CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In September 2018 (CVSS score >= 7)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2018-1000802 77 DoS 2018-09-18 2020-12-07
7.5
 None Remote Low Not required Partial Partial Partial
Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.
2 CVE-2018-1000800 476 2018-09-06 2020-05-13
7.5
 None Remote Low Not required Partial Partial Partial
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).
3 CVE-2018-1000666 78 Exec Code 2018-09-06 2019-03-07
10.0
 None Remote Low Not required Complete Complete Complete
GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in method: notifySpaceModification; that can result in Improper validation of parameters results in command execution. This attack appear to be exploitable via Network connectivity, required minimal auth privileges (everyone can register an account). This vulnerability appears to have been fixed in After commit 15443122ed2b1cbfd7bdefc048bf106f075becdb.
4 CVE-2018-17796 89 Sql 2018-09-30 2018-11-21
7.5
 None Remote Low Not required Partial Partial Partial
An issue was discovered in MRCMS (aka mushroom) through 3.1.2. The WebParam.java file directly accepts the FIELD_T parameter in a request and uses it as a hash of SQL statements without filtering, resulting in a SQL injection vulnerability in getChannel() in the ChannelService.java file.
5 CVE-2018-17793 254 Exec Code 2018-09-30 2019-01-08
10.0
 None Remote Low Not required Complete Complete Complete
** DISPUTED ** Virtualenv 16.0.0 allows a sandbox escape via "python $(bash >&2)" and "python $(rbash >&2)" commands. NOTE: the software maintainer disputes this because the Python interpreter in a virtualenv is supposed to be able to execute arbitrary code.
6 CVE-2018-17611 416 DoS Exec Code 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.
7 CVE-2018-17610 416 DoS Exec Code 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.
8 CVE-2018-17609 416 DoS Exec Code 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.
9 CVE-2018-17608 416 DoS Exec Code 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.
10 CVE-2018-17607 416 DoS Exec Code 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.
11 CVE-2018-17575 89 Sql 2018-09-28 2018-11-21
7.5
 None Remote Low Not required Partial Partial Partial
SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/ studentId parameter.
12 CVE-2018-17573 434 2018-09-28 2018-11-23
7.5
 None Remote Low Not required Partial Partial Partial
The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/editor/filemanager/browser/default/browser.html, fckeditor/editor/filemanager/connectors/test.html, and fckeditor/editor/filemanager/connectors/uploadtest.html.
13 CVE-2018-17570 190 Overflow Mem. Corr. 2018-09-26 2018-11-26
7.5
 None Remote Low Not required Partial Partial Partial
utils/ut_ws_svr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
14 CVE-2018-17569 190 Overflow Mem. Corr. 2018-09-26 2018-11-26
7.5
 None Remote Low Not required Partial Partial Partial
network/nw_buf.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
15 CVE-2018-17568 190 Overflow Mem. Corr. 2018-09-26 2018-11-20
7.5
 None Remote Low Not required Partial Partial Partial
utils/ut_rpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
16 CVE-2018-17566 89 Sql 2018-09-26 2018-11-20
7.5
 None Remote Low Not required Partial Partial Partial
In ThinkPHP 5.1.24, the inner function delete can be used for SQL injection when its WHERE condition's value can be controlled by a user's request.
17 CVE-2018-17538 2018-09-26 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
** DISPUTED ** Axon (formerly TASER International) Evidence Sync 3.15.89 is vulnerable to process injection. NOTE: the vendor's position is that this CVE is not associated with information that supports any finding of any type of vulnerability.
18 CVE-2018-17411 611 2018-09-26 2018-12-17
10.0
 None Remote Low Not required Complete Complete Complete
An XML External Entity (XXE) vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20.
19 CVE-2018-17410 89 Sql 2018-09-26 2020-04-14
7.5
 None Remote Low Not required Partial Partial Partial
Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI.
20 CVE-2018-17397 89 Sql 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.
21 CVE-2018-17394 89 Sql 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.
22 CVE-2018-17391 89 Sql 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.
23 CVE-2018-17385 89 Sql 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radius] parameter.
24 CVE-2018-17384 89 Sql 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter.
25 CVE-2018-17383 89 Sql 2018-09-28 2018-11-15
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter.
26 CVE-2018-17382 89 Sql 2018-09-28 2018-11-15
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.
27 CVE-2018-17380 89 Sql 2018-09-28 2018-11-15
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_end_date parameter.
28 CVE-2018-17379 89 Sql 2018-09-28 2018-11-15
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order parameter.
29 CVE-2018-17378 89 Sql 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter.
30 CVE-2018-17377 89 Sql 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.
31 CVE-2018-17376 89 Sql 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter_letter parameter.
32 CVE-2018-17375 89 Sql 2018-09-28 2018-11-14
7.5
 None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter.
