CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- comparex miss marpleCOMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code...7.8 High
- webidsupport webidWeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in...7.5 High
- traccar serverTraccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation...9.8 Critical
- libarchive, fedoraproject fedora, opensuse leap +2 morelibarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0...6.5 Medium
- gnu binutils, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 morebinutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump,...7.8 High
- universityofcalifornia boinc serverBerkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0...9.8 Critical
- cebe markdown** DISPUTED ** PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting...6.1 Medium
- fasterxml jackson-modules-java8, netapp active iq unified manager, oracle clusterware +3 more +5 moreModerate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr3536.5 Medium
- pykmip project pykmipPyKMIP Denial of service vulnerability6.5 Medium
- digitaldruid hoteldruidHotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in ...9.8 Critical
- phpipamPHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user...5.4 Medium
- phpipamphpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that...9.8 Critical
- webidsupport webidWeBid version up to current version 1.2.2 contains a Cross Site Scripting (XSS) vulnerability in...6.1 Medium
- webidsupport webidWeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five...8.8 High
- phpipamphpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The...4.7 Medium
- open-systems log-user-sessionlog-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main...8.8 High
- domainmodDomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross...4.8 Medium
- basecamp easymonCross Site Scripting (XSS) vulnerability in easymon6.1 Medium
- esigateRemote Code Execution in esigate-core9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- freerdp, canonical ubuntu linux, fedoraproject fedora +2 moreFreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3...6.5 Medium
- copay bitcoin walletCopay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in...9.8 Critical
- squareup retrofitDirectory Traversal vulnerability in Square Retrofit7.5 High
- alpinelinux alpine linuxAlpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown...8.8 High
- wampserverWampserver version prior to version 3.1.5 contains a Cross Site Scripting (XSS) vulnerability in...6.1 Medium
- freshdns project freshdnsFreshDNS version 1.0.3 and prior contains a Cross Site Scripting (XSS) vulnerability in Account...5.4 Medium
- freshdns project freshdnsFreshDNS version 1.0.3 and earlier contains a Cross ite Request Forgery (CSRF) vulnerability in...8.8 High
- squareup retrofitXML External Entity (XXE) vulnerability in Square Retrofit9.1 Critical
- spotify luigiCross-Site Request Forgery (CSRF) in Luigi8.8 High
- fatfreecrmFat Free CRM vulnerable to Cross-site Scripting6.1 Medium
- zend zendtoZend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify...6.1 Medium
- processingProcessing Foundation Processing version 3.4 and earlier contains a XML External Entity (XXE)...6.5 Medium
- librehealth ehrLH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload...8.8 High
- sleuthkit autopsyautopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML...10.0 Critical
- obeo uml designerUML Designer version <= 8.0.0 contains a XML External Entity (XXE) vulnerability in XML parser...10.0 Critical
- apereo bw-calendar-engineXML External Entity (XXE) vulnerability in bw-calendar-engine9.0 Critical
- keepassdx keepass dxKeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx...10.0 Critical
- runeliterunelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in...9.0 Critical
- zoneminderZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter...9.8 Critical
- zoneminderZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter...9.8 Critical
- Show moreLoading…