Skip to content
OpenAdvisories

Archive

11 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /11 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-6703

    Remote Logging functionality had a use after free vulnerability in McAfee Agent

    Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sen…

    McAfee McAfee Agent
  • Critical 9.8
    CVE-2018-20062 Exploited Public exploit Scanner template EPSS 100%

    An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PH…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2018-20060

    Exposure of Sensitive Information to an Unauthorized Actor in urllib3

    urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended h…

    urllib3 python-urllib3 python-urllib3 Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2018-20059

    Improper Restriction of XML External Entity Reference in pippo-core

    jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.

    ro.pippo:pippo-core Maven