CVE-2018-4000 to CVE-2018-4999

113 CVEs with public proof-of-concept exploits.

• CVE-2018-40001 PoCAn exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A specially…
• CVE-2018-40011 PoCAn exploitable uninitialized pointer vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A…
• CVE-2018-40021 PoCAn exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. When parsing…
• CVE-2018-40031 PoCAn exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. The string…
• CVE-2018-40041 PoCAn exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the disconnectService functionality. A…
• CVE-2018-40051 PoCAn exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the configureRoutingWithCommand…
• CVE-2018-40061 PoCAn exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig functionality. A…
• CVE-2018-40071 PoCAn exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The…
• CVE-2018-40081 PoCAn exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript command. The command…
• CVE-2018-40091 PoCAn exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing. A…
• CVE-2018-40101 PoCAn exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted…
• CVE-2018-40111 PoCAn exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003. When parsing SRV…
• CVE-2018-40121 PoCAn exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function…
• CVE-2018-40132 PoCsAn exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version…
• CVE-2018-40181 PoCAn exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on Anker Roav A1 Dashcam version…
• CVE-2018-40191 PoCAn exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific…
• CVE-2018-40201 PoCAn exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific…
• CVE-2018-40211 PoCAn exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific…
• CVE-2018-40221 PoCA use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV (matroska) file format. A specially crafted…
• CVE-2018-40231 PoCAn exploitable code execution vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the…
• CVE-2018-40241 PoCAn exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset firmware, running on…
• CVE-2018-40251 PoCAn exploitable denial-of-service vulnerability exists in the XML_GetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware, running on…
• CVE-2018-40261 PoCAn exploitable denial-of-service vulnerability exists in the XML_GetScreen Wi-Fi command of the NT9665X Chipset firmware, running on the…
• CVE-2018-40271 PoCAn exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the…
• CVE-2018-40281 PoCAn exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version…
• CVE-2018-40291 PoCAn exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the…
• CVE-2018-40301 PoCAn exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe…
• CVE-2018-40311 PoCAn exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the…
• CVE-2018-40381 PoCAn exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2…
• CVE-2018-40391 PoCAn exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can…
• CVE-2018-40401 PoCAn exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A…
• CVE-2018-40431 PoCAn exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to improper input…
• CVE-2018-40481 PoCAn exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy…
• CVE-2018-40541 PoCA local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A…
• CVE-2018-40551 PoCA local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A…
• CVE-2018-40561 PoCAn exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login…
• CVE-2018-40611 PoCAn exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW…
• CVE-2018-40622 PoCsA hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd…
• CVE-2018-40631 PoCKEVAn exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A…
• CVE-2018-40641 PoCAn exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450…
• CVE-2018-40651 PoCAn exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi functionality of Sierra Wireless AirLink ES450…
• CVE-2018-40661 PoCAn exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3…
• CVE-2018-40671 PoCAn exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink…
• CVE-2018-40691 PoCAn information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3…
• CVE-2018-40701 PoCAn exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless…
• CVE-2018-40711 PoCAn exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless…
• CVE-2018-40721 PoCAn exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless…
• CVE-2018-40731 PoCAn exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless…
• CVE-2018-40831 PoCAn issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Touch Bar Support" component…
• CVE-2018-40875 PoCsAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is…
• CVE-2018-40891 PoCAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3…
• CVE-2018-40901 PoCAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is…
• CVE-2018-40951 PoCAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is…
• CVE-2018-41216 PoCsAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on…
• CVE-2018-41242 PoCsAn issue was discovered in certain Apple products. iOS before 11.2.6 is affected. macOS before 10.13.3 Supplemental Update is affected…
• CVE-2018-41252 PoCsAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on…
• CVE-2018-41391 PoCAn issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "kext tools" component. It…
• CVE-2018-41502 PoCsAn issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is…
• CVE-2018-41621 PoCAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on…
• CVE-2018-41921 PoCAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on…
• CVE-2018-41932 PoCsAn issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Windows Server" component. It…
• CVE-2018-41971 PoCA use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12…
• CVE-2018-42001 PoCAn issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on…
• CVE-2018-42061 PoCAn issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is…
• CVE-2018-42181 PoCAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on…
• CVE-2018-42221 PoCAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on…
• CVE-2018-42301 PoCAn issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "NVIDIA Graphics Drivers"…
• CVE-2018-423317 PoCsAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on…
• CVE-2018-42372 PoCsAn issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is…
• CVE-2018-42401 PoCAn issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is…
• CVE-2018-42412 PoCsAn issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is…
• CVE-2018-42438 PoCsAn issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is…
• CVE-2018-42481 PoCAn out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra…
• CVE-2018-42591 PoCMultiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra…
• CVE-2018-42801 PoCA memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra…
• CVE-2018-43061 PoCA use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12…
• CVE-2018-43121 PoCA use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12…
• CVE-2018-43141 PoCA use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12…
• CVE-2018-43151 PoCA use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12…
• CVE-2018-43171 PoCA use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12…
• CVE-2018-43181 PoCA use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12…
• CVE-2018-43231 PoCMultiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12…
• CVE-2018-43272 PoCsA memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.
• CVE-2018-43281 PoCMultiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12…
• CVE-2018-43302 PoCsIn iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling.
• CVE-2018-43431 PoCA memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14…
• CVE-2018-43661 PoCA memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.
• CVE-2018-43671 PoCA memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.
• CVE-2018-43821 PoCMultiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1…
• CVE-2018-43841 PoCA memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, watchOS 5.1.
• CVE-2018-43862 PoCsMultiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1…
• CVE-2018-44042 PoCsIn iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling.
• CVE-2018-440718 PoCsA memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS…
• CVE-2018-44111 PoCA memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.
• CVE-2018-44151 PoCA memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.
• CVE-2018-44163 PoCsMultiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1…
• CVE-2018-44311 PoCA memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave…
• CVE-2018-44351 PoCA logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS…
• CVE-2018-44381 PoCA logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions…
• CVE-2018-44416 PoCsA memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1…
• CVE-2018-44421 PoCA memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1…
• CVE-2018-44431 PoCA memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1…
• CVE-2018-48633 PoCsSophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the…
• CVE-2018-48681 PoCThe Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive…
• CVE-2018-487817 PoCsKEVA use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer…
• CVE-2018-48791 PoCAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394…
• CVE-2018-49011 PoCAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394…
• CVE-2018-49341 PoCAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could…
• CVE-2018-49351 PoCAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could…
• CVE-2018-49361 PoCAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. Successful exploitation could lead to…
• CVE-2018-49371 PoCAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could…
• CVE-2018-49391 PoCKEVAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of…
• CVE-2018-49932 PoCsAdobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO…