Skip to content
OpenAdvisories

Archive

21 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /21 December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2018-19420

    In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative cases in which HTML can…

  • Unscored —
    CVE-2018-19421

    In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file…

  • Unscored —
    CVE-2018-19424

    ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files.

  • Unscored —
    CVE-2018-19423 Public exploit EPSS 18%

    Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.

  • Unscored —
    CVE-2018-19416

    An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a …

    sysstat Debian
  • Unscored —
    CVE-2018-19417

    An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parse_publish_vhdr() that parses MQTT…

  • Unscored —
    CVE-2018-19411

    PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user w…

  • Unscored —
    CVE-2018-19409

    An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device…

    ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2018-19410 Exploited Public exploit Scanner template EPSS 98%

    PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privil…

    KEV Feb 4, 2025
  • Medium 4.1
    CVE-2018-1843

    The Identity and Access Management (IAM) services (IBM Cloud Private 3.1.0) do not use a secure channel, such as SSL, t…

    IBM Cloud Private
  • Unscored —
    CVE-2009-5153

    In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemo…

  • High 7.2
    CVE-2018-19422 Public exploit EPSS 65%

    Subrion CMS RCE Vulnerability

    /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

    intelliants/subrion Packagist
  • Unscored —
    CVE-2018-19404

    In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to ex…

  • Unscored —
    CVE-2018-19406

    kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a denial of serv…

  • Unscored —
    CVE-2018-19407

    The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a de…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu