CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- ricoh myprintHardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android...9.8 Critical
- golang go, [unknown] golang, opensuse leap +2 moreThe crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of...5.9 Medium
- [unknown] golang, golang go, debian linux +3 more +5 moreIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory...6.8 Medium
- [unknown] golang, golang go, debian linux +3 more +5 moreIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code...7.5 High
gcc-4.9Debiangcc-4.9 - bugfix updateNo score- mcafee agent, agent (ma) non-windows non-windows versions +1 moreMcAfee Agent Insecure usage of temporary files vulnerability3.7 Low
- intel system defense utilityImproper directory permissions in the installer for the Intel(R) System Defense Utility (all...5.5 Medium
- intel parallel studio, parallel studio xe +1 moreImproper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold...7.8 High
- intel solid state drive toolboxImproper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an...7.8 High
- intel quickassist technology for linuxImproper memory handling in Intel QuickAssist Technology for Linux (all versions) may allow an...5.5 Medium
- intel vtune amplifierImproper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may...7.8 High
- intel quickassist technology for linuxImproper configuration of hardware access in Intel QuickAssist Technology for Linux (all versions...5.5 Medium
- pixar tractorPixar's Tractor software, versions 2.2 and earlier, contains a stored cross-site scripting vulnerability5.4 Medium
- dell emc idrac, dell idrac7 firmware, idrac8 firmware +2 moreiDRAC7, iDRAC8 - Improper Error Handling6.4 Medium
- dell emc idrac, dell idrac7 firmware, idrac8 firmware +1 more +3 moreiDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability3.8 Low
- cloud foundry uaa release, pivotal software cloud foundry uaa-release +1 moreUAA can issue tokens across identity providers if users with matching usernames exist4.2 Medium
- red hat katellokatello SQL Injection vulnerability4.3 Medium
- eclipse mosquittoEclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was...7.5 High
- oracle secure global desktopXSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but...6.1 Medium
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of...7.5 High
- grafana, netapp active iq performance analytics services, storagegrid webscale nas bridge +4 more +6 moreGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Medium
- abisoftgt ticketlyAbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities through the parameters...9.8 Critical
- abisoftgt ticketlyadd_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an...9.8 Critical
- avantimarkets market cardA vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an...4.2 Medium
- readymadeb2bscript entrepreneur b2b scriptPHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such...5.4 Medium
- thedaylightstudio fuel cmsXSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page...4.8 Medium
- thedaylightstudio fuel cmsXSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page...4.8 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains...5.9 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 discloses...5.3 Medium
- ibm operational decision management, operational decision manager +1 moreIBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External...7.1 High
- ibm security guardiumIBM Security Guardium 10 and 10.5 contains hard-coded credentials, such as a password or...5.9 Medium
- ibm security guardiumIBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 for...6.1 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses weaker...5.9 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses...4.3 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 generates...4.3 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not...3.7 Low
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 could allow...6.1 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is...5.4 Medium
- ibm datapower gateway, datapower gateways +1 moreIBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1...5.4 Medium
- ibm datapower gatewayIBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1...5.9 Medium
- siemens simatic s7-400 cpu 412-1 dp v7, simatic s7-400 cpu 412-2 dp v7, simatic s7-400 cpu 412-2 pn v7 +22 more +24 moreA vulnerability has been identified in SIMATIC S7-400 (incl. F) V6 and below (All versions),...8.2 High
- siemens simatic s7-400 cpu 412-1 dp v7, simatic s7-400 cpu 412-2 dp v7, simatic s7-400 cpu 412-2 pn v7 +23 more +25 moreA vulnerability has been identified in SIMATIC S7-400 (incl. F) V6 and below (All versions),...7.5 High
- siemens scalance s602 firmware, scalance s612 firmware, scalance s623 firmware +2 more +4 moreA vulnerability has been identified in SCALANCE S602 (All versions < V4.0.1.1), SCALANCE S612 ...5.4 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is...5.4 Medium
- siemens simatic s7-1200 firmware, simatic s7-1500 firmware, siemens ag simatic s7-1200, simatic s7-1500 +2 moreA vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All...7.5 High
- siemens simatic wincc runtime, simatic hmi comfort outdoor panels firmware, simatic hmi comfort panels firmware +10 more +12 moreA vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V14),...8.8 High
- siemens simatic wincc runtime, simatic hmi comfort outdoor panels firmware, simatic hmi comfort panels firmware +10 more +12 moreA vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15...8.1 High
- siemens simatic wincc runtime, simatic hmi comfort outdoor panels firmware, simatic hmi comfort panels firmware +10 more +12 moreA vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15...7.5 High
- siemens simatic step 7 (tia portal), simatic step 7 \(tia portal\) +1 moreA vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1)....5.5 Medium
- Show moreLoading…