Skip to content
OpenAdvisories

Archive

November 2018

Vulnerabilities first published in this month (UTC), newest first.

← October 2018 2018 / November December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

93 results · Clear filters · Feed

  • Unscored —
    CVE-2018-19052 Public exploit EPSS 14%

    An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ …

    lighttpd lighttpd Debian Ubuntu
  • Critical 9.8
    CVE-2018-14667 Exploited Public exploit EPSS 74%

    Richfaces vulnerable to arbitrary code execution

    The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4…

    [UNKNOWN] RichFaces org.richfaces:richfaces-core Maven
    KEV Sep 28, 2023
  • Unscored —
    CVE-2018-9445 Public exploit

    In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local…

    Google Android Android
  • Unscored —
    CVE-2018-9488 Public exploit

    In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lea…

    Google Android Android
  • Unscored —
    CVE-2018-18957 Public exploit EPSS 12%

    An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goose_p…

  • Unscored —
    CVE-2018-18820 Public exploit EPSS 49%

    A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabl…

    icecast2 icecast2 icecast Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-9208 Public exploit

    Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut <= v1.1Beta

    Tuyoshi Vinicius jQuery Picture Cut
  • Unscored —
    CVE-2018-18924 Public exploit

    The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml fil…

  • Unscored —
    CVE-2018-18925 Public exploit Scanner template EPSS 31%

    Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." …

  • Unscored —
    CVE-2018-18775 Public exploit Scanner template

    Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting …

  • Unscored —
    CVE-2018-18777 Public exploit Scanner template EPSS 23%

    Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter sub…

  • Unscored —
    CVE-2018-18776 Public exploit

    Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting …

  • Unscored —
    CVE-2018-18714 Public exploit

    RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker…