CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In February 2018

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
151 CVE-2018-7273 200 Bypass +Info 2018-02-21 2019-03-01
4.9
None Local Low Not required Complete None None
In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
152 CVE-2018-7272 200 +Info 2018-02-21 2018-03-18
4.0
None Remote Low ??? Partial None None
The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file.
153 CVE-2018-7271 94 Exec Code 2018-02-21 2018-03-21
9.3
None Remote Medium Not required Complete Complete Complete
An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/config_db.php configuration file filtering is not rigorous: one can insert malicious code in the installation process to execute arbitrary commands or obtain a web shell.
154 CVE-2018-7265 79 XSS 2018-02-20 2018-03-19
4.3
None Remote Medium Not required None Partial None
Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS.
155 CVE-2018-7264 787 Exec Code 2018-02-28 2018-03-23
7.5
None Remote Low Not required Partial Partial Partial
The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images.
156 CVE-2018-7263 415 DoS 2018-02-20 2018-03-19
6.8
None Remote Medium Not required Partial Partial Partial
The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
157 CVE-2018-7261 79 XSS 2018-02-21 2019-03-01
3.5
None Remote Medium ??? None Partial None
There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).
158 CVE-2018-7260 79 XSS 2018-02-21 2018-03-06
3.5
None Remote Medium ??? None Partial None
Cross-site scripting (XSS) vulnerability in db_central_columns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
159 CVE-2018-7259 319 +Info 2018-02-20 2019-10-03
5.0
None Remote Low Not required Partial None None
The FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X sends a user's Google account credentials to http://installLog.flightsimlabs.com/LogHandler3.ashx if a pirated serial number has been entered, which allows remote attackers to obtain sensitive information, e.g., by sniffing the network for cleartext HTTP traffic. This behavior was removed in 2.0.1.232.
160 CVE-2018-7254 125 Overflow 2018-02-19 2019-12-20
6.8
None Remote Medium Not required Partial Partial Partial
The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory allocation, via a maliciously crafted CAF file.
161 CVE-2018-7253 125 2018-02-19 2019-12-20
6.8
None Remote Medium Not required Partial Partial Partial
The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (heap-based buffer over-read) or possibly overwrite the heap via a maliciously crafted DSDIFF file.
162 CVE-2018-7251 200 +Info 2018-02-19 2019-10-03
5.0
None Remote Low Not required Partial None None
An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error (such as "Too many connections") has occurred.
163 CVE-2018-7250 200 +Info 2018-02-26 2018-03-21
2.1
None Local Low Not required Partial None None
An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. An uninitialized kernel pool allocation in IOCTL 0xCA002813 allows a local unprivileged attacker to leak 16 bits of uninitialized kernel PagedPool data.
164 CVE-2018-7249 362 2018-02-26 2018-03-22
6.9
None Local Medium Not required Complete Complete Complete
An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race condition that leads to a use-after-free. When exploited, an unprivileged attacker can run arbitrary code in the kernel.
165 CVE-2018-7247 119 Exec Code Overflow 2018-02-19 2018-03-14
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3. Unsanitized input (rootname) can overflow a buffer, leading potentially to arbitrary code execution or possibly unspecified other impact.
166 CVE-2018-7226 190 Overflow 2018-02-19 2019-08-09
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in vcSetXCutTextProc() in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distribution through 0.9.10. Missing sanitization of the client-specified message length may cause integer overflow or possibly have unspecified other impact via a specially crafted VNC packet.
167 CVE-2018-7225 190 Overflow 2018-02-19 2020-10-23
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
168 CVE-2018-7219 352 CSRF 2018-02-19 2018-03-14
6.8
None Remote Medium Not required Partial Partial Partial
application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/admin/admin/edit.html request.
169 CVE-2018-7217 434 2018-02-18 2018-03-18
6.5
None Remote Low ??? Partial Partial Partial
In Bravo Tejari Procurement Portal, uploaded files are not properly validated by the application either on the client or the server side. An attacker can take advantage of this vulnerability and upload malicious executable files to compromise the application, as demonstrated by an esop/evm/OPPreliminaryForms.do?formId=857 request.
170 CVE-2018-7216 352 CSRF 2018-02-18 2018-03-16
6.0
None Remote Medium ??? Partial Partial Partial
Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenticated users to hijack the authentication of application users for requests that modify their personal data by leveraging lack of anti-CSRF tokens.
171 CVE-2018-7212 22 Dir. Trav. 2018-02-18 2018-03-19
5.0
None Remote Low Not required Partial None None
An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backslash characters.
172 CVE-2018-7211 327 2018-02-18 2020-08-24
4.3
None Remote Medium Not required Partial None None
An issue was discovered in iDashboards 9.6b. The SSO implementation is affected by a weak obfuscation library, allowing man-in-the-middle attackers to discover credentials.
173 CVE-2018-7210 200 +Info 2018-02-18 2018-03-14
5.0
None Remote Low Not required Partial None None
An issue was discovered in iDashboards 9.6b. It allows remote attackers to obtain sensitive information via a direct request for the idb/config?CMD=installLicense URI, as demonstrated by intranet IP addresses and names of guest accounts.
174 CVE-2018-7209 200 +Info 2018-02-18 2018-03-12
5.0
None Remote Low Not required Partial None None
An issue was discovered in iDashboards 9.6b. It allows remote attackers to obtain sensitive information via a direct request for the idashboards/config.xml URI, as demonstrated by intranet URLs for reports.
