CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In August 2018

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
151 CVE-2018-15740 79 XSS 2018-08-28 2020-07-15
4.3
None Remote Medium Not required None Partial None
Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen.
152 CVE-2018-15728 94 Exec Code 2018-08-24 2019-09-26
9.0
None Remote Low ??? Complete Complete Complete
Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the underlying operating system with privileges of the user which was used to start Couchbase. Affects Version: 4.0.0, 4.1.2, 4.5.1, 5.0.0, 4.6.5, 5.0.1, 5.1.1, 5.5.0, 5.5.1. Fix Version: 6.0.0, 5.5.2
153 CVE-2018-15727 287 Bypass 2018-08-29 2019-03-05
7.5
None Remote Low Not required Partial Partial Partial
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.
154 CVE-2018-15699 79 XSS 2018-08-27 2018-10-30
4.3
None Remote Medium Not required None Partial None
ASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is vulnerable to XSS. A man in the middle can take advantage of this by inserting Javascript into the configuration files Version field.
155 CVE-2018-15698 200 +Info 2018-08-27 2018-10-30
6.8
None Remote Low ??? Complete None None
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to loginimage.cgi.
156 CVE-2018-15697 200 +Info 2018-08-27 2018-10-30
4.0
None Remote Low ??? Partial None None
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on a share by providing the full path. For example, /home/admin/.ash_history.
157 CVE-2018-15696 200 +Info 2018-08-27 2018-10-30
4.0
None Remote Low ??? Partial None None
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi.
158 CVE-2018-15695 22 Dir. Trav. 2018-08-27 2018-10-30
8.5
None Remote Low ??? None Complete Complete
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to delete any file on the file system due to a path traversal vulnerability in wallpaper.cgi.
159 CVE-2018-15694 22 Exec Code Dir. Trav. 2018-08-27 2018-10-30
6.0
None Remote Medium ??? Partial Partial Partial
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to upload files to arbitrary locations due to a path traversal vulnerability. This could lead to code execution if the "Web Server" feature is enabled.
160 CVE-2018-15691 502 Exec Code 2018-08-30 2021-04-12
7.5
None Remote Low Not required Partial Partial Partial
Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute arbitrary code.
161 CVE-2018-15685 1188 Exec Code 2018-08-23 2019-10-03
6.8
None Remote Medium Not required Partial Partial Partial
GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution.
162 CVE-2018-15672 2018-08-21 2018-08-21
0.0
None ??? ??? ??? ??? ??? ???
An issue was discovered in the HDF HDF5 1.10.2 library. A SIGFPE is raised in the function H5D__chunk_init() of H5Dchunk.c during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero.
163 CVE-2018-15671 400 DoS 2018-08-21 2018-10-16
4.3
None Remote Medium Not required None None Partial
An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5P__get_cb() in H5Pint.c during an attempted parse of a crafted HDF file. This results in denial of service.
164 CVE-2018-15670 20 2018-08-21 2021-09-08
4.3
None Remote Medium Not required None Partial None
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance implements "webView:decidePolicyForNavigationAction:request:frame:decisionListener:" such that OpenURL is the default URL handler. A navigation request is processed by the default URL handler only if the currentEvent is NX_LMOUSEUP or NX_OMOUSEUP. An attacker may abuse HTML elements with an EventHandler for a chance to validate navigation requests for URLs that are processed during the NX_LMOUSEUP event triggered by clicking an email.
165 CVE-2018-15669 Bypass 2018-08-21 2020-05-04
5.0
None Remote Low Not required None Partial None
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance implements "webView:decidePolicyForNavigationAction:request:frame:decisionListener:" such that requests from HTMLIFrameElements are blacklisted. However, other sub-classes of HTMLFrameOwnerElements are not forbidden by the policy. An attacker may abuse HTML plug-in elements within an email to trigger frame navigation requests that bypass this filter.
