CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- schneider electric se embedded web servers in all modicon m340, premium, quantum plcs and bmxnor0200, schneider-electric modicom bmxnor0200h firmware, modicom m340 firmware +2 more +4 moreAn Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web...7.5 High
- schneider electric se embedded web servers in all modicon m340, premium, quantum plcs and bmxnor0200, schneider-electric modicom bmxnor0200h firmware, modicom m340 firmware +2 more +4 moreAn Information Exposure through Discrepancy vulnerability exists in the embedded web servers in...7.5 High
- schneider electric se embedded web servers in all modicon m340, premium, quantum plcs and bmxnor0200, schneider-electric modicom bmxnor0200h firmware, modicom m340 firmware +2 more +4 moreA URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all...6.1 Medium
- schneider-electric ecostruxure energy expert, ecostruxure power monitoring expert, ecostruxure power scada operation +1 more +3 moreA URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power...6.1 Medium
- sass-lang libsassIn LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass:...6.5 Medium
- graphicsmagick, debian linux +1 moreIn GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing...6.5 Medium
- thedaylightstudio fuel cmsFUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account.8.8 High
- ymlref project ymlrefCode injection in ymlref9.8 Critical
- qemu, canonical ubuntu linux, fedoraproject fedora +2 morepvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error.5.5 Medium
- ptc thingworx platformPTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files...7.5 High
- virustotal yaraIn YARA 3.8.1, bytecode in a specially crafted compiled rule is exposed to information about its...5.5 Medium
- virustotal yaraIn YARA 3.8.1, bytecode in a specially crafted compiled rule can read data from any arbitrary...5.5 Medium
- virustotal yaraIn YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM...5.5 Medium
- printeronPrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion.6.5 Medium
- bolt cmsBolt Cross-site Scripting (XSS) via text input click preview button6.1 Medium
- artica integria imsArtica Integria IMS 5.0.83 has XSS via the search_string parameter.6.1 Medium
- bosch common product platform 4 firmware, common product platform 6 firmware, common product platform 7.3 firmware +1 more +3 moreAn issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A...9.8 Critical
- vyosA privilege escalation issue was discovered in VyOS 1.1.8. The default configuration also allows...9.9 Critical
- vyosA sandbox escape issue was discovered in VyOS 1.1.8. It provides a restricted management shell...9.9 Critical
- swisscom internet-box 2 firmware, internet-box light firmware, internet-box plus firmware +1 more +3 moreA stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom...7.5 High
- samsung galaxy s6 firmwareBuffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie...6.3 Medium
- samsung galaxy s6 firmwareBuffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c...6.3 Medium
- samsung galaxy s6 firmwareBuffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie...6.3 Medium
- samsung galaxy s6 firmwareA NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358...4.3 Medium
- samsung galaxy s6 firmwareOut-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the...6.3 Medium
- axiosys bento4An issue was discovered in Bento4 1.5.1-627. AP4_Sample::ReadData in Core/Ap4Sample.cpp allows...6.5 Medium
- graphicsmagick, canonical ubuntu linux, debian linux +2 moreIn GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over...5.3 Medium
- graphicsmagick, debian linux +1 moreIn GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the...6.5 Medium
- ibm security guardiumIBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm security guardiumIBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm security guardiumIBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity...5.9 Medium
- ibm security guardiumIBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead...3.7 Low
- ibm security guardiumIBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or...3.7 Low
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii) +1 moreLogic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an...7.8 High
- tianocore edk2Red Hat Security Advisory: ovmf security and enhancement update7.8 High
- nagios xiAn issue was discovered in Nagios XI before 5.5.8. The rss_url parameter of rss_dashlet/magpierss...6.1 Medium
- nagios xiAn issue was discovered in Nagios XI before 5.5.8. The url parameter of rss_dashlet/magpierss...6.1 Medium
- lisa-lab pylearn2The yaml_parse.load method in Pylearn2 allows code injection.9.8 Critical
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- infovista vistaportalCross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "...6.1 Medium
- Show moreLoading…