Skip to content
OpenAdvisories

Archive

14 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /14 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2018-1977

    IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) contains a denial of service vulnerability. A re…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 6.1
    CVE-2018-1848

    IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows…

    IBM Business Automation Workflow
  • Medium 4.6
    CVE-2018-18984

    Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers Missing Encryption of Sensitive Data

    Medtronic CareLink and Encore Programmers do not encrypt or do not sufficiently encrypt sensitive PII and PHI information while at rest .

    Medtronic 29901 Encore Programmer CareLink 2090 Programmer CareLink 9790 Programmer
  • Medium 4.3
    CVE-2018-19413

    Exposure of Sensitive Information to an Unauthorized Actor in SonarSource SonarQube API

    A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as valid user-account logins in the web application. The vulnerability occurs because of improperly configured access contr…

    org.sonarsource.sonarqube:sonar-plugin-api Maven
  • Medium 5.9
    CVE-2018-16875 Public exploit

    Denial of service in chain verification in crypto/x509

    The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting…

    [UNKNOWN] golang golang stdlib Ubuntu Azure Linux Go
  • Medium 6.8
    CVE-2018-16874

    Directory traversal via "go get" command in cmd/go

    In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both '{' and '}' characters). Specifically, it is only vulnerable…

    [UNKNOWN] golang golang-1.8 golang-1.10 Ubuntu Go