CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- hewlett packard enterprise hpe intelligent management center (imc), hp intelligent management center, hpe intelligent management center (imc) +2 moreHPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a...5.3 Medium
- hewlett packard enterprise hpe intelligent management center (imc), hp intelligent management center, hpe intelligent management center (imc) +2 moreHPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote...9.8 Critical
- hewlett packard enterprise hpe integrated lights-out 5 (ilo 5) for hpe gen10 servers, hp integrated lights-out 5 firmware +1 moreA security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally...6.6 Medium
- hewlett packard enterprise windows firmware installer for gen9, gen8, g7,and g6 hpe servers, hp integrated lights-out 2 firmware, integrated lights-out 3 firmware +99 more +101 moreThe HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows...5.5 Medium
- ibm websphere application serverIBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated...6.0 Medium
- facebook hhvmA potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can...5.9 Medium
- [unknown] nettleA Bleichenbacher type side-channel based padding oracle attack was found in the way nettle...4.7 Medium
- [unknown] gnutlsA Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls...4.7 Medium
- powerdns recursor, [unknown] pdns-recursor +1 moreAn issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending...7.5 High
- sass-lang libsassIn LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List:...6.5 Medium
- ninjaforms ninja formsAn open redirect in the Ninja Forms plugin before 3.3.19.1 for WordPress allows Remote Attackers...6.1 Medium
- chipsbank umptoolChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows...6.8 Medium
- internet2 grouperCross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3...6.1 Medium
- jiacrontab project jiacrontabjiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit...7.2 High
- litespeedtech openlitespeedThe server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of...6.7 Medium
- litespeedtech openlitespeedThe server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for...6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA...7.8 High
- polkit project polkit, canonical ubuntu linux, debian linux +2 moreA flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than...8.8 High
- lxml, canonical ubuntu linux, debian linux +2 moreImproper Neutralization of Input During Web Page Generation in LXML6.1 Medium
kdeconnect-kdeMageiaUpdated kdeconnect-kde packages fix security vulnerabilityNo score- atlantiswordprocessor atlantis word processorAn exploitable uninitialized pointer vulnerability exists in the rich text format parser of...8.8 High
- atlantiswordprocessor atlantis word processorAn exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis...8.8 High
- atlantiswordprocessor atlantis word processorAn exploitable arbitrary write vulnerability exists in the open document format parser of the...8.8 High
- talos tp-link, tp-link tl-r600vpn firmware +1 moreAn exploitable remote code execution vulnerability exists in the HTTP header-parsing function of...7.2 High
- talos tp-link, tp-link tl-r600vpn firmware +1 moreAn exploitable remote code execution vulnerability exists in the ping and tracert functionality...7.2 High
- talos tp-link, tp-link tl-r600vpn firmware +1 moreAn exploitable information disclosure vulnerability exists in the HTTP server functionality of...7.5 High
- php-proxyXSS in PHP-Proxy-App through v3.06.1 Medium
- php-proxyWeak Cryptography in PHP-Proxy7.5 High