Skip to content
OpenAdvisories

Archive

5 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /5 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2018-1002103

    Minikube RCE via DNS Rebinding

    In Minikube versions 0.3.0-0.29.0, minikube exposes the Kubernetes Dashboard listening on the VM IP at port 30000. In VM environments where the IP is easy to predict, the attacker can use DNS rebinding to indirectly make requests to the Kubernetes Dashboard, …

    Kubernetes Minikube k8s.io/minikube Go
  • High 8.4
    CVE-2018-15797

    NFS Volume release errand leaks cf admin credentials in logs

    Cloud Foundry NFS volume release, 1.2.x prior to 1.2.5, 1.5.x prior to 1.5.4, 1.7.x prior to 1.7.3, logs the cf admin username and password when running the nfsbrokerpush BOSH deploy errand. A remote authenticated user with access to BOSH can obtain the admin…

    Cloud Foundry NFS Volume Release
  • High 8.4
    CVE-2018-1941

    IBM Campaign 9.1.0 and 9.1.2 could allow a local user to obtain admini privileges due to the application not validating…

    IBM Campaign
  • High 7.1
    CVE-2018-1730

    IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A r…

    IBM QRadar SIEM