Skip to content
OpenAdvisories

Archive

5 December 2018

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Medium 5.9

    Kubernetes Arbitrary Command Injection

    In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Windows nodes, which could lead to command line argument injection.

  • Medium 5.9

    IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials which could allow an attacker to bypass the authentication conf…

  • Medium 5.4

    IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J…

  • Medium 4.0

    IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system. IBM …

  • Medium 5.3

    IBM QRadar Advisor with Watson 1.14.0 discloses sensitive information to unauthorized users. The information can be use…

  • Medium 4.3

    IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a specially crafted HTTP…

  • Medium 6.5
    CVE-2018-19859 Public exploit

    OpenRefine Directory Traversal

    OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.