33 CVE-2018-17334 787 DoS Overflow 2018-09-22 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in the svgGetNextPathField function in svg_string.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because a strncpy copy limit is miscalculated.
34 CVE-2018-17333 787 DoS Overflow 2018-09-22 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in svgStringToLength in svg_types.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because sscanf is misused.
35 CVE-2018-17317 78 Exec Code 2018-09-21 2020-10-23
7.5
 None Remote Low Not required Partial Partial Partial
FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the io_mode, ap_mode, io_action, io_in_iface, io_in_set, io_in_ip, io_in_mask, io_in_gw, io_out_iface, io_out_set, io_out_mask, io_out_gw, iface, or domain parameter to /www/script/config_iface.php, or the newSSID, hostapd_secure, hostapd_wpa_passphrase, or supplicant_ssid parameter to /www/page_config.php.
36 CVE-2018-17254 89 Sql 2018-09-20 2021-03-17
7.5
 None Remote Low Not required Partial Partial Partial
The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.
37 CVE-2018-17243 89 Sql 2018-09-20 2018-11-09
7.5
 None Remote Low Not required Partial Partial Partial
Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection.
38 CVE-2018-17232 89 Exec Code Sql 2018-09-20 2019-09-26
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot (aka slack-archive-bot) before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute().
39 CVE-2018-17228 78 Exec Code 2018-09-19 2019-10-03
7.5
 None Remote Low Not required Partial Partial Partial
nmap4j 1.1.0 allows attackers to execute arbitrary commands via shell metacharacters in an includeHosts call.
40 CVE-2018-17208 78 Exec Code CSRF 2018-09-19 2019-10-03
9.3
 None Remote Medium Not required Complete Complete Complete
Linksys Velop 1.1.2.187020 devices allow unauthenticated command injection, providing an attacker with full root access, via cgi-bin/zbtest.cgi or cgi-bin/zbtest2.cgi (scripts that can be discovered with binwalk on the firmware, but are not visible in the web interface). This occurs because shell metacharacters in the query string are mishandled by ShellExecute, as demonstrated by the zbtest.cgi?cmd=level&level= substring. This can also be exploited via CSRF.
41 CVE-2018-17207 94 Exec Code 2018-09-19 2021-10-18
7.5
 None Remote Low Not required Partial Partial Partial
An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution.
42 CVE-2018-17182 416 Overflow +Priv 2018-09-19 2019-03-05
7.2
 None Local Low Not required Complete Complete Complete
An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.
43 CVE-2018-17174 787 DoS Exec Code Overflow 2018-09-21 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
A stack-based buffer overflow was discovered in the xtimor NMEA library (aka nmealib) 0.5.3. nmea_parse() in parser.c allows an attacker to trigger denial of service (even arbitrary code execution in a certain context) in a product using this library via malformed data.
44 CVE-2018-17173 94 Exec Code 2018-09-21 2019-05-06
7.5
 None Remote Low Not required Partial Partial Partial
LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.
45 CVE-2018-17153 287 +Priv Bypass 2018-09-18 2018-12-18
10.0
 None Remote Low Not required Complete Complete Complete
It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the device. (Whenever an admin logs into My Cloud, a server-side session is created that is bound to the user's IP address. After the session is created, it is possible to call authenticated CGI modules by sending the cookie username=admin in the HTTP request. The invoked CGI will check if a valid session is present and bound to the user's IP address.) It was found that it is possible for an unauthenticated attacker to create a valid session without a login. The network_mgr.cgi CGI module contains a command called "cgi_get_ipv6" that starts an admin session -- tied to the IP address of the user making the request -- if the additional parameter "flag" with the value "1" is provided. Subsequent invocation of commands that would normally require admin privileges now succeed if an attacker sets the username=admin cookie.
46 CVE-2018-17141 824 Exec Code 2018-09-21 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
47 CVE-2018-17137 Bypass 2018-09-17 2019-10-03
7.5
 None Remote Low Not required Partial Partial Partial
Prezi Next 1.3.101.11 has a documented purpose of creating HTML5 presentations but has SE_DEBUG_PRIVILEGE on Windows, which might allow attackers to bypass intended access restrictions.
48 CVE-2018-17136 89 Sql 2018-09-17 2018-11-01
7.5
 None Remote Low Not required Partial Partial Partial
zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header.
49 CVE-2018-17127 476 DoS 2018-09-17 2019-01-18
7.8
 None Remote Low Not required None None Complete
blocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (NULL pointer dereference and device crash) via a request that lacks a timestap parameter.
50 CVE-2018-17126 94 Exec Code 2018-09-17 2018-11-19
7.5
 None Remote Low Not required Partial Partial Partial
CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to upload\plugins\sys\Install.php.
Total number of vulnerabilities : 306   Page : 1 (This Page)2 3 4 5 6 7
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.