CVE Vulnerability Database
Search and browse 394,627 CVE records with CVSS scores, EPSS exploit predictions, CISA KEV status and whether the Vulnix engine has a detection for them.
16,510 records from 2018Clear filters
- CVE-2018-20568Critical 9.8Dec 28, 2018Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
- CVE-2018-20567Medium 5.3Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the product in opportunistic circumstances in which install.lock cannot be read.
- CVE-2018-20566Medium 5.3Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation page.
- CVE-2018-20565Medium 4.8Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the nav_name parameter.
- CVE-2018-20564Medium 4.8Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has XSS via the cat_name parameter.
- CVE-2018-20563Medium 4.8Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobile_name parameter.
- CVE-2018-20562Medium 4.8Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article_category.php?rec=update has XSS via the cat_name parameter.
- CVE-2018-20561Medium 4.8Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via the title parameter.
- CVE-2018-20560Medium 4.8Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the show_name parameter.
- CVE-2018-20559Medium 4.8Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name parameter.
- CVE-2018-20558Medium 4.8Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the site_name parameter.
- CVE-2018-20557Medium 4.8Dec 28, 2018An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the page_name parameter.
- CVE-2018-20553High 7.8Dec 28, 2018Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.
- CVE-2018-20552High 7.8Dec 28, 2018Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.
- CVE-2018-20551Medium 6.5Dec 28, 2018A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.
- CVE-2018-20549High 8.8Dec 28, 2018There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19.
- CVE-2018-20548High 8.8Dec 28, 2018There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data.
- CVE-2018-20547High 8.1Dec 28, 2018There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data.
- CVE-2018-20546High 8.1Dec 28, 2018There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case.
- CVE-2018-20545High 8.8Dec 28, 2018There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data.
- CVE-2018-20544Medium 6.5Dec 28, 2018There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19.
- CVE-2018-20543Medium 6.5Dec 28, 2018There is an attempted excessive memory allocation at libxsmm_sparse_csc_reader in generator_spgemm_csc_reader.c in LIBXSMM 1.10 that will cause a denial of service.
- CVE-2018-20542High 8.8Dec 28, 2018There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 (which is in a different part of the source code and is seen at a different address).
- CVE-2018-20541High 8.8Dec 28, 2018There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 (which is in a different part of the source code and is seen at different addresses).
- CVE-2018-20540Medium 6.5Dec 28, 2018There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1.