CVE-2018-13140

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the update mechanism by leveraging use of HTTP to download installation packages.

Metrics

CVSS 3.0 8.1/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-319

Affected software

No affected versions have been published.

Timeline

Published
Sep 24, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-131447.5The transfer and transferFrom functions of a smart contract implementation for Pandora (PDX), an Ethereum token, have an integer overflow. NCVE-2018-131457.5The mintToken function of a smart contract implementation for JavaSwapTest (JST), an Ethereum token, has an integer overflow.CVE-2018-131467.5The mintToken, buy, and sell functions of a smart contract implementation for LEF, an Ethereum token, have an integer overflow.CVE-2018-13153.7In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server canCVE-2018-131536.5In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.CVE-2018-131557.5The mintToken function of a smart contract implementation for GEMCHAIN (GEM), an Ethereum token, has an integer overflow that allows the ownCVE-2018-131567.5The mintToken function of a smart contract implementation for bonusToken (BNS), an Ethereum token, has an integer overflow that allows the oCVE-2018-131577.5The mintToken function of a smart contract implementation for CryptonitexCoin, an Ethereum token, has an integer overflow that allows the owCVE-2018-131587.5The mintToken function of a smart contract implementation for AssetToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-131597.5The mintToken function of a smart contract implementation for bankcoin (BNK), an Ethereum token, has an integer overflow that allows the ownCVE-2018-13167.5The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directoCVE-2018-131607.5The mintToken function of a smart contract implementation for etktokens (ETK), an Ethereum token, has an integer overflow that allows the ow
CVE-2018-13140: High severity, CVSS 8.1 | Vulnix