CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In November 2018

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
51 CVE-2018-19556 20 2018-11-26 2019-04-16
4.3
 None Remote Medium Not required None Partial None
** DISPUTED ** zb_system/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability.
52 CVE-2018-19555 352 CSRF 2018-11-26 2018-12-18
6.8
 None Remote Medium Not required Partial Partial Partial
tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password.
53 CVE-2018-19554 79 XSS 2018-11-26 2019-03-06
3.5
 None Remote Medium ??? None Partial None
An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/image_tool.jsp.
54 CVE-2018-19553 89 Sql 2018-11-26 2018-12-18
6.5
 None Remote Low ??? Partial Partial Partial
Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php
55 CVE-2018-19552 89 Sql 2018-11-26 2018-12-18
6.5
 None Remote Low ??? Partial Partial Partial
Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php.
56 CVE-2018-19551 89 Sql 2018-11-26 2018-12-18
6.5
 None Remote Low ??? Partial Partial Partial
Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php.
57 CVE-2018-19550 434 2018-11-26 2019-05-23
6.5
 None Remote Low ??? Partial Partial Partial
Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a admin/temp/surveys/ URI.
58 CVE-2018-19549 89 Sql 2018-11-26 2018-12-18
6.5
 None Remote Low ??? Partial Partial Partial
Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php.
59 CVE-2018-19548 307 2018-11-26 2020-08-24
5.0
 None Remote Low Not required Partial None None
index.php?r=site%2Flogin in EduSec through 4.2.6 does not restrict sending a series of LoginForm[username] and LoginForm[password] parameters, which might make it easier for remote attackers to obtain access via a brute-force approach.
60 CVE-2018-19547 79 XSS 2018-11-26 2018-12-19
4.3
 None Remote Medium Not required None Partial None
JTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter.
61 CVE-2018-19546 352 XSS CSRF 2018-11-26 2020-08-24
6.8
 None Remote Medium Not required Partial Partial Partial
JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter.
62 CVE-2018-19545 352 CSRF 2018-11-26 2018-12-19
6.8
 None Remote Medium Not required Partial Partial Partial
JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user.
63 CVE-2018-19544 352 CSRF 2018-11-26 2018-12-19
4.3
 None Remote Medium Not required None Partial None
JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news.
64 CVE-2018-19543 125 2018-11-26 2020-09-25
6.8
 None Remote Medium Not required Partial Partial Partial
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
65 CVE-2018-19542 476 DoS 2018-11-26 2020-04-15
4.3
 None Remote Medium Not required None None Partial
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.
66 CVE-2018-19541 125 2018-11-26 2021-01-29
6.8
 None Remote Medium Not required Partial Partial Partial
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.
67 CVE-2018-19540 787 Overflow 2018-11-26 2021-01-29
6.8
 None Remote Medium Not required Partial Partial Partial
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer overflow of size 1 in the function jas_icctxtdesc_input in libjasper/base/jas_icc.c.
68 CVE-2018-19539 617 DoS 2018-11-26 2020-08-24
4.3
 None Remote Medium Not required None None Partial
An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.
69 CVE-2018-19537 434 Exec Code 2018-11-26 2018-12-28
9.0
 None Remote Low ??? Complete Complete Complete
TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin may be used in some cases.
70 CVE-2018-19535 125 DoS 2018-11-26 2019-07-15
4.3
 None Remote Medium Not required None None Partial
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.
71 CVE-2018-19532 476 DoS 2018-11-26 2018-12-19
6.8
 None Remote Medium Not required Partial Partial Partial
A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service.
72 CVE-2018-19531 20 Exec Code 2018-11-26 2018-12-19
7.5
 None Remote Low Not required Partial Partial Partial
HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses java.beans.XMLEncoder unsafely when configured without an xml.codec= setting.
73 CVE-2018-19530 20 Exec Code 2018-11-26 2018-12-19
7.5
 None Remote Low Not required Partial Partial Partial
HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses XStream unsafely when configured with an xml.codec=httl.spi.codecs.XstreamCodec setting.
74 CVE-2018-19528 119 DoS Overflow 2018-11-26 2018-12-19
10.0
 None Remote Low Not required Complete Complete Complete
TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load Exception) via crafted DNS packets to port 53/udp.
75 CVE-2018-19527 79 XSS 2018-11-29 2018-12-26
4.3
 None Remote Medium Not required None Partial None
i4 assistant 7.85 allows XSS via a crafted machine name field within iOS settings.
76 CVE-2018-19520 94 Exec Code 2018-11-25 2019-02-04
6.5
 None Remote Low ??? Partial Partial Partial
An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block certain PHP functions such as eval, but does not prevent use of preg_replace 'e' calls, allowing users to execute arbitrary code by leveraging access to admin template management.
