CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page ...6.1 Medium
- infovista vistaportalXSS exists in InfoVista VistaPortal SE Version 5.1 (build 51029). VPortal/mgtconsole...6.1 Medium
- sylabs singularitySylabs Singularity Improper Input Validation7.8 High
- icinga web 2Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a...7.5 High
- icinga web 2Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving...9.8 Critical
- icinga web 2Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2...6.1 Medium
- icinga web 2Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter.5.4 Medium
- icinga web 2Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to...6.5 Medium
- nagios core, debian linux +1 moreNagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a...5.4 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API.9.8 Critical
- openstack keystone** DISPUTED ** OpenStack Keystone through 14.0.1 has a user enumeration vulnerability because...5.3 Medium
- google rendertronRendertron discloses absolute paths of files7.5 High
- google rendertronrendertron LFI vulnerability7.5 High
- google rendertronrendertron can remotely shut down Chrome instance7.5 High
- google rendertronrendertron XSS vulnerability6.1 Medium
- google gvisorGoogle gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure...5.5 Medium
- enlightenment terminologyTerminology before 1.3.1 allows Remote Code Execution because popmedia is mishandled, as...7.8 High
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size...6.8 Medium
- blinkforhome sync moduleA design flaw in the BlinkForHome (aka Blink For Home) Sync Module 2.10.4 and earlier allows...6.5 Medium
- i-doiti-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an...7.2 High
- openrefineThe data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE)...7.5 High
- designmodo wp maintenance modeThe WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site...7.2 High
- designmodo wp maintenance modeThe WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber...4.3 Medium
- designmodo wp maintenance modeThe WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to...4.3 Medium
- wordpress, debian linux +1 moreIn WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by...5.4 Medium
- wordpress, debian linux +1 moreIn WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on...6.5 Medium
- wordpress, debian linux +1 moreIn WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a...7.5 High
- wordpress, debian linux +1 moreIn WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use...6.1 Medium
- wordpress, debian linux +1 moreIn WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors...5.4 Medium
- wordpress, debian linux +1 moreIn WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection...9.8 Critical
- wordpress, debian linux +1 moreIn WordPress before 4.9.9 and 5.x before 5.0.1, authors could modify metadata to bypass intended...6.5 Medium
- geutebrueck g-cam\/efd-2251 firmware, g-cam\/ewpc-2275 firmware +1 moreIn Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the...9.8 Critical
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) contains a denial of...5.3 Medium
- ibm business automation workflow, business process manager, websphere +2 moreIBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting....6.1 Medium
- sonarsource sonarqubeExposure of Sensitive Information to an Unauthorized Actor in SonarSource SonarQube API4.3 Medium
- ge ex2100e firmware, ls2100e firmware, mark vle firmware +2 moreGE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All...7.5 High
- medtronic 29901 encore programmer, 29901 encore programmer firmware, carelink 2090 programmer +3 more +5 moreMedtronic 9790, 2090 CareLink, and 29901 Encore Programmers Missing Encryption of Sensitive Data4.6 Medium
- Show moreLoading…