Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2018
November

CVEs published in November 2018

989 vulnerabilities, 150 critical, 5 exploited.

Known exploitedIn KEVPublic exploitFix available

terra-master terramaster operating systemDirectory Traversal in the explorer application in TerraMaster TOS version 3.1.03 allows...CVE-2018-133327.5 HighNovember 27, 2018
terra-master terramaster operating systemCross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to...CVE-2018-133316.1 MediumNovember 27, 2018
terra-master terramaster operating systemSystem command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to...CVE-2018-133307.2 HighNovember 27, 2018
nuuo cmsNUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL...CVE-2018-18982Public exploitEPSS 62.5%8.8 HighNovember 27, 2018
nuuo cmsNUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can...CVE-2018-17936Public exploitEPSS 15.3%9.8 CriticalNovember 27, 2018
nuuo cmsNUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname...CVE-2018-17934EPSS 19.7%9.8 CriticalNovember 27, 2018
mi miwifi osSystem command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers...CVE-2018-16130EPSS 24.0%8.8 HighNovember 27, 2018
zyxel nsa325 v2 firmwareA system command injection vulnerability in zyshclient in ZyXEL NSA325 V2 version 4.81 allows...CVE-2018-148938.8 HighNovember 27, 2018
zyxel nsa325 v2 firmwareMissing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2...CVE-2018-148928.8 HighNovember 27, 2018
terra-master terramaster operating systemSession Fixation in the web application for TerraMaster TOS version 3.1.03 allows attackers to...CVE-2018-133375.4 MediumNovember 27, 2018
terra-master terramaster operating systemCross-site scripting in handle.php in TerraMaster TOS version 3.1.03 allows attackers to execute...CVE-2018-133346.1 MediumNovember 27, 2018
terra-master terramaster operating systemCross-site scripting in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to...CVE-2018-133296.1 MediumNovember 27, 2018
totolink a3002ru firmwareSystem command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to...CVE-2018-133169.8 CriticalNovember 27, 2018
totolink a3002ru firmwareSystem command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to...CVE-2018-133149.8 CriticalNovember 27, 2018
totolink a3002ru firmwareSystem command injection in fromNtp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute...CVE-2018-133079.8 CriticalNovember 27, 2018
totolink a3002ru firmwareSystem command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to...CVE-2018-133069.8 CriticalNovember 27, 2018
mi miwifi osSystem command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15...CVE-2018-13023EPSS 24.0%8.8 HighNovember 27, 2018
mi miwifi osCross-site scripting vulnerability in the API 404 page on Xiaomi Mi Router 3 version 2.22.15...CVE-2018-130226.1 MediumNovember 27, 2018
palo alto networks expeditionThe Expedition Migration tool 1.0.106 and earlier may allow an unauthenticated attacker to...CVE-2018-101427.5 HighNovember 27, 2018
qnap qtsSecurity Advisory for Vulnerabilities in QTSCVE-2018-07195.5 MediumNovember 27, 2018
umbraco cms, cybersecurity philippines - cert umbracocms +1 moreUmbraco CMS vulnerable to stored XSSCVE-2018-172564.8 MediumNovember 27, 2018
systemd Ubuntusystemd regressionUSN-3816-3Fix availableNo scoreNovember 27, 2018
nvidia geforce experienceNVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows where...CVE-2018-62665.5 MediumNovember 27, 2018
nvidia geforce experienceNVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 during...CVE-2018-62657.8 HighNovember 27, 2018
nvidia geforce experienceNVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in...CVE-2018-62637.8 HighNovember 27, 2018
symantec security analytics, symantec corporation security analytics (sa) +1 moreThe Symantec Security Analytics (SA) 7.x prior to 7.3.4 Web UI is susceptible to a reflected...CVE-2018-122416.1 MediumNovember 27, 2018
vmware fusion, workstation, workstation and fusion +2 moreVMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and...CVE-2018-69838.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-59197.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-59107.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-59097.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-59087.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-59067.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-59047.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-58617.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-58567.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119957.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119567.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119466.5 MediumNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119437.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119197.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119187.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119147.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119137.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119127.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119117.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119107.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119097.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119087.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119077.8 HighNovember 27, 2018
google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119067.8 HighNovember 27, 2018
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open