Skip to content
OpenAdvisories

Archive

1 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /1 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 8.8
    CVE-2018-4040

    An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, ve…

    Talos Atlantis Word Processor
  • High 8.8
    CVE-2018-4039

    An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3…

    Talos Atlantis Word Processor
  • High 8.8
    CVE-2018-4038

    An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, …

    Talos Atlantis Word Processor
  • High 7.2
    CVE-2018-3951

    An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN…

    Talos TP-Link
  • High 7.2
    CVE-2018-3950

    An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600V…

    Talos TP-Link
  • High 7.5
    CVE-2018-3949 EPSS 53%

    An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. …

    Talos TP-Link
  • High 7.5
    CVE-2018-19784

    Weak Cryptography in PHP-Proxy

    The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.

    athlon1600/php-proxy Packagist
  • Medium 6.1
    CVE-2018-19785

    XSS in PHP-Proxy-App through v3.0

    PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php.

    athlon1600/php-proxy-app Packagist