CVE-2018-18958

OPNsense 18.7.x before 18.7.7 has Incorrect Access Control.

• CWE-284

• https://forum.opnsense.org/index.php?board=11.0Release Notes, Vendor Advisory
• https://forum.opnsense.org/index.php?topic=10181.0Release Notes, Vendor Advisory
• https://forum.opnsense.org/index.php?board=11.0Release Notes, Vendor Advisory
• https://forum.opnsense.org/index.php?topic=10181.0Release Notes, Vendor Advisory

Published

Jun 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18950KindEditor through 4.1.11 has a path traversal vulnerability…
• CVE-2018-18952JEECMS 9.3 has XSS via an index.do#/content/update?type=upda…
• CVE-2018-18954The pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu bef…
• CVE-2018-18955In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map…
• CVE-2018-18956The ProcessMimeEntity function in util-decode-mime.c in Suri…
• CVE-2018-18957An issue has been found in libIEC61850 v1.3. It is a stack-b…
• CVE-2018-18959An issue was discovered on Epson WorkForce WF-2861 10.48 LQ2…
• CVE-2018-1896IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible …4.6
• CVE-2018-18960An issue was discovered on Epson WorkForce WF-2861 10.48 LQ2…
• CVE-2018-18963Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de…
• CVE-2018-18964osCommerce 2.3.4.1 has an incomplete '.htaccess' for blackli…
• CVE-2018-18965osCommerce 2.3.4.1 has an incomplete '.htaccess' for blackli…