CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- mcafee true keyTrue Key (TK) Windows Client - Weak Directory Permission Vulnerability7.2 High
- zenitel ip-stationweb firmwareZenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station...4.8 Medium
- zenitel ip-stationweb firmwareZenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH_INFO.6.1 Medium
- sales \& company management system project \& company management systemAn issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. It has...9.8 Critical
- sales \& company management system project \& company management systemAn issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. An email...6.1 Medium
- sales \& company management system project \& company management systemAn issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. There is...8.8 High
- qemu, opensuse leap +1 moreThe Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to...5.7 Medium
- moxa nport w2x50a firmwareAn exploitable authenticated command-injection vulnerability exists in the web server...8.8 High
- moxa nport w2x50a firmwareAn exploitable authenticated command-injection vulnerability exists in the web server...8.8 High
- amazon freertos, web services freertos +1 moreAn issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0...5.9 Medium
- amazon freertos, web services freertos +1 moreAn issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0...5.9 Medium
- amazon freertos, web services freertos +1 moreAn issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0...8.1 High
- amazon freertos, web services freertos +1 moreAn issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0...5.9 Medium
- amazon freertos, web services freertos +1 moreAn issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0...5.9 Medium
- amazon freertos, web services freertos +1 moreAn issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0...5.9 Medium
- amazon web services freertosAmazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary...8.1 High
- amazon freertos, web services freertos +1 moreAmazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and...5.9 Medium
- amazon freertos, web services freertos +1 moreAmazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and...8.1 High
- amazon freertos, web services freertos +1 moreAmazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and...8.1 High
- amazon freertos, web services freertos +1 moreAmazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and...5.9 Medium
- amazon freertos, web services freertos +1 moreAmazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and...7.4 High
- amazon web services freertosAmazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in...8.1 High
- actiontec c1000a firmwarePersistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking...6.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller.6.1 Medium
- pixelimityPixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as...4.8 Medium
- domainmodDomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.4.8 Medium
- domainmodDomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field.4.8 Medium
- domainmodDomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID...4.8 Medium
- norton password manager, symantec norton password manager +1 moreNorton Password Manager for Android (formerly Norton Identity Safe) may be susceptible to a cross...6.1 Medium
ghostscriptUbuntughostscript regressionNo score- freeswitchFreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute...7.5 High
- misp-project mispAn issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php (the STIX 1 import...8.8 High
- google androidOn Pixel devices there is a bug causing verified boot to show the same certificate fingerprint...7.8 High
- google androidIn process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a...5.7 Medium
- google androidIn readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow....7.5 High
- google androidIn bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect...7.5 High
- google androidIn HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing...7.8 High
- google androidIn persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write...7.8 High
- google androidIn rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a...7.8 High
- google androidIn really_install_package of install.cpp, there is a possible free of arbitrary memory due to...7.8 High
- google androidIn ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an...9.8 Critical
- google androidIn l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing...8.8 High
- google androidIn dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed...5.5 Medium
- google androidIn MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure...7.8 High
- google androidIn ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing...5.5 Medium
- google androidIn CAacDecoder_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing...7.8 High
- google androidIn CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing...7.8 High
- google androidIn lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds...7.8 High
- google androidIn multiple functions of ContentProvider.java, there is a possible permission bypass due to a...5.5 Medium
- google androidIn unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input...7.8 High
- Show moreLoading…