 17.4R2.
Published Jul 11, 2018 · Updated Sep 16, 2024
CVE-2018-7782: In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29....
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text.
Published Jul 3, 2018 · Updated Sep 16, 2024
CVE-2018-13069: The mintToken function of a smart contract implementation for DYchain (DYC), an Ethereum token, has an inte...
The mintToken function of a smart contract implementation for DYchain (DYC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
Published Jul 2, 2018 · Updated Sep 16, 2024
CVE-2018-1000210: YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The defau...
YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deserialize() will deserialize user-controlled types in the line "currentType = Type.GetType(nodeEvent.Tag.Substring(1), throwOnError: false);" and blindly instantiates them. that can result in Code execution in the context of the running process. This attack appear to be exploitable via Victim must parse a specially-crafted YAML file. This vulnerability appears to have been fixed in 5.0.0.
Published Jul 13, 2018 · Updated Sep 16, 2024
CVE-2018-13090: The mintToken function of a smart contract implementation for YiTongCoin (YTC), an Ethereum token, has an i...
The mintToken function of a smart contract implementation for YiTongCoin (YTC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
Published Jul 2, 2018 · Updated Sep 16, 2024
CVE-2018-1921: IBM Campaign 9.1.0, 9.1.2, 10.1, and 11.0 is vulnerable to cross-site scripting.
IBM Campaign 9.1.0, 9.1.2, 10.1, and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152857.
Published Jul 17, 2019 · Updated Sep 16, 2024
CVE-2018-13280: Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation M...
Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allows man-in-the-middle attackers to compromise non-HTTPS sessions via unspecified vectors.
Published Jul 30, 2018 · Updated Sep 16, 2024
CVE-2018-10620: AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remot...
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.
Published Jul 19, 2018 · Updated Sep 16, 2024
CVE-2018-14052: An issue has been found in libwav through 2017-04-20.
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function apply_gain in wav_gain/wav_gain.c.
Published Jul 13, 2018 · Updated Sep 16, 2024
CVE-2018-14389: joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.
joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.
Published Jul 18, 2018 · Updated Sep 16, 2024
CVE-2018-7784: In Schneider Electric U.motion Builder software versions prior to v1.3.4, this exploit occurs when the subm...
In Schneider Electric U.motion Builder software versions prior to v1.3.4, this exploit occurs when the submitted data of an input string is evaluated as a command by the application. In this way, the attacker could execute code, read the stack, or cause a segmentation fault in the running application.
Published Jul 3, 2018 · Updated Sep 16, 2024
CVE-2018-5872: While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (An...
While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, the use of an out-of-range pointer offset can occur.
Published Jul 6, 2018 · Updated Sep 16, 2024
CVE-2018-5838: Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile...
Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.
Published Jul 6, 2018 · Updated Sep 16, 2024
CVE-2018-14086: An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token.
An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The contract has an integer overflow. If the owner sets the value of sellPrice to a large number in setPrices() then the "amount * sellPrice" will cause an integer overflow in sell().
Published Jul 16, 2018 · Updated Sep 16, 2024
CVE-2018-8027: Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.
Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.
Published Jul 31, 2018 · Updated Sep 16, 2024
CVE-2018-5894: Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdr...
Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur.
Published Jul 6, 2018 · Updated Sep 16, 2024
CVE-2018-1002209: QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files vi...
QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Published Jul 25, 2018 · Updated Sep 16, 2024
CVE-2018-1000611: SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting (XSS) vulnerability t...
SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting (XSS) vulnerability that can result in Allows an attacker to inject arbitrary web scripts or HTML into help and login pages. This attack appear to be exploitable via the victim opening a specially crafted URL.
Published Jul 9, 2018 · Updated Sep 16, 2024
CVE-2018-14044: The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundT...
The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.
Published Jul 13, 2018 · Updated Sep 16, 2024
CVE-2018-1585: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Arch...
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143498.
Published Jul 19, 2018 · Updated Sep 16, 2024
CVE-2018-1243: iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability
Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers to perform bruteforce session guessing attacks.
