Archive
3 December 2018
Vulnerabilities first published on this day (UTC), newest first.
54 results · Feed
-
Unscored —
A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the…
-
Medium 6.0
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, c…
-
Medium 4.7
A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of…
-
Medium 4.7
A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA …
-
High 7.5CVE-2018-16855 EPSS 59%
An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigg…
-
Medium 5.9
A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to sp…
-
Unscored —
Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers t…
-
Unscored —
An open redirect in the Ninja Forms plugin before 3.3.19.1 for WordPress allows Remote Attackers to redirect a user via…
-
Unscored —
The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service (buffer overflow…
-
Unscored —
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (us…
-
Unscored —
ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full …
-
Unscored —
jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001…
-
Unscored —
A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully exe…
-
Unscored —
The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing …