Skip to content
OpenAdvisories

Archive

November 2018

Vulnerabilities first published in this month (UTC), newest first.

← October 2018 2018 / November December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2018-19458 Public exploit EPSS 33%

    Unauthenticated File Read in PHP Proxy

    In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246.

    athlon1600/php-proxy-app Packagist
  • High 7.2
    CVE-2018-19422 Public exploit EPSS 65%

    Subrion CMS RCE Vulnerability

    /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

    intelliants/subrion Packagist
  • High 8.8
    CVE-2018-17463 Exploited Public exploit EPSS 85%

    Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbi…

    Google Chrome chromium-browser oxide-qt Browsers Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-6065 Exploited Public exploit EPSS 60%

    Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google C…

    Google Chrome chromium-browser oxide-qt Browsers Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-19277 Public exploit

    XXE in PHPSpreadsheet due to encoding issue

    securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file

    phpoffice/phpspreadsheet phpoffice/phpexcel Packagist
  • High 7.4
    CVE-2018-8581 Exploited · Ransomware Public exploit EPSS 28%

    An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation o…

    Microsoft Microsoft Exchange Server
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-19246 Public exploit EPSS 22%

    LFI in PHP-Proxy 5.1.0

    PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default …

    athlon1600/php-proxy Packagist