Published Jul 2, 2018 · Updated Sep 16, 2024
CVE-2018-0030: Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.
Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart. By continuously sending specific MPLS packets, an attacker can repeatedly crash the line cards or PTX1K causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS with MPC7/8/9 or PTX-FPC3 (FPC-P1, FPC-P2) installed and PTX1K: 15.1F versions prior to 15.1F6-S10; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.1X65 versions prior to 16.1X65-D46; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S4, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D70, 17.2X75-D90; 17.3 versions prior to 17.3R1-S4, 17.3R2, 17.4 versions prior to 17.4R1-S2, 17.4R2. Refer to KB25385 for more information about PFE line cards.
Published Jul 11, 2018 · Updated Sep 16, 2024
CVE-2018-3930: In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a craft...
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `vbgetfp` method.
Published Jul 11, 2018 · Updated Sep 16, 2024
CVE-2018-1999006: A exposure of sensitive information vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier...
A exposure of sensitive information vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Plugin.java that allows attackers to determine the date and time when a plugin HPI/JPI file was last extracted, which typically is the date of the most recent installation/upgrade.
Published Jul 23, 2018 · Updated Sep 16, 2024
CVE-2018-1002201: zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via...
zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Published Jul 25, 2018 · Updated Sep 16, 2024
CVE-2018-11059: RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability.
RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
Published Jul 24, 2018 · Updated Sep 16, 2024
CVE-2018-0026: Junos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgrade
After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can be verified by running the command: user@re0> show interfaces <interface_name> extensive | match filters" CAM destination filters: 0, CAM source filters: 0 Note: when the issue occurs, it does not show the applied firewall filter. The correct output should show the applied firewall filter, for example: user@re0> show interfaces <interface_name> extensive | match filters" CAM destination filters: 0, CAM source filters: 0 Input Filters: FIREWAL_FILTER_NAME-<interface_name> This issue affects firewall filters for every address family. Affected releases are Juniper Networks Junos OS: 15.1R4, 15.1R5, 15.1R6 and SRs based on these MRs. 15.1X8 versions prior to 15.1X8.3.
Published Jul 11, 2018 · Updated Sep 16, 2024
CVE-2018-11257: Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB era...
Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850.
Published Jul 6, 2018 · Updated Sep 16, 2024
CVE-2018-13447: SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers t...
SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter.
Published Jul 8, 2018 · Updated Sep 16, 2024
CVE-2018-1521: IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141802.
Published Jul 10, 2018 · Updated Sep 16, 2024
CVE-2018-1999019: Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api...
Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.php that can result in Unauthenticated remote code execution. This attack appear to be exploitable via a simple GET request to the api endpoint. This vulnerability appears to have been fixed in After commit 0de84700648f098c1fbf6b807dee28ec640efe62.
Published Jul 23, 2018 · Updated Sep 16, 2024
CVE-2018-9070: For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access...
For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access to the smart speaker can, by pressing a specific button sequence, enter factory test mode and enable a web service intended for testing the device. As with most test modes, this provides extra privileges, including changing settings and running code. Lenovo Smart Assistant is an Amazon Alexa-enabled smart speaker developed by Lenovo.
Published Jul 13, 2018 · Updated Sep 16, 2024
CVE-2018-10628: AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow a...
AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution under the privileges of the InTouch View process.
Published Jul 24, 2018 · Updated Sep 16, 2024
CVE-2018-1556: IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting.
IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142893.
Published Jul 6, 2018 · Updated Sep 16, 2024
CVE-2018-9064: In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web AP...
In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the credentials for the System Manager user.
Published Jul 30, 2018 · Updated Sep 16, 2024
CVE-2018-14084: An issue was discovered in a smart contract implementation for MKCB, an Ethereum token.
An issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the owner sets the value of sellPrice to a large number in setPrices() then the "amount * sellPrice" will cause an integer overflow in sell().
Published Jul 16, 2018 · Updated Sep 16, 2024
CVE-2018-12462: NetIQ iManager XSS vulnerabilities
NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities.
Published Jul 10, 2018 · Updated Sep 16, 2024