Skip to content
OpenAdvisories

Archive

5 December 2018

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-1002105 Public exploit EPSS 87%

    Privilege Escalation in Kubernetes

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…

  • Unscored —
    CVE-2018-19877 Public exploit Scanner template EPSS 19%

    login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.

  • Unscored —
    CVE-2018-19864 Public exploit EPSS 25%

    NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause …

  • Medium 6.5
    CVE-2018-19859 Public exploit

    OpenRefine Directory Traversal

    OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.