CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- orange arv7519rw22 livebox 2.1 firmwareOrange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via ...9.8 Critical
- tinyccAn issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source...5.5 Medium
- tinyccAn issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source...5.5 Medium
- tinyccAn issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source...5.5 Medium
- tendacn adsl firmwareTenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client.5.4 Medium
- tp-link td-w8961nd firmwareTP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client.5.4 Medium
- photorange photo vault project photo vaultPhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it...9.8 Critical
- the-sz netchatSZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able...5.4 Medium
- barracuda message archiverBarracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the...6.1 Medium
- averta master sliderThe Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php...5.4 Medium
- antiy anti virus lab atoolLocal attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An...7.8 High
ghostscriptDebianghostscript - regression updateNo score- python, debian linux, fedoraproject fedora +2 moreModules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value...7.5 High
- wstmartThe "mall some commodity details: commodity consultation" component in WSTMart 2.0.8_181212 has...6.1 Medium
- audiocoding freeware advanced audio decoder 2A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware...5.5 Medium
- audiocoding freeware advanced audio decoder 2An invalid memory address dereference was discovered in the hf_assembly function of libfaad...5.5 Medium
- audiocoding freeware advanced audio decoder 2, debian linux +1 moreAn invalid memory address dereference was discovered in the sbr_process_channel function of...5.5 Medium
- audiocoding freeware advanced audio decoder 2An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of...5.5 Medium
- audiocoding freeware advanced audio decoder 2An invalid memory address dereference was discovered in the lt_prediction function of libfaad...5.5 Medium
- audiocoding freeware advanced audio decoder 2A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware...5.5 Medium
- agilebits 1passwordAn issue was discovered in 1Password 7.2.3.BETA before 7.2.3.BETA-3 on macOS. A mistake in error...5.5 Medium
- libpulse-binding project libpulse-bindingDuplicate Advisory: Use after free in libpulse-binding6.5 Medium
- sqlite, apple icloud, iphone os +5 more +7 moreSQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and...8.1 High
- librawLibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.6.5 Medium
- librawLibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.6.5 Medium
- librawLibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.6.5 Medium
- evernoteThe Markdown component in Evernote (Chinese) before 8.3.2 on macOS allows stored XSS, aka MAC-832.6.1 Medium
- igraphThe igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer...6.5 Medium
- libpff project libpfflibpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows...5.5 Medium
- pulsesecure secure access series ssl vpn sa-4000Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but...8.8 High
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 moreThe GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE...9.8 Critical
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 moreThe GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS...7.8 High
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 moreThe GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS...7.8 High
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 moreThe GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE...7.8 High
- dlink dir-140l firmware, dir-640l firmware +1 moredirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to...9.8 Critical
- dlink dir-140l firmware, dir-640l firmware, dsl-2770l firmware +4 more +6 morespaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to...9.8 Critical
- dlink dsl-2770l firmwareatbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin...9.8 Critical
- definitions project definitionsCode injection in Danijar Definitions9.8 Critical
- limesurveyLimeSurvey version 3.15.5 contains a Cross-site scripting (XSS) vulnerability in Survey Resource...6.1 Medium
- thehive-project cortexAn organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1...7.2 High
- jenzabarCross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers...6.1 Medium
- stackstormIncorrect access control in StackStorm API (st2api) in StackStorm before 2.9.2 and 2.10.x before...5.3 Medium
- floureon sp012The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper...6.8 Medium
- signkorea skcertserviceSKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to...7.8 High
- hancom office, office 2010, office 2014 +2 more +4 moreHancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom...5.5 Medium
- estsoft alzipAlzip Stack Overflow Vulnerability8.8 High
- trend micro officescanA Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to...7.5 High
- trend micro officescanA Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a...7.5 High
- trend micro dr. safety for android (consumer), trendmicro dr. safety +1 moreAn Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3...6.5 Medium
enigmailSUSESecurity update for enigmailNo score- Show moreLoading…