Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2018
December

CVEs published in December 2018

1,178 vulnerabilities, 184 critical, 11 exploited.

Known exploitedIn KEVPublic exploitFix available

txjia imcatimcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.CVE-2018-206116.1 MediumDecember 30, 2018
txjia imcatimcat 4.4 allows directory traversal via the root/run/adm.php efile parameter.CVE-2018-206104.9 MediumDecember 30, 2018
txjia imcatimcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via...CVE-2018-206095.3 MediumDecember 30, 2018
txjia imcatimcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php...CVE-2018-20608EPSS 12.1%7.5 HighDecember 30, 2018
txjia imcatimcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the...CVE-2018-206075.3 MediumDecember 30, 2018
txjia imcatimcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI.CVE-2018-206067.5 HighDecember 30, 2018
txjia imcatimcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to...CVE-2018-206059.8 CriticalDecember 30, 2018
lfdycms lei feng tv cmsLei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template...CVE-2018-206044.9 MediumDecember 30, 2018
lfdycms lei feng tv cmsLei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF.CVE-2018-206038.8 HighDecember 30, 2018
lfdycms lei feng tv cmsLei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI.CVE-2018-206027.5 HighDecember 30, 2018
ucms project ucmsUCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.CVE-2018-206014.8 MediumDecember 30, 2018
ucms project ucmssadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.CVE-2018-206006.1 MediumDecember 30, 2018
ucms project ucmsUCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an...CVE-2018-205998.8 HighDecember 30, 2018
ucms project ucmsUCMS 1.4.7 has ?do=user_addpost CSRF.CVE-2018-205988.8 HighDecember 30, 2018
ucms project ucmsUCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.CVE-2018-205974.8 MediumDecember 30, 2018
jspxcmsJspxcms v9.0.0 allows SSRF.CVE-2018-205969.8 CriticalDecember 30, 2018
hswebCross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commonsCVE-2018-205958.8 HighDecember 30, 2018
hswebModerate severity vulnerability that affects org.hswebframework.web:hsweb-commonsCVE-2018-205946.1 MediumDecember 30, 2018
msweet mini-xml, fedoraproject fedora +1 moreIn Mini-XML (aka mxml) v2.12, there is stack-based buffer overflow in the scan_file function in...CVE-2018-20593Fix available5.5 MediumDecember 30, 2018
msweet mini-xml, fedoraproject fedora +1 moreIn Mini-XML (aka mxml) v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node...CVE-2018-20592Fix available5.5 MediumDecember 30, 2018
libmingA heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of...CVE-2018-205916.5 MediumDecember 30, 2018
generic content management system project content management systemIvan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the...CVE-2018-205904.8 MediumDecember 30, 2018
generic content management system project content management systemIvan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the...CVE-2018-205894.8 MediumDecember 30, 2018
otfcc project otfcclib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read.CVE-2018-205886.5 MediumDecember 30, 2018
jasper project jasper, debian linux, oracle outside in technology +2 moreJasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an...CVE-2018-205846.5 MediumDecember 30, 2018
thephpleague commonmarkPHP League CommonMark vulnerable to Cross-Site Scripting (XSS)CVE-2018-20583Fix available6.1 MediumDecember 30, 2018
debian-security-support Debiandebian-security-support - security updateDLA-1622-1Fix availableNo scoreDecember 30, 2018
skydevices sky elite 6.0l\+ firmwareThe Sky Elite 6.0L+ Android device with a build fingerprint of SKY/x6069_trx_l601_sky...CVE-2018-150077.8 HighDecember 28, 2018
zteusa zte zmax champ firmwareThe ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M...CVE-2018-150065.5 MediumDecember 28, 2018
zteusa zte zmax champ firmwareThe ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M...CVE-2018-150057.1 HighDecember 28, 2018
coolpad canvas firmwareThe Coolpad Canvas device with a build fingerprint of Coolpad/cp3636a/cp3636a:7.0/NRD90M...CVE-2018-150045.9 MediumDecember 28, 2018
vivo v7 firmwareThe Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user...CVE-2018-150024.7 MediumDecember 28, 2018
vivo v7 firmwareThe Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857...CVE-2018-150015.5 MediumDecember 28, 2018
leagoo p1 firmwareThe Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K...CVE-2018-149986.8 MediumDecember 28, 2018
zteusa zte blade spark firmware, zte blade vantage firmware, zte zmax champ firmware +1 more +3 moreThe ZTE Blade Vantage Android device with a build fingerprint of ZTE/Z839/sweet:7.1.1/NMF26V...CVE-2018-149954.7 MediumDecember 28, 2018
asus zenfone 3 max firmwareThe ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0...CVE-2018-149925.5 MediumDecember 28, 2018
mxq project tv box firmwareThe MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201_N/m201_N:4.4.2/KOT49H...CVE-2018-149887.5 HighDecember 28, 2018
mxq project tv box firmwareThe MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201_N/m201_N:4.4.2/KOT49H...CVE-2018-149877.1 HighDecember 28, 2018
leagoo z5c firmwareThe Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K...CVE-2018-149867.5 HighDecember 28, 2018
leagoo z5c firmwareThe Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K...CVE-2018-149857.1 HighDecember 28, 2018
leagoo z5c firmwareThe Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K...CVE-2018-149847.5 HighDecember 28, 2018
asus zenfone 3 max firmwareThe ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0...CVE-2018-149794.7 MediumDecember 28, 2018
contiki-ng project contiki-ngContiki-NG before 4.2 has a stack-based buffer overflow in the push function in os/lib/json...CVE-2018-205797.1 HighDecember 28, 2018
nuttxAn issue was discovered in NuttX before 7.27. The function netlib_parsehttpurl() in apps/netutils...CVE-2018-205787.5 HighDecember 28, 2018
orange arv7519rw22 livebox 2.1 firmwareOrange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewall_SPI.exe, cgi-bin...CVE-2018-205779.1 CriticalDecember 28, 2018
orange arv7519rw22 livebox 2.1 firmwareOrange Livebox 00.96.320S devices allow cgi-bin/autodialing.exe and cgi-bin/phone_test.exe CSRF,...CVE-2018-205765.4 MediumDecember 28, 2018
orange arv7519rw22 livebox 2.1 firmwareOrange Livebox 00.96.320S devices have an undocumented /system_firmwarel.stm URI for manual...CVE-2018-205757.5 HighDecember 28, 2018
microstrategy** DISPUTED ** main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF. NOTE:...CVE-2018-18696Disputed8.8 HighDecember 28, 2018
pylon-network pylontokenThe mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer...CVE-2018-186677.5 HighDecember 28, 2018
swft swftcoinThe mintToken function of SwftCoin (SWFTC) aka SwftCoin, an Ethereum token, has an integer...CVE-2018-186667.5 HighDecember 28, 2018
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open