CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- domainmodDomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field.4.8 Medium
- domainmodDomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider...4.8 Medium
- phpokAn issue was discovered in PHPok v5.0.055. There is a Stored XSS vulnerability via the title...6.1 Medium
- msweet mini-xml, fedoraproject fedora +1 moreAn issue has been found in Mini-XML (aka mxml) 2.12. It is a use-after-free in mxmlWalkNext in...5.5 Medium
- mini-xml project mini-xml, debian linux, fedoraproject fedora +2 moreAn issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in...8.8 High
- gnu binutils, f5 traffix signaling delivery controller, netapp vasa provider +2 moreThe _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library ...5.5 Medium
- libavIn Libav 12.3, there is a floating point exception in the range_decode_culshift function (called...6.5 Medium
- apereo bw-webdavImproper Restriction of XML External Entity Reference in bedework:bw-webdav7.5 High
lxmlDebianlxml - security updateNo score- php, opensuse leap +1 moreIn PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer...7.5 High
- verynginx project verynginxVeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because...9.8 Critical
- silabs z-wave s0 firmware, z-wave s2 firmware +1 moreAn issue was discovered on Sigma Design Z-Wave S0 through S2 devices. An attacker first prepares...6.5 Medium
- powermanager kt mc01507l z-wave s0 firmwareAn issue was discovered on KT MC01507L Z-Wave S0 devices. It occurs because HPKP is not...5.3 Medium
- hashicorp consulHashiCorp Consul can use cleartext agent-to-agent RPC communication5.9 Medium
- crossbeam project crossbeamDouble free in crossbeam9.8 Critical
- anker nebula capsule projector, nebula capsule projector firmware +1 moreAnker Nebula Capsule Pro NBUI_M1_V2.1.9 devices allow attackers to cause a denial of service ...7.5 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...8.8 High
- xen, citrix xenserver, debian linux +2 moreAn issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial...5.6 Medium
- xenAn issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service ...6.5 Medium
- xenAn issue was discovered in Xen 4.11 allowing HVM guest OS users to cause a denial of service ...7.8 High
- xen, citrix xenserver, debian linux +2 moreAn issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS...7.8 High
- xen, citrix xenserver, debian linux +2 moreAn issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS...7.8 High
- google androidIn ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of bounds...9.8 Critical
- google androidIn impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out...7.8 High
- google androidIn impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of...7.8 High
- google androidIn impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of bounds...7.8 High
- google androidIn impd_parse_split_drc_characteristic of impd_drc_static_payload.c there is a possible out of...7.8 High
- google androidIn impd_parse_filt_block of impd_drc_dynamic_payload.c there is a possible out of bounds write...7.8 High
- google androidIn impd_drc_parse_coeff of impd_drc_static_payload.c there is a possible out of bounds write due...8.8 High
- google androidIn impd_parse_loud_eq_instructions of impd_drc_dynamic_payload.c there is a possible out-of-bound...8.8 High
- google androidIn impd_parse_drc_ext_v1 of impd_drc_dynamic_payload.c there is a possible out-of-bound write due...7.8 High
- google androidIn impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound...8.8 High
- google androidIn easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race...6.4 Medium
- librawAn error within the "LibRaw::parse_exif()" function (internal/dcraw_common.cpp) in LibRaw...8.8 High
- libraw, debian linux +1 moreAn error within the "find_green()" function (internal/dcraw_common.cpp) in LibRaw versions prior...8.8 High
- libraw, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...6.5 Medium
- libraw, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in...8.8 High
- librawA type confusion error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw...6.5 Medium
- hewlett packard enterprise aruba access points, arubanetworks 203r firmware, 203rp firmware +3 more +5 moreA vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access...7.5 High
- arubanetworks clearpass policy manager, hewlett packard enterprise aruba clearpass policy manager +1 moreAruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise aruba clearpass policy manager +1 moreA Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise aruba clearpass policy manager +1 moreAn unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked...9.0 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise aruba clearpass policy manager +1 moreAn authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise aruba clearpass policy manager +1 moreIn Aruba ClearPass, disabled API admins can still perform read/write operations. In certain...8.1 High
- the foreman foremanA cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker...7.6 High
- onionshareWithdrawn Advisory: OnionShare Predictable Pathname7.0 High
- ibm marketing platformIBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection ...7.1 High
- hclsoftware connectionsIBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that...4.6 Medium
- ibm mqA problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow...5.3 Medium
- ibm datapower gateways, datapower gateway +1 moreIBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain...5.9 Medium
- Show moreLoading…