166 CVE-2018-15668 200 +Info 2018-08-21 2020-05-11
5.0
None Remote Low Not required Partial None None
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment_" prefix designate attachment parameters. If the value of an attachment parameter corresponds to an accessible file path, the file is attached to the outbound message. In addition, relative file paths are acceptable attachment parameter values. The handler can be invoked using any method that invokes the URL handler such as a hyperlink in an email. The user is not prompted when the handler processes the "send" command, thus leading to automatic transmission of an email with designated attachments from the target account to a target address.
167 CVE-2018-15667 287 2018-08-21 2020-08-24
5.0
None Remote Low Not required None Partial None
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. It registers and uses the airmail:// URL scheme. The "send" command in the URL scheme allows an external application to send arbitrary emails from an active account without authentication. The handler has no restriction on who can use its functionality. The handler can be invoked using any method that invokes the URL handler such as a hyperlink in an email. The user is not prompted when the handler processes the "send" command, thus leading to automatic transmission of an attacker crafted email from the target account.
168 CVE-2018-15661 200 Bypass +Info 2018-08-21 2019-08-19
2.6
None Remote High Not required Partial None None
** DISPUTED ** An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android. If an attacker controls an application with accessibility permissions and the ability to read SMS messages, then the Forgot Password screen can be used to bypass authentication. NOTE: the vendor does not agree that this is a security issue requiring a fix.
169 CVE-2018-15660 2018-08-21 2019-10-03
4.3
None Remote Medium Not required Partial None None
** DISPUTED ** An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android. If an attacker controls an application with accessibility permissions, then the attacker can read certain Ola Money data such as a credit card number, expiration date, bank account number, and transaction history. NOTE: the vendor does not agree that this is a security issue requiring a fix.
170 CVE-2018-15608 79 XSS 2018-08-28 2020-08-24
4.3
None Remote Medium Not required None Partial None
Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen.
171 CVE-2018-15607 400 DoS 2018-08-21 2019-06-25
7.1
None Remote Medium Not required None None Complete
In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.
172 CVE-2018-15605 79 XSS 2018-08-24 2018-10-26
4.3
None Remote Medium Not required None Partial None
An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted file to manipulate an authenticated user who loads that file through the import feature.
173 CVE-2018-15603 79 XSS 2018-08-21 2018-10-19
4.3
None Remote Medium Not required None Partial None
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen.
174 CVE-2018-15602 79 XSS 2018-08-26 2018-10-17
4.3
None Remote Medium Not required None Partial None
Zyxel VMG3312 B10B devices are affected by a persistent XSS vulnerability via the pages/connectionStatus/connectionStatus-hostEntry.cmd hostname parameter.
175 CVE-2018-15601 20 2018-08-21 2018-10-19
7.5
None Remote Low Not required Partial Partial Partial
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.
176 CVE-2018-15599 200 +Info 2018-08-21 2020-12-30
5.0
None Remote Low Not required Partial None None
The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.
177 CVE-2018-15598 287 2018-08-21 2021-07-28
5.0
None Remote Low Not required Partial None None
Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable.
178 CVE-2018-15596 79 XSS 2018-08-28 2018-11-08
4.3
None Remote Medium Not required None Partial None
An issue was discovered in inc/class_feedgeneration.php in MyBB 1.8.17. On the forum RSS Syndication page, one can generate a URL such as http://localhost/syndication.php?fid=&type=atom1.0&limit=15. The thread titles (within title elements of the generated XML documents) aren't sanitized, leading to XSS.
179 CVE-2018-15594 200 +Info 2018-08-20 2019-10-03
2.1
None Local Low Not required Partial None None
arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests.
180 CVE-2018-15576 502 Exec Code 2018-08-24 2020-08-24
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decrypt function, if the attacker knows the key.
181 CVE-2018-15574 79 XSS 2018-08-20 2018-11-06
4.3
None Remote Medium Not required None Partial None
** DISPUTED ** An issue was discovered in the license editor in Reprise License Manager (RLM) through 12.2BL2. It is a cross-site scripting vulnerability in the /goform/edit_lf_get_data lf parameter via GET or POST. NOTE: the vendor has stated "We do not consider this a vulnerability."
