Skip to content
OpenAdvisories

Archive

20 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /20 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-1160 Public exploit EPSS 86%

    Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checkin…

    Netatalk Netatalk netatalk netatalk Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2018-1000854

    Remote Code Execution in esigate-core

    esigate.org esigate version 5.2 and earlier contains a CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in ESI directive with user specified XSLT that can result in Remote Code Execution.…

    org.esigate:esigate-core Maven
  • Critical 10.0
    CVE-2018-1000822

    XML External Entity (XXE) vulnerability in codelibs fess

    codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via speciall…

    org.codelibs.fess:fess Maven
  • Critical 9.0
    CVE-2018-1000836

    XML External Entity (XXE) vulnerability in bw-calendar-engine

    bw-calendar-engine version <= bw-calendar-engine-3.12.0 contains a XML External Entity (XXE) vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be explo…

    org.bedework.caleng:bw-calendar-engine Maven
  • Critical 10.0
    CVE-2018-1000823

    exist-db:exist-core XML External Entity (XXE) vulnerability

    exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

    org.exist-db:exist-core Maven
  • Critical 10.0
    CVE-2018-1000820

    XML External Entity (XXE) vulnerability in neo4j.procedure:apoc

    neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This vulnerability appears to have b…

    org.neo4j.procedure:apoc Maven
  • Critical 9.1
    CVE-2018-1000844 Public exploit

    XML External Entity (XXE) vulnerability in Square Retrofit

    Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerability in JAXB that can result in An attacker could use this to remotely read files from the file system or to perform SSR…

    com.squareup.retrofit2:retrofit Maven