Skip to content
OpenAdvisories

Archive

November 2018

Vulnerabilities first published in this month (UTC), newest first.

← October 2018 2018 / November December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.4
    CVE-2018-5559

    In Rapid7 Komand version 0.41.0 and prior, certain endpoints that are able to list the always encrypted-at-rest connect…

    Rapid7 Komand
  • Low 3.7
    CVE-2018-19148

    Caddy allows enumeration of Certificates and Hostnames

    Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames. Specifically, when unable to match a Host header with a vhost in its configuration, it serves the X.509 certificate for a ra…

    github.com/caddyserver/caddy Go
  • Low 3.6
    CVE-2018-1842

    IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verificat…

    IBM Cognos Analytics
  • Low 3.1
    CVE-2018-16849

    openstack-mistral Discloses the presence of arbitrary files within the filesystem

    A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can ta…

    [UNKNOWN] openstack-mistral mistral mistral Debian Ubuntu PyPI