182 CVE-2018-15573 434 2018-08-20 2021-12-21
9.3
None Remote Medium Not required Complete Complete Complete
** DISPUTED ** An issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk (as long as rlm.exe has access to it) via /goform/edit_lf_process with file content in the lfdata parameter and a pathname in the lf parameter. By default, the web interface is on port 5054, and does not require authentication. NOTE: the vendor has stated "We do not consider this a vulnerability."
183 CVE-2018-15572 2018-08-20 2019-10-03
2.1
None Local Low Not required Partial None None
The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it easier for attackers to conduct userspace-userspace spectreRSB attacks.
184 CVE-2018-15571 1236 2018-08-28 2020-08-24
6.8
None Remote Medium Not required Partial Partial Partial
The Export Users to CSV plugin through 1.1.1 for WordPress allows CSV injection.
185 CVE-2018-15570 79 XSS 2018-08-20 2018-10-19
3.5
None Remote Medium ??? None Partial None
In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter.
186 CVE-2018-15569 352 CSRF 2018-08-20 2018-10-12
4.3
None Remote Medium Not required None Partial None
my little forum 2.4.12 allows CSRF for deletion of users.
187 CVE-2018-15568 352 CSRF 2018-08-20 2018-11-01
6.8
None Remote Medium Not required Partial Partial Partial
tp5cms through 2017-05-25 has CSRF via admin.php/category/delete.html.
188 CVE-2018-15567 79 XSS 2018-08-20 2018-10-19
4.3
None Remote Medium Not required None Partial None
CMSUno before 1.5.3 has XSS via the title field.
189 CVE-2018-15566 79 XSS 2018-08-20 2018-10-12
4.3
None Remote Medium Not required None Partial None
tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter.
190 CVE-2018-15565 352 CSRF 2018-08-20 2018-10-12
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in daveismyname simple-cms through 2014-03-11. admin/addpage.php does not require authentication for adding a page. This can also be exploited via CSRF.
191 CVE-2018-15564 352 CSRF 2018-08-20 2018-10-12
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in daveismyname simple-cms through 2014-03-11. There is a CSRF vulnerability that can delete any page via admin/?delpage=8.
192 CVE-2018-15562 79 XSS 2018-08-29 2018-11-05
4.3
None Remote Medium Not required None Partial None
CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php.
193 CVE-2018-15560 190 Overflow 2018-08-20 2019-11-05
5.0
None Remote Low Not required None None Partial
PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and AESNI_decrypt functions, leading to the mishandling of messages shorter than 16 bytes.
194 CVE-2018-15559 79 XSS 2018-08-20 2018-10-12
4.3
None Remote Medium Not required None Partial None
The editor in Xiuno BBS 4.0.4 allows stored XSS.
195 CVE-2018-15553 78 2018-08-20 2018-11-01
9.0
None Remote Low ??? Complete Complete Complete
fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command Injection via shell metacharacters in the smbdUserid or smbdPasswd field.
196 CVE-2018-15536 22 Dir. Trav. 2018-08-24 2018-11-01
5.8
None Remote Medium Not required None Partial Partial
/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 does not properly validate file paths in archives, allowing for the extraction of crafted archives to overwrite arbitrary files via an extract action, aka Directory Traversal.
197 CVE-2018-15535 22 Dir. Trav. 2018-08-24 2018-10-17
5.0
None Remote Low Not required Partial None None
/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize get_file sequences such as ".." that can resolve to a location that is outside of that directory, aka Directory Traversal.
198 CVE-2018-15534 200 +Info 2018-08-21 2018-10-15
5.0
None Remote Low Not required Partial None None
Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information including usernames and hashes via a direct request for /statistics/gscsetup.xml on TCP port 12003.
199 CVE-2018-15533 79 XSS 2018-08-21 2018-10-15
4.3
None Remote Medium Not required None Partial None
A reflected cross-site scripting vulnerability exists in Geutebrueck re_porter 16 before 7.8.974.20 by appending a query string to /modifychannel/exec or /images/*.png on TCP port 12005.
200 CVE-2018-15529 78 2018-08-28 2019-10-03
6.5
None Remote Low ??? Partial Partial Partial
A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands within the filename of a system upgrade upload.
Total number of vulnerabilities : 1019   Page : 1 2 3 4 (This Page)5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.