Skip to content
OpenAdvisories

Archive

20 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /20