CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- vmware esxi, fusion, workstation +2 moreVMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG...6.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG,...8.8 High
- hackerone simplehttpserverPath Traversal in simplehttpserver5.3 Medium
- hitshop project hitshopAn issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege...8.8 High
- yzmcmsAn issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo...4.8 Medium
- radare radare2opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of...5.5 Medium
- radare radare2getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of...5.5 Medium
- sass-lang libsassIn LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to...6.5 Medium
- sass-lang libsassIn LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow...6.5 Medium
- sass-lang libsassIn LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp...6.5 Medium
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related...4.7 Medium
- wavpack, canonical ubuntu linux, debian linux +2 more +4 moreThe function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0...5.5 Medium
- wavpack, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows...5.5 Medium
- kde applicationsmessagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0...5.3 Medium
- netgate pfsenseAn exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE...7.2 High
- netgate pfsenseAn exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE...7.2 High
- netgate pfsenseAn exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE...7.2 High
- intuit quicken 2018An exploitable information disclosure vulnerability exists in the password protection...7.1 High
- drobo 5n2 firmwareIncorrect access control in the Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows...9.8 Critical
- drobo 5n2 firmwareAn insecure transport protocol used by Drobo Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28...9.8 Critical
- drobo 5n2 firmwareDirectory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115...7.5 High
- drobo 5n2 firmwareSystem command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0...9.8 Critical
- drobo 5n2 firmwareCross-site scripting in the MySQL API error page in Drobo 5N2 NAS version 4.0.5-13.28.96115...6.1 Medium
- drobo 5n2 firmwareIncorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5...9.8 Critical
- drobo 5n2 firmwareIncorrect access control in the /drobopix/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5...7.5 High
- drobo 5n2 firmwareSystem command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5...9.8 Critical
- drobo 5n2 firmwareIncorrect access control in the /mysql/api/logfile.php endpoint in Drobo 5N2 NAS version 4.0.5-13...7.5 High
- drobo 5n2 firmwareSystem command injection in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5...9.8 Critical
- drobo 5n2 firmwareCross-site scripting in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13...6.1 Medium
- drobo 5n2 firmwareCross-site scripting in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13...6.1 Medium
- drobo 5n2 firmwareIncorrect access control in the /mysql/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13...7.5 High
- drobo 5n2 firmwareIncorrect access control in the /mysql/api/diags.php endpoint in Drobo 5N2 NAS version 4.0.5-13...7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f,...9.1 Critical
- brocade fabric os, broadcom fabric operating system +1 moreA Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI)...7.8 High
- metinfoIn Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including...6.1 Medium
- metinfoMetinfo 6.1.3 has reflected XSS via the admin/column/move.php lang_columnerr4 parameter.6.1 Medium
- sass-lang libsassIn LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp ...8.8 High
- sass-lang libsass** DISPUTED ** In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop...6.5 Medium
- artifex ghostscript, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreIt was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly...7.3 High
- bob arigato autoresponder and newsletterThere is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1...4.8 Medium
- bob arigato autoresponder and newsletterThere is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1...4.8 Medium
- bob arigato autoresponder and newsletterThere is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1...4.8 Medium
- bob arigato autoresponder and newsletterThese vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability...4.8 Medium
- bob arigato autoresponder and newsletterThese vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability...4.8 Medium
- bob arigato autoresponder and newsletterThere is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1...4.8 Medium
- bob arigato autoresponder and newsletterThere is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1...4.8 Medium
- bob arigato autoresponder and newsletterThere is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1...4.8 Medium
- bob arigato autoresponder and newsletterThere is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1...4.8 Medium
- bob arigato autoresponder and newsletterThere is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These...7.2 High
- hewlett packard enterprise hpe intelligent management center (imc), hp intelligent management center, hpe intelligent management center (imc) +2 moreHPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a...7.5 High
- Show moreLoading…