CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In November 2018 (CVSS score >= 7)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
51 CVE-2018-19063 798 2018-11-07 2018-12-11
10.0
None Remote Low Not required Complete Complete Complete
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The admin account has a blank password.
52 CVE-2018-19061 89 Sql 2018-11-07 2018-12-10
7.5
None Remote Low Not required Partial Partial Partial
DedeCMS 5.7 SP2 has SQL Injection via the dede\co_do.php ids parameter.
53 CVE-2018-19047 918 2018-11-07 2019-02-01
7.5
None Remote Low Not required Partial Partial Partial
** DISPUTED ** mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<img src="http://192.168' substring that triggers a call to getImage in Image/ImageProcessor.php. NOTE: the software maintainer disputes this, stating "If you allow users to pass HTML without sanitising it, you're asking for trouble."
54 CVE-2018-18963 89 Sql 2018-11-06 2018-12-13
7.5
None Remote Low Not required Partial Partial Partial
Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI.
55 CVE-2018-18957 787 Overflow 2018-11-05 2020-08-24
7.5
None Remote Low Not required Partial Partial Partial
An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goose_publisher.c.
56 CVE-2018-18949 89 Sql 2018-11-05 2021-05-04
7.5
None Remote Low Not required Partial Partial Partial
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.
57 CVE-2018-18934 352 Exec Code CSRF 2018-11-05 2018-12-11
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in PopojiCMS v2.0.1. admin_component.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the fupload parameter to upload a ZIP file containing arbitrary PHP code (that is extracted and can be executed). This can also be exploited via CSRF.
58 CVE-2018-18928 190 Overflow 2018-11-04 2019-01-16
7.5
None Remote Low Not required Partial Partial Partial
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
59 CVE-2018-18926 384 Exec Code 2018-11-04 2019-01-29
7.5
None Remote Low Not required Partial Partial Partial
Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron.
60 CVE-2018-18925 384 Exec Code 2018-11-04 2019-01-29
7.5
None Remote Low Not required Partial Partial Partial
Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go. This is related to session ID handling in the go-macaron/session code for Macaron.
61 CVE-2018-18903 94 Exec Code 2018-11-03 2018-12-26
7.5
None Remote Low Not required Partial Partial Partial
Vanilla 2.6.x before 2.6.4 allows remote code execution.
62 CVE-2018-18892 94 Exec Code 2018-11-01 2018-12-03
7.5
None Remote Low Not required Partial Partial Partial
MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in mc_conf.php.
63 CVE-2018-18888 434 2018-11-01 2019-01-29
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed.
64 CVE-2018-18887 89 Sql 2018-11-01 2018-12-08
7.5
None Remote Low Not required Partial Partial Partial
S-CMS PHP 1.0 has SQL injection in member/member_news.php via the type parameter (aka the $N_type field).
65 CVE-2018-18883 476 DoS 2018-11-01 2019-01-24
7.2
None Local Low Not required Complete Complete Complete
An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact because nested VT-x is not properly restricted.
66 CVE-2018-18864 79 XSS 2018-11-20 2018-12-31
9.3
None Remote Medium Not required Complete Complete Complete
Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed.
67 CVE-2018-18861 119 Exec Code Overflow 2018-11-20 2018-12-18
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.
68 CVE-2018-18860 2018-11-30 2020-05-11
7.2
None Local Low Not required Complete Complete Complete
A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-permissive configuration settings and a SUID binary, an attacker is able to execute arbitrary binaries as root.
69 CVE-2018-18859 78 Exec Code 2018-11-20 2020-05-11
7.2
None Local Low Not required Complete Complete Complete
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the value of the "tun_path" or "tap_path" pathname in a kextload() call.
70 CVE-2018-18858 78 Exec Code 2018-11-20 2020-05-11
7.2
None Local Low Not required Complete Complete Complete
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the system function to execute the "tun_path" or "tap_path" pathname within a shell command.
71 CVE-2018-18857 78 Exec Code 2018-11-20 2020-05-11
7.2
None Local Low Not required Complete Complete Complete
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the system function to execute the "command_line" parameter as a shell command.
72 CVE-2018-18856 78 Exec Code 2018-11-20 2020-05-11
7.2
None Local Low Not required Complete Complete Complete
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the system function to execute the "openvpncmd" parameter as a shell command.
73 CVE-2018-18806 89 Sql 2018-11-16 2018-12-17
7.5
None Remote Low Not required Partial Partial Partial
School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb.
74 CVE-2018-18805 89 Sql 2018-11-16 2022-03-29
7.5
None Remote Low Not required Partial Partial Partial
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.
75 CVE-2018-18804 89 Sql 2018-11-16 2018-12-17
7.5
None Remote Low Not required Partial Partial Partial
Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.
76 CVE-2018-18803 89 Sql 2018-11-16 2018-12-17
7.5
None Remote Low Not required Partial Partial Partial
Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb.
77 CVE-2018-18801 89 Sql 2018-11-16 2018-12-18
7.5
None Remote Low Not required Partial Partial Partial
The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id=[SQL].
