Archive

7 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /7 January 2019 →

All Critical High Medium Low Exploited only Public exploit

57 results · Feed

Medium 5.9

CVE-2018-1663

IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information…

IBM DataPower Gateways

Dec 7, 2018
High 7.1

CVE-2018-1424

IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when proces…

IBM Marketing Platform

Dec 7, 2018
Medium 4.6

CVE-2018-1896

IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to…

IBM Connections

Dec 7, 2018
Medium 5.3

CVE-2018-1883

A problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow attackers to execute a…

IBM MQ

Dec 7, 2018
High 7.1

CVE-2018-1920

IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when process…

IBM Marketing Platform

Dec 7, 2018
Unscored —

CVE-2018-15362

XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0

Dec 7, 2018
Unscored —

CVE-2018-19960

The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_se…

onionshare onionshare Debian Ubuntu

Dec 7, 2018
Unscored —

CVE-2018-11905

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buf…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 7, 2018
High 7.5

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote…

Dec 7, 2018
Unscored —

CVE-2018-19001

Philips HealthSuite Health Android App, all versions. The software uses simple encryption that is not strong enough for…

Android

Dec 7, 2018
Unscored —

CVE-2017-15835

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, While proces…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 7, 2018
Unscored —

CVE-2017-14888

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Userspace ca…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 7, 2018
Unscored —

CVE-2018-19935

ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer …

php7.0 php7.2 php7 php5 Ubuntu Alpine

Dec 7, 2018
Unscored —

CVE-2018-19939

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lit…

Dec 7, 2018
Unscored —

CVE-2018-19931

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils throug…

binutils binutils binutils binutils-avr Debian Ubuntu Alpine

Dec 7, 2018
Unscored —

CVE-2018-19932

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils throug…

binutils binutils binutils binutils-avr Debian Ubuntu Alpine

Dec 7, 2018
High 8.3

CVE-2018-7364 EPSS 10%

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control…

ZTE ZXIN10-European region

Dec 7, 2018