CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- siemens simatic it production suite, simatic it ua discrete manufacturing, simatic it line monitoring system +1 more +3 moreA vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite...8.1 High
- ibm security guardiumIBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should...5.9 Medium
- apache ofbizIn Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine...7.5 High
- micro focus fortify software security center (ssc), microfocus fortify software security center +1 moreMFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access6.5 Medium
- micro focus fortify software security center (ssc), microfocus fortify software security center +1 moreMFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access6.5 Medium
- dedecmsAn issue was discovered in DedeCMS V5.7 SP2. uploads/include/dialog/select_images_post.php allows...8.8 High
- usualtool usualtoolcmsAn issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to...7.5 High
- zzzcms zzzphpAn issue was discovered in zzzphp cms 1.5.8. del_file in /admin/save.php allows remote attackers...7.5 High
- qemu, canonical ubuntu linux, debian linux +2 more +4 morev9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash)...4.7 Medium
- qemu, [unknown] qemu:, canonical ubuntu linux +3 more +5 moreA flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in...5.0 Medium
- mcafee agent, agent (ma) for linux +1 moreMcAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerability2.3 Low
- mcafee agent, agent (ma) for linux +1 moreMcAfee Agent (MA) for Linux Privilege Escalation vulnerability2.3 Low
- mcafee agent, agent (ma) for linux +1 moreMcAfee Agent for Linux Privilege Escalation vulnerability4.7 Medium
- open dental dental, opendental +1 moreOpen Dental before version 18.4 installs a mysql database and uses the default credentials of ...9.8 Critical
- open dental dental, opendental +1 moreOpen Dental before version 18.4 transmits the entire user database over the network when a remote...7.5 High
- open dental dental, opendental +1 moreOpen Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.5.3 Medium
- codection import users from csv with metaThe codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via...6.1 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site...4.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain...5.0 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable...3.1 Low
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute...3.7 Low
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in...3.7 Low
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly'...4.0 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to...6.1 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to...5.3 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response...6.1 Medium
- siemens tim 1531 irc, tim 1531 irc firmware +1 moreA vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing...10.0 Critical
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...9.8 Critical
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...7.8 High
- siemens sinumerik 828d firmware, sinumerik 840d sl firmware, siemens ag sinumerik 828d v4.7, sinumerik 840d sl v4.7, sinumerik 840d sl v4.8 +2 moreA vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1),...3.7 Low
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...7.8 High
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...9.8 Critical
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...6.6 Medium
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...7.8 High
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...7.8 High
- siemens sinumerik 828d v4.7 firmware, sinumerik 840d sl v4.7 firmware, sinumerik 840d sl v4.8 firmware +1 more +3 moreA vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1),...8.1 High
- siemens sinumerik 828d v4.7 firmware, sinumerik 840d sl v4.7 firmware, sinumerik 840d sl v4.8 firmware +1 more +3 moreA vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1),...8.1 High
- microsoft sharepoint, sharepoint enterprise server +1 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not...5.4 Medium
- microfocus edirectory, micro focus netiq edirectory 9.1 sp2 +1 moreCross site scripting vulnerability in eDirectory prior to 9.1 SP26.1 Medium
- microfocus edirectory, micro focus netiq edirectory 9.1 sp2 +1 moreIncorrect enforcement of authorization checks in eDirectory prior to 9.1 SP27.5 High
- microfocus imanager, micro focus netiq imanager 3.1 sp2 +1 moreCross site scripting vulnerability in iManager prior to 3.1 SP2.6.1 Medium
- f5 enterprise manager, iworkflow, big-ip access policy manager +14 more +16 moreOn BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and...7.5 High
- qemu, [unknown] qemu:, canonical ubuntu linux +1 more +3 moreA flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in...7.0 High
- exiv2There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3....6.5 Medium
- exiv2There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in...6.5 Medium
- exiv2There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in...6.5 Medium
- axiosys bento4An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4...6.5 Medium
- xuxueli xxl-confXXL-CONF Path Traversal vulnerability7.5 High
- microsoft windows azure pack rollup 13.1, windows azure pack rollup +1 moreA Cross-site Scripting (XSS) vulnerability exists when Windows Azure Pack does not properly...5.4 Medium
- microsoft dynamics navA cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly...5.4 Medium
- Show moreLoading…