78 CVE-2018-18796 89 Sql 2018-11-16 2018-12-18
7.5
None Remote Low Not required Partial Partial Partial
Library Management System 1.0 has SQL Injection via the "Search for Books" screen.
79 CVE-2018-18795 89 Sql 2018-11-16 2018-12-18
7.5
None Remote Low Not required Partial Partial Partial
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.
80 CVE-2018-18793 434 2018-11-16 2018-12-18
7.5
None Remote Low Not required Partial Partial Partial
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.
81 CVE-2018-18763 89 Sql 2018-11-16 2018-12-18
7.5
None Remote Low Not required Partial Partial Partial
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
82 CVE-2018-18761 89 Sql 2018-11-16 2020-05-20
7.5
None Remote Low Not required Partial Partial Partial
SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.
83 CVE-2018-18755 89 Sql 2018-11-16 2020-06-25
7.5
None Remote Low Not required Partial Partial Partial
K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/update user_id parameter.
84 CVE-2018-18714 787 DoS Exec Code Overflow 2018-11-01 2020-08-24
7.2
None Local Low Not required Complete Complete Complete
RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to denial of service (DoS) or code execution with root privileges.
85 CVE-2018-18649 Exec Code 2018-11-29 2020-08-24
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows for remote code execution.
86 CVE-2018-18619 89 Sql 2018-11-29 2018-12-28
7.5
None Remote Low Not required Partial Partial Partial
internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing remote attackers to execute the sqli attack via a URL in the "page" parameter. NOTE: The product is discontinued.
87 CVE-2018-18563 434 Exec Code 2018-11-20 2019-10-03
8.3
None Local Network Low Not required Complete Complete Complete
An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 (Serial Number below KQ0400000 or KS0400000) and cobas h 232 before 04.00.04 (Serial Number above KQ0400000 or KS0400000). Improper access control to a service command allows attackers in the adjacent network to execute arbitrary code on the system through a crafted Poct1-A message.
88 CVE-2018-18561 732 Exec Code 2018-11-20 2020-08-24
7.7
None Local Network Low ??? Complete Complete Complete
An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h232 Handheld Base Unit before 03.01.04. Insecure permissions in a service interface may allow authenticated attackers in the adjacent network to execute arbitrary commands on the operating system.
89 CVE-2018-18440 119 Overflow 2018-11-20 2019-12-10
7.2
None Local Low Not required Complete Complete Complete
DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled.
90 CVE-2018-18439 119 Overflow 2018-11-20 2019-01-02
10.0
None Remote Low Not required Complete Complete Complete
DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image.
91 CVE-2018-17953 2018-11-27 2019-10-09
9.3
None Remote Medium Not required Complete Complete Complete
A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being applied (fail open).
92 CVE-2018-17936 434 Exec Code 2018-11-27 2019-10-09
7.5
None Remote Low Not required Partial Partial Partial
NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote code execution.
93 CVE-2018-17934 22 Exec Code Dir. Trav. +Info 2018-11-27 2019-10-09
7.5
None Remote Low Not required Partial Partial Partial
NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.
94 CVE-2018-17930 787 Exec Code Overflow 2018-11-28 2020-09-18
10.0
None Remote Low Not required Complete Complete Complete
A stack-based buffer overflow vulnerability has been identified in Teledyne DALSA Sherlock Version 7.2.7.4 and prior, which may allow remote code execution.
95 CVE-2018-17918 287 Bypass 2018-11-02 2019-10-09
7.5
None Remote Low Not required Partial Partial Partial
Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.
96 CVE-2018-17916 787 Exec Code Overflow 2018-11-02 2021-04-08
10.0
None Remote Low Not required Complete Complete Complete
InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. A remote attacker could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed. If InduSoft Web Studio remote communication security was not enabled, or a password was left blank, a remote user could send a carefully crafted packet to invoke an arbitrary process, with potential for code to be executed. The code would be executed under the privileges of the InduSoft Web Studio or InTouch Edge HMI runtime and could lead to a compromise of the InduSoft Web Studio or InTouch Edge HMI server machine.
97 CVE-2018-17914 Exec Code 2018-11-02 2021-04-08
10.0
None Remote Low Not required Complete Complete Complete
InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Edge HMI (formerly InTouch Machine Edition) runtime.
98 CVE-2018-17190 Exec Code 2018-11-19 2020-08-24
7.5
None Remote Low Not required Partial Partial Partial
In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The master itself does not, by design, execute user code. A specially-crafted request to the master can, however, cause the master to execute code too. Note that this does not affect standalone clusters with authentication enabled. While the master host typically has less outbound access to other resources than a worker, the execution of code on the master is nevertheless unexpected.
99 CVE-2018-16850 89 Sql 2018-11-13 2019-10-09
7.5
None Remote Low Not required Partial Partial Partial
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.
100 CVE-2018-16844 400 2018-11-07 2022-02-22
7.8
None Remote Low Not required None None Complete
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.
Total number of vulnerabilities : 268   Page : 1 2 (This Page)3 4 5 6
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.