Skip to content
OpenAdvisories

Archive

12 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /12 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 4.7
    CVE-2018-6704

    McAfee Agent for Linux Privilege Escalation vulnerability

    Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.

    McAfee McAfee Agent (MA) for Linux Linux
  • Medium 5.0
    CVE-2018-1901

    IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain elevated privileges on t…

    IBM WebSphere Application Server
  • Medium 6.1
    CVE-2018-1474

    IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks, caused…

    IBM BigFix Platform
  • Medium 4.3
    CVE-2018-1926

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site request forgery, caus…

    IBM WebSphere Application Server
  • Medium 5.3
    CVE-2018-1476

    IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users. T…

    IBM BigFix Platform
  • Medium 6.1
    CVE-2018-1478

    IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to hijack the clicking act…

    IBM BigFix Platform
  • Medium 4.0
    CVE-2018-1480

    IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute on authorization t…

    IBM BigFix Platform
  • Medium 5.4
    CVE-2018-8650

    A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

    Microsoft Microsoft SharePoint
  • Medium 6.5
    CVE-2018-20096

    There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafte…

    exiv2 PyPI
  • Medium 6.5
    CVE-2018-20099

    There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will l…

    exiv2 PyPI
  • Medium 6.5
    CVE-2018-20098

    There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted…

    exiv2 PyPI
  • Medium 6.5
    CVE-2018-20097

    There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A craft…

    exiv2 exiv2 Debian PyPI