Skip to content
OpenAdvisories

Archive

19 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /19 December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Unscored —
    CVE-2018-17906

    Philips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all versions. Default credentials…

  • Critical 9.8
    CVE-2018-9209

    FineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability

    Unauthenticated arbitrary file upload vulnerability in FineUploader php-traditional-server <= v1.2.2

    FineUploader FineUploader php-traditional-server fineuploader/php-traditional-server Packagist
  • Critical 9.8
    CVE-2018-9207 Public exploit

    Unrestricted Upload of File with Dangerous Type in jquery-file-upload

    Arbitrary file upload in jQuery Upload File <= 4.0.2

    hayageek jQuery Upload File jquery-file-upload npm
  • Medium 6.2
    CVE-2018-1841

    IBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being world readable in boot/ma…

    IBM Cloud Private
  • Critical 9.8
    CVE-2018-17190

    Remote Code Execution in spark-core

    In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The master itself does not, by design, execute user code. A specially-crafted request to the master can, h…

    Apache Software Foundation Apache Spark org.apache.spark:spark-core_2.11 org.apache.spark:spark-core_2.10 Maven
  • Critical 9.1
    CVE-2018-15759

    On Demand Services SDK Timing Attack Vulnerability

    Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many requests to the service broker with different credentials, allowing them to infer v…

    Pivotal On Demand Services SDK
  • Critical 9.9
    CVE-2018-15761

    UAA Privilege Escalation

    Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitra…

    Cloud Foundry UAA UAA Release org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Unscored —
    RUSTSEC-2018-0015

    term is looking for a new maintainer

    The author of the `term` crate does not have time to maintain it and is looking for a new maintainer. Some maintained alternatives you can potentially switch to instead, depending on your needs: - [`crossterm`](https://github.com/crossterm-rs/crossterm) - [`t…

    term crates.io
  • Unscored —
    CVE-2018-18519

    BestXsoftware Best Free Keylogger before 6.0.0 allows local users to gain privileges via a Trojan horse "%PROGRAMFILES%…

  • Unscored —
    CVE-2018-19355

    modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allow…