CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- google androidIn V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a...7.8 High
- hclsoftware connectionsIBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive...4.3 Medium
- ibm financial transaction managerIBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.0, 3.0.2, and 3.0.5...5.4 Medium
- ibm i2 enterprise insight analysisIBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive...5.9 Medium
- ibm i2 enterprise insight analysisIBM i2 Enterprise Insight Analysis 2.1.7 allows web pages to be stored locally which can be read...4.0 Medium
- ibm i2 enterprise insight analysisIBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking...6.1 Medium
- f5 big-ip access policy manager, big-ip access policy manager client, f5 networks, inc. big-ip (apm), big-ip apm clients, big-ip edge client +2 moreThe svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs...7.0 High
- craftercms crafter cmsOS Command Injection in craftercms:crafter-studio8.8 High
- thinkcmfThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php and is...8.8 High
- thinkcmfThinkCMF X2.2.2 has SQL Injection via the function _listorders() in AdminbaseController.class.php...7.2 High
- thinkcmfThinkCMF X2.2.2 has SQL Injection via the function delete() in SlideController.class.php and is...7.2 High
- thinkcmfThinkCMF X2.2.2 has SQL Injection via the function edit_post() in NavController.class.php and is...7.2 High
- thinkcmfThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in...7.2 High
- pbootcmsSearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html...9.8 Critical
- domainmodDomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or...4.8 Medium
- google android, linux kernel, canonical ubuntu linux +6 more +8 moreIn sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This...7.8 High
- audiocoding freeware advanced audio coderAn invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c)...5.5 Medium
- audiocoding freeware advanced audio coderAn invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c)...5.5 Medium
- audiocoding freeware advanced audio coderAn invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c)...5.5 Medium
- audiocoding freeware advanced audio coderAn invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c)...5.5 Medium
- audiocoding freeware advanced audio coderAn invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c)...5.5 Medium
- audiocoding freeware advanced audio coderAn invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c)...5.5 Medium
- artifex mupdfIn Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to...5.5 Medium
- artifex mupdfIn Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service ...5.5 Medium
- oracle tarantella enterpriseTarantella Enterprise before 3.11 allows bypassing Access Control.8.8 High
- oracle tarantella enterpriseTarantella Enterprise before 3.11 allows Directory Traversal.7.5 High
- antiy anti virus lab atoolLocal attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy...7.8 High
- arm mbed tlsArm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker...4.7 Medium
- solarwinds sftp\/scp serverSolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and...9.1 Critical
- solarwinds sftp\/scp serverIn SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and...9.8 Critical
- adiscon loganalyzerlogin.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.6.1 Medium
- intel integrated performance primitivesData leakage in cryptographic libraries for Intel IPP before 2019 update1 release may allow an...5.5 Medium
- kubernetes, netapp trident, redhat openshift container platform +2 morePrivilege Escalation in Kubernetes9.8 Critical
- kubernetes minikubeMinikube RCE via DNS Rebinding8.1 High
- kubernetesKubernetes Arbitrary Command Injection5.9 Medium
- cairographics cairocairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free...6.5 Medium
drupal/salesforcePackagistThis module enables Drupal to synchronize entities with Salesforce records. The module includes a page that does not sufficiently protect access rights, resulting in potential information disclosure.…No score- cloud foundry nfs volume release, pivotal software cloud foundry nfs volume +1 moreNFS Volume release errand leaks cf admin credentials in logs8.4 High
- dell encryption (formerly dell data protection | encryption), data protection \| encryption +1 moreDell Encryption Enterprise \ Dell Data Protection Encryption Information Disclosure Vulnerability4.3 Medium
- adobe campaignIBM Campaign 9.1.0 and 9.1.2 could allow a local user to obtain admini privileges due to the...8.4 High
- ibm qradar advisor with watson, qradar siem +1 moreIBM QRadar Advisor with Watson 1.14.0 discloses sensitive information to unauthorized users. The...5.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when...7.1 High
- ibm qradar siem, qradar incident forensics +1 moreIBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a...4.3 Medium
- ibm qradar siem, qradar incident forensics +1 moreIBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials which could allow an attacker to bypass...5.9 Medium
- ibm qradar incident forensicsIBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow...7.5 High
- ibm qradar siem, qradar incident forensics +1 moreIBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another...4.0 Medium
- ibm qradar siem, qradar incident forensics +1 moreIBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This...3.7 Low
- slice-deque project slice-dequeMemory corruption slice-deque9.8 Critical
- qt, opensuse leap +1 moreA keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x,...7.5 High
- Show moreLoading…