Skip to content
OpenAdvisories

Archive

6 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /6 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.8
    CVE-2018-6756 Public exploit

    True Key (TK) Windows Client - Authentication Abuse vulnerability

    Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.

    McAfee True Key
  • High 7.5
    CVE-2018-6757 Public exploit

    True Key (TK) Windows Client - Privilege Escalation vulnerability

    Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.

    McAfee True Key
  • High 7.2
    CVE-2018-6755 Public exploit

    True Key (TK) Windows Client - Weak Directory Permission Vulnerability

    Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.

    McAfee True Key
  • Unscored —
    CVE-2018-19914 Public exploit Scanner template

    DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field.

  • Unscored —
    CVE-2018-19913 Public exploit

    DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.

  • Unscored —
    CVE-2018-19915 Public exploit Scanner template

    DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.

  • Unscored —
    CVE-2018-19911 Public exploit

    FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the ap…

  • Unscored —
    CVE-2018-19908 Public exploit EPSS 17%

    An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php (the STIX 1 import code), an unescaped fil…