CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- nexxuscoin nexxustokenThe mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer...7.5 High
- modx evolution cmsEvolution CMS Cross-site Scripting (XSS)5.4 Medium
- modx evolution cmsEvolution CMS Stored Cross-site Scripting (XSS)5.4 Medium
- jupo mezzanineMezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title...4.8 Medium
- getkirby kirbyKirby XSS Vulnerability4.8 Medium
- zte zxv10 b860av2.1 chinamobile, zxv10 b860av2.1 chinamobile firmware +1 moreZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV...4.3 Medium
- infraware ml reportML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could...9.8 Critical
- devpia dextuploadx5DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote...9.8 Critical
- yaml-cpp project yaml-cppThe SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote...6.5 Medium
- yaml-cpp project yaml-cppThe Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote...6.5 Medium
- wuzhicmsWUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m...9.8 Critical
- damicmsDamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add...7.5 High
- jasper project jasper, debian linux +1 morejp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.6.5 Medium
- generic content management system project content management systemuser/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows...9.8 Critical
- generic content management system project content management systemAdministrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04...9.8 Critical
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the...5.3 Medium
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty...5.3 Medium
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the...4.8 Medium
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has...4.8 Medium
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has...4.8 Medium
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. admin/article_category.php?rec=update has...4.8 Medium
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via...4.8 Medium
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the...4.8 Medium
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via...4.8 Medium
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the...4.8 Medium
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the...4.8 Medium
- ipinfusion ocnos, zebos, f5 big-ip local traffic manager +2 moreThe BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3...7.5 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreWhen APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application...5.9 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreA cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow...4.3 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user...5.5 Medium
- battelle v2i hubBattelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially...9.8 Critical
- battelle v2i hubBattelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send...7.2 High
- battelle v2i hubBattelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of...6.1 Medium
- battelle v2i hubBattelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by...9.8 Critical
- battelle v2i hubBattelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by...9.8 Critical
- battelle v2i hubBattelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by...9.8 Critical
- battelle v2i hubBattelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account. An...9.8 Critical
- battelle v2i hubBattelle V2I Hub 2.5.1 is vulnerable to a denial of service, caused by the failure to restrict...7.5 High
- broadcom tcpreplayTcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.7.8 High
- broadcom tcpreplayTcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.7.8 High
- libxsmm project libxsmmThere is an attempted excessive memory allocation at libxsmm_sparse_csc_reader in...6.5 Medium
- libxsmm project libxsmmThere is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function...8.8 High
- libxsmm project libxsmmThere is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader...8.8 High
- liblasThere is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1.6.5 Medium
- liblasThere is a Segmentation fault triggered by illegal address access at liblas::SpatialReference:...6.5 Medium
- nasm netwide assemblerThere is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2...5.5 Medium
- liblasThere is a NULL pointer dereference at liblas::SpatialReference::GetGTIF() (spatialreference.cpp)...6.5 Medium
- liblasThere is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF() (spatialreference...6.5 Medium
- nasm netwide assemblerThere is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2...5.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreA reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of...6.5 Medium
- Show moreLoading…