175 CVE-2018-7208 20 DoS 2018-02-18 2019-10-31
6.8
None Remote Medium Not required Partial Partial Partial
In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.
176 CVE-2018-7207 +Info 2018-02-17 2018-02-17
0.0
None ??? ??? ??? ??? ??? ???
National Payments Corporation of India (NPCI) Bharat Interface for Money (aka BHIM) 1.4.1 sends messages to undocumented telephone numbers in conjunction with logout/login actions, which allows remote attackers to obtain sensitive information.
177 CVE-2018-7206 2018-02-18 2021-01-13
6.5
None Remote Low ??? Partial Partial Partial
An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whitelisting for access control, group membership was not checked correctly, allowing members not in the whitelisted groups to create accounts on the Hub. (Users were not allowed to access other users' accounts, but could create their own accounts on the Hub linked to their GitLab account. GitLab authentication not using gitlab_group_whitelist is unaffected. No other Authenticators are affected.)
178 CVE-2018-7205 79 Exec Code XSS 2018-02-20 2019-03-26
3.5
None Remote Medium ??? None Partial None
** DISPUTED ** Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote attackers to execute malicious JavaScript via a malicious devicename parameter in a link that is entered via the "Pages -> Edit template properties -> Device Layouts -> Create device layout (and edit created device layout) -> Design" screens. NOTE: the vendor has responded that there is intended functionality for authorized users to edit and update ascx code layout.
179 CVE-2018-7198 79 XSS 2018-02-18 2020-08-03
4.3
None Remote Medium Not required None Partial None
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.
180 CVE-2018-7197 79 XSS 2018-02-18 2018-03-05
4.3
None Remote Medium Not required None Partial None
An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting (XSS) vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL.
181 CVE-2018-7188 79 +Priv XSS 2018-02-16 2018-03-13
3.5
None Remote Medium ??? None Partial None
An XSS vulnerability (via an SVG image) in Tiki before 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with a malicious SVG image, related to lib/filegals/filegallib.php.
182 CVE-2018-7187 78 Exec Code 2018-02-16 2019-02-28
9.3
None Remote Medium Not required Complete Complete Complete
The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only checks for "://" anywhere in the string), which allows remote attackers to execute arbitrary OS commands via a crafted web site.
183 CVE-2018-7186 787 DoS Overflow 2018-02-16 2020-08-24
7.5
None Remote Low Not required Partial Partial Partial
Leptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf or sscanf, which allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a long string, as demonstrated by the gplotRead and ptaReadStream functions.
184 CVE-2018-7180 89 Sql 2018-02-17 2018-03-02
7.5
None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter.
185 CVE-2018-7179 89 Sql 2018-02-17 2018-03-02
7.5
None Remote Low Not required Partial Partial Partial
SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter.
186 CVE-2018-7178 89 Sql 2018-02-17 2018-03-02
7.5
None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter.
187 CVE-2018-7177 89 Sql 2018-02-17 2018-03-02
7.5
None Remote Low Not required Partial Partial Partial
SQL Injection exists in the Saxum Numerology 3.0.4 component for Joomla! via the publicid parameter.
188 CVE-2018-7176 352 CSRF 2018-02-16 2018-03-14
6.8
None Remote Medium Not required Partial Partial Partial
FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php (aka the "add user" feature of the User Permissions page).
189 CVE-2018-7175 476 DoS 2018-02-15 2018-03-06
4.3
None Remote Medium Not required None None Partial
An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components.
190 CVE-2018-7174 835 DoS 2018-02-15 2019-10-03
4.3
None Remote Medium Not required None None Partial
An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams.
191 CVE-2018-7173 172 DoS 2018-02-15 2018-03-09
4.3
None Remote Medium Not required None None Partial
A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding.
192 CVE-2018-7172 22 Dir. Trav. 2018-02-27 2018-03-23
5.5
None Remote Low ??? None Partial Partial
In index.php in WonderCMS before 2.4.1, remote attackers can delete arbitrary files via directory traversal.
193 CVE-2018-7169 732 2018-02-15 2019-10-03
5.0
None Remote Low Not required Partial None None
An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to certain filesystem paths if the administrator has used "group blacklisting" (e.g., chmod g-rwx) to restrict access to paths. This flaw effectively reverts a security feature in the kernel (in particular, the /proc/self/setgroups knob) to prevent this sort of privilege escalation.
194 CVE-2018-7057 79 XSS 2018-02-15 2018-03-12
4.3
None Remote Medium Not required None Partial None
RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.
195 CVE-2018-7056 200 +Info 2018-02-15 2018-03-12
5.0
None Remote Low Not required Partial None None
RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.
196 CVE-2018-7055 918 2018-02-15 2018-03-12
5.0
None Remote Low Not required Partial None None
GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.
197 CVE-2018-7054 416 2018-02-15 2019-07-04
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191.
198 CVE-2018-7053 416 2018-02-15 2019-02-28
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are received in an unexpected order.
199 CVE-2018-7052 476 2018-02-15 2019-02-28
5.0
None Remote Low Not required None None Partial
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer dereference would occur.
200 CVE-2018-7051 125 2018-02-15 2019-02-28
5.0
None Remote Low Not required Partial None None
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings.
Total number of vulnerabilities : 1328   Page : 1 2 3 4 (This Page)5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.