Skip to content
OpenAdvisories

Archive

17 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /17 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.8
    CVE-2018-19295

    Sylabs Singularity Improper Input Validation

    Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.

    singularity-container github.com/sylabs/singularity Ubuntu Go
  • High 7.5
    CVE-2017-18353

    rendertron can remotely shut down Chrome instance

    Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application.

    rendertron npm
  • High 7.5
    CVE-2017-18355

    Rendertron discloses absolute paths of files

    Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "_where" attribute of package.json files.

    rendertron npm
  • High 7.5
    CVE-2017-18354

    rendertron LFI vulnerability

    Rendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can be read by a remote attacker.

    rendertron npm