77 CVE-2018-19519 125 2018-11-25 2020-08-24
4.3
 None Remote Medium Not required Partial None None
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
78 CVE-2018-19518 88 Exec Code 2018-11-25 2022-04-18
8.5
 None Remote Medium ??? Complete Complete Complete
University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a "-oProxyCommand" argument.
79 CVE-2018-19517 125 2018-11-24 2018-12-19
4.3
 None Remote Medium Not required None None Partial
An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf.
80 CVE-2018-19504 125 2018-11-23 2020-06-15
6.8
 None Remote Medium Not required Partial Partial Partial
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in libfaad/filtbank.c.
81 CVE-2018-19503 787 Overflow 2018-11-23 2020-08-24
6.8
 None Remote Medium Not required Partial Partial Partial
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack-based buffer overflow in the function calculate_gain() in libfaad/sbr_hfadj.c.
82 CVE-2018-19502 787 Overflow 2018-11-23 2020-08-24
6.8
 None Remote Medium Not required Partial Partial Partial
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a heap-based buffer overflow in the function excluded_channels() in libfaad/syntax.c.
83 CVE-2018-19499 502 Exec Code 2018-11-23 2019-10-03
6.5
 None Remote Low ??? Partial Partial Partial
Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code Execution because authenticated administrators have a reachable call to unserialize in the Gdn_Format class.
84 CVE-2018-19497 125 DoS 2018-11-29 2019-06-02
4.3
 None Remote Medium Not required None None Partial
In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c).
85 CVE-2018-19492 119 Overflow 2018-11-23 2020-09-28
6.8
 None Remote Medium Not required Partial Partial Partial
An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot pngcairo terminal is used as a backend.
86 CVE-2018-19491 119 Overflow 2018-11-23 2020-09-28
6.8
 None Remote Medium Not required Partial Partial Partial
An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot postscript terminal is used as a backend.
87 CVE-2018-19490 787 Overflow 2018-11-23 2020-09-28
6.8
 None Remote Medium Not required Partial Partial Partial
An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range argument that is passed to the plot function.
88 CVE-2018-19486 426 Exec Code 2018-11-23 2019-04-11
7.5
 None Remote Low Not required Partial Partial Partial
Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, because there was a dangerous change from execvp to execv during 2017.
89 CVE-2018-19477 704 Bypass 2018-11-23 2019-04-25
6.8
 None Remote Medium Not required Partial Partial Partial
psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion.
90 CVE-2018-19476 704 Bypass 2018-11-23 2019-04-25
6.8
 None Remote Medium Not required Partial Partial Partial
psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion.
91 CVE-2018-19475 Bypass 2018-11-23 2019-10-03
6.8
 None Remote Medium Not required Partial Partial Partial
psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device remains the same.
92 CVE-2018-19469 79 XSS 2018-11-23 2018-12-19
4.3
 None Remote Medium Not required None Partial None
ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.
93 CVE-2018-19468 89 Sql 2018-11-23 2018-12-19
7.5
 None Remote Low Not required Partial Partial Partial
HuCart 5.7.4 has SQL injection in get_ip() in system/class/helper_class.php via the X-Forwarded-For HTTP header to the user/index.php?load=login&act=act_login URI.
94 CVE-2018-19464 79 XSS 2018-11-22 2020-01-17
3.5
 None Remote Medium ??? None Partial None
Discuz! X3.4 allows XSS via admin.php because admincp/admincp_setting.php and template\default\common\footer.htm mishandles statcode field from third-party stats code.
95 CVE-2018-19463 94 Exec Code 2018-11-22 2019-03-06
6.5
 None Remote Low ??? Partial Partial Partial
** DISPUTED ** zb_system/function/lib/upload.php in Z-BlogPHP through 1.5.1 allows remote attackers to execute arbitrary PHP code by using the image/jpeg content type in an upload to the zb_system/admin/index.php?act=UploadMng URI. NOTE: The vendor's position is "We have no dynamic including. No one can run PHP by uploading an image in current version." It also requires authentication.
96 CVE-2018-19459 119 Overflow 2018-11-22 2018-12-18
6.8
 None Remote Medium Not required Partial Partial Partial
Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file.
97 CVE-2018-19458 287 2018-11-22 2018-12-18
5.0
 None Remote Low Not required Partial None None
In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246.
98 CVE-2018-19457 434 Exec Code 2018-11-22 2018-12-18
6.5
 None Remote Low ??? Partial Partial Partial
Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file.
99 CVE-2018-19443 384 2018-11-22 2018-12-20
4.3
 None Remote Medium Not required Partial None None
The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.
100 CVE-2018-19437 2018-11-22 2019-10-03
4.0
 None Remote Low ??? None Partial None
UCMS 1.4.7 allows remote authenticated users to change the administrator password because $_COOKIE['admin_'.cookiehash] is used for arbitrary cookie values that are set and not empty.
Total number of vulnerabilities : 984   Page : 1 2 (This Page)3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.