Skip to content
OpenAdvisories

Archive

November 2018

Vulnerabilities first published in this month (UTC), newest first.

← October 2018 2018 / November December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-19410 Exploited Public exploit Scanner template EPSS 98%

    PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privil…

    KEV Feb 4, 2025
  • Critical 9.8
    CVE-2018-9207 Public exploit

    Unrestricted Upload of File with Dangerous Type in jquery-file-upload

    Arbitrary file upload in jQuery Upload File <= 4.0.2

    hayageek jQuery Upload File jquery-file-upload npm
  • Critical 9.8
    CVE-2018-15439 Public exploit EPSS 50%

    Cisco Small Business Switches Privileged Access Vulnerability

    A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected softwa…

    Cisco Cisco Small Business 300 Series Managed Switches Network devices
  • Critical 9.8
    CVE-2018-8021 Public exploit EPSS 53%

    Deserialization of Untrusted Data in superset

    Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.

    superset PyPI
  • Critical 9.8
    CVE-2018-14667 Exploited Public exploit EPSS 74%

    Richfaces vulnerable to arbitrary code execution

    The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4…

    [UNKNOWN] RichFaces org.richfaces:richfaces-core Maven
    KEV Sep 28, 2023