CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- microsoft windows 10, windows server 2019 +1 moreA denial of service vulnerability exists when Windows improperly handles objects in memory, aka ...5.5 Medium
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver...7.8 High
- microsoft windows, windows 10, windows 10 servers +15 more +17 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- microsoft windows 10, windows server 2019 +1 moreAn information disclosure vulnerability exists when DirectX improperly handles objects in memory,...5.5 Medium
- microsoft windows 10, windows 10 servers, windows server 2019 +1 more +3 moreAn information disclosure vulnerability exists in Windows kernel that could allow an attacker to...5.5 Medium
- microsoft excel, office, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft sharepoint, sharepoint server, sharepoint enterprise server +2 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...8.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreA remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to...8.8 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft office, powerpoint, powerpoint viewer +7 more +9 moreA remote code execution vulnerability exists in Microsoft PowerPoint software when the software...7.8 High
- microsoft excel, excel viewer, office +3 more +5 moreAn information disclosure vulnerability exists when Microsoft Excel software reads out of bound...5.5 Medium
- microsoft windows 10, windows 10 servers, windows server 2012 r2 +3 more +5 moreA remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when...9.8 Critical
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft chakracore, edge +1 moreChakraCore Remote code execution Vulnerability7.5 High
- microsoft windows 7, windows 8.1, windows rt 8.1 +4 more +6 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft windows 7, windows server 2008 r2, windows server 2012 +1 more +3 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists when the Internet Explorer VBScript execution policy...7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreA Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service...5.5 Medium
- microsoft windows, windows 10, windows 10 servers +14 more +16 moreAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle...7.8 High
- microsoft exchange serverA tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile...4.3 Medium
- microsoft visual studio, windows 10, windows 10 servers +3 more +5 moreAn elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector...7.8 High
- microsoft excel, office, office 365 proplus +2 moreAn information disclosure vulnerability exists when Microsoft Excel improperly discloses the...4.7 Medium
- microsoft excel, office, office 365 +1 more +3 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft office, outlook, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Outlook software when it fails to...7.8 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft sharepoint, sharepoint server +1 moreAn information disclosure vulnerability exists where certain modes of the search function in...4.3 Medium
- microsoft .net frameworkA remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate...9.8 Critical
- microsoft .net frameworkA denial of service vulnerability exists when .NET Framework improperly handles special web...7.5 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists when Remote Procedure Call runtime improperly...5.5 Medium
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- haproxy, canonical ubuntu linux, redhat openshift container platform +2 moreAn issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,...7.5 High
- haproxy, canonical ubuntu linux, redhat openshift container platform +2 moreAn out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8...7.5 High
- exiv2, debian linux, fedoraproject fedora +3 more +5 moreThere is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in...6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for...5.5 Medium
- mozilla network security services (nss), network security services +1 moreA cached side channel attack during handshakes using RSA encryption could allow for the...5.9 Medium
- palo alto networks expeditionThe Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated...9.8 Critical
- mcafee agent, mcafee, llc mcafee agent +1 moreRemote Logging functionality had a use after free vulnerability in McAfee Agent9.8 Critical
- sap hybris, commerce (sap hybris commerce) +1 moreSAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site...6.1 Medium
- sap netweaver application server java, netweaver as java (servercore) +1 moreSAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host...6.1 Medium
- sap netweaver application server java, netweaver as java (servercore) +1 moreBy default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access...7.4 High
- sap business one on hana, business one service layer (b1 on hana) +1 moreTRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site...6.1 Medium
- sap mobile secure, mobile secure for android +1 moreUnder certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711)...4.7 Medium
- sap hanaThe security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these...2.7 Low
- sap business application software integrated solution, basis (abap platform), basis (as abap of sap netweaver) +2 moreNecessary authorization checks for an authenticated user, resulting in escalation of privileges,...8.0 High
- Show moreLoading…