CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- nuuo nvrmini2 firmwareNUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute...9.8 Critical
- openrefineOpenRefine Directory Traversal6.5 Medium
- hashicorp vaultHashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or...8.1 High
- videolan vlc media player, debian linux +1 moreThe CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an...9.1 Critical
- gitlabThe Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9,...10.0 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before...8.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.2.7, 11.3.x...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before...6.5 Medium
- gitlabAn issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and...6.5 Medium
- gitlabAn issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.8, 11.2.x...7.5 High
- omron cx-one, cx-programmer, cx-server +2 moreTwo stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and...7.8 High
- omron cx-one, cx-programmer, cx-server +2 moreIn CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5...7.8 High
- spidercontrol scada webserverReflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001)...6.1 Medium
- freebsdIn FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one...10.0 Critical
- netapp data ontap operating in 7-mode, data ontap +1 moreData ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which...4.4 Medium
- huawei p20, p20 firmware +1 moreThere is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1...5.9 Medium
- huawei vip app, mate 20 firmware, nova 3 firmware +1 more +3 moreHuawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and...5.3 Medium
- cisco energy management suiteA vulnerability in the configuration of a local database installed as part of the Cisco Energy...7.8 High
- asustor data masterDenial-of-service in the login page of ASUSTOR ADM 3.1.1 allows attackers to prevent users from...7.5 High
- asustor data masterInformation disclosure in the SNMP settings page in ASUSTOR ADM version 3.1.1 allows attackers to...8.8 High
- asustor data masterOS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system...8.8 High
- asustor data masterOS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute...8.8 High
- asustor data masterMissing verification of a password in ASUSTOR ADM version 3.1.1 allows attackers to change...6.5 Medium
- asustor data masterDirectory Traversal in downloadwallpaper.cgi in ASUSTOR ADM version 3.1.1 allows attackers to...7.5 High
- asustor data masterOS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system...9.8 Critical
- asustor data masterOS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system...8.8 High
- asustor data masterCross-site scripting vulnerability in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers...5.4 Medium
- asustor data masterCross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute...5.4 Medium
- asustor data masterDirectory Traversal in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to upload files...7.5 High
- asustor data masterEncryption key disclosure in share.cgi in ASUSTOR ADM version 3.1.1 allows attackers to obtain...6.5 Medium
- asustor data masterOS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system...8.8 High
- asustor data masterDirectory Traversal in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to view...7.5 High
- asustor data masterCross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute...6.1 Medium
- yunohostTwo XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost...5.4 Medium
- yunohostThe YunoHost 2.7.2 through 2.7.14 web application is affected by one HTTP Response Header...8.8 High
- gnu glibc, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname...7.5 High
- pluck-cms pluckPluck v4.7.7 allows CSRF via admin.php?action=settings.8.8 High
- pluck-cms pluckPluck v4.7.7 allows XSS via the admin.php?action=editpage&page= page title.5.4 Medium
- intelliants subrion cmsSubrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter.5.4 Medium
- intelliants subrion cmsSubrion CMS XSS4.8 Medium
- getkirby kirbypanel/login in Kirby v2.5.12 allows XSS via a blog name.5.4 Medium
- freebsdIn FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check...7.5 High
- freebsdIn FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur...7.5 High
- freebsdIn FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when...9.8 Critical
- Show moreLoading…