Archive
December 2018
Vulnerabilities first published in this month (UTC), newest first.
1,165 results · Feed
-
Critical 9.8
Nuclide Improper Input Validation
The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chain…
-
Critical 9.8
Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously craft…
-
High 7.5
A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circula…
-
High 7.5
folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in …
-
Medium 6.1CVE-2018-6341 Public exploit
Cross-Site Scripting in react-dom
React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x,…
-
Critical 9.8
react-dev-utils on Windows vulnerable to Remote Code Execution
react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the ser…
-
High 7.5
A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulne…
-
High 7.5
An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This aff…
-
High 7.5
Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of ser…
-
High 8.1
The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires co…
-
Critical 9.8
Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not…
-
High 7.8
An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing check…
-
High 7.5
A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to…
-
Medium 6.5
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
-
Medium 5.5
In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archi…
-
Medium 6.1
Bypass Application Control with simple DLL
A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell.
-
Critical 9.8
The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitorin…
-
High 8.1
The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmw…
-
High 8.1
The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version param…
-
Medium 6.6
A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by op…
-
Medium 6.5
MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities
Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3,…
-
Unscored —
No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.
-
Medium 6.1
Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page "body" field.
-
Unscored —
Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page title field.
-
Unscored —
There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-1…
-
Medium 5.4
HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.
-
Unscored —
No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.
-
Unscored —
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related…
-
Medium 5.4
CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table_manager/view/cu_views URI.
-
Medium 5.4
Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.
-
High 8.8
ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.
-
Unscored —
Apache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configuration (PAC) interpretation is vulnerable for remote comman…
-
Unscored —
ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_csv_decode2 function in ok_csv.c.
-
Unscored —
ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_wav_decode_ms_adpcm_data function in ok_w…
-
Unscored —
TEMMOKU T1.09 Beta allows admin/user/add CSRF.
-
Unscored —
UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_filee…
-
Unscored —
UCMS 1.4.7 has ?do=user_addpost CSRF.
-
Unscored —
imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.…
-
Unscored —
Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demo…
-
Unscored —CVE-2018-20608 EPSS 12%
imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.