CVE-2018-20xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
796 records · Page 1 of 8
An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.
UpdatedAn issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption.
UpdatedAn issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.
UpdatedAn issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling.
UpdatedAn issue was discovered in the slice-deque crate before 0.1.16 for Rust. move_head_unchecked allows memory corruption because deque updates are mishandled.
UpdatedAn issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled.
UpdatedAn issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization.
UpdatedAn issue was discovered in the claxon crate before 0.4.1 for Rust. Uninitialized memory can be exposed because certain decode buffer sizes are mishandled.
UpdatedAn issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free.
UpdatedAn issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive.
UpdatedAn issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic.
UpdatedThe wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation.
Updated- CVE-2018-20987: The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection. Unscored
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.
Updated The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.
UpdatedThe wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.
Updated- CVE-2018-20984: The patreon-connect plugin before 1.2.2 for WordPress has Object Injection. Unscored
The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.
Updated The wp-retina-2x plugin before 5.2.3 for WordPress has XSS.
UpdatedThe media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens.
UpdatedThe ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.
Updated- CVE-2018-20980: The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering. Unscored
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering.
Updated The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.
UpdatedThe wp-all-import plugin before 3.4.7 for WordPress has XSS.
UpdatedThe all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.
UpdatedAn issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure.
Updated- CVE-2018-20975: Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb. Unscored
Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.
Updated The js-jobs plugin before 1.0.7 for WordPress has CSRF.
UpdatedThe companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.
UpdatedThe companion-auto-update plugin before 3.2.1 for WordPress has CSRF.
UpdatedThe church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.
UpdatedThe pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues.
Updateddo_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.
UpdatedThe wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.
UpdatedThe wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.
UpdatedThe woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature.
UpdatedThe ultimate-member plugin before 2.0.4 for WordPress has XSS.
UpdatedThe contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.
UpdatedThe contact-form-to-email plugin before 1.2.66 for WordPress has XSS.
UpdatedThe Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
UpdatedIn the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.
UpdatedNespresso Prodigio devices lack Bluetooth connection security.
UpdatedJura E8 devices lack Bluetooth connection security.
UpdatedThe Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device.
UpdatedThe Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay attacks.
UpdatedSwann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31.
UpdatedSwann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31.
UpdatedThe "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.
Updated- CVE-2018-20953: cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389). Unscored
cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389).
Updated cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388).
Updated- CVE-2018-20951: cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387). Unscored
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387).
Updated - CVE-2018-20950: cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386). Unscored
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386).
Updated cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).
Updated- CVE-2018-20948: cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383). Unscored
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383).
Updated cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).
UpdatedcPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archive_sync_zones script (SEC-355).
Updated- CVE-2018-20945: bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354). Unscored
bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).
Updated cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test (SEC-353).
UpdatedcPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon a post-update task (SEC-352).
UpdatedcPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon configuring crontab (SEC-351).
UpdatedcPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin (SEC-349).
UpdatedcPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon the enabling of backups (SEC-342).
UpdatedcPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by that user) by leveraging backups (SEC-339).
UpdatedcPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324).
UpdatedcPanel before 68.0.27 does not validate database and dbuser names during renames (SEC-321).
UpdatedcPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf (SEC-308).
UpdatedcPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).
UpdatedcPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).
Updated- CVE-2018-20933: cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410). Unscored
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).
Updated cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).
UpdatedcPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405).
UpdatedcPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401).
UpdatedcPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).
Updated- CVE-2018-20928: cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391). Unscored
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).
Updated cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).
UpdatedcPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).
UpdatedcPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).
UpdatedcPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).
UpdatedcPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).
Updated- CVE-2018-20922: cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376). Unscored
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).
Updated cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).
Updated- CVE-2018-20920: cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374). Unscored
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).
Updated - CVE-2018-20919: cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373). Unscored
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).
Updated cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
UpdatedcPanel before 70.0.23 allows any user to disable Solr (SEC-371).
UpdatedcPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
Updated- CVE-2018-20915: cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369). Unscored
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).
Updated In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).
UpdatedcPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364).
Updated- CVE-2018-20912: cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362). Unscored
cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362).
Updated cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359).
UpdatedcPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).
UpdatedcPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338).
UpdatedcPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).
UpdatedcPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).
UpdatedcPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430).
UpdatedcPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).
UpdatedcPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427).
UpdatedcPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).
UpdatedcPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation (SEC-408).
UpdatedcPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).
UpdatedcPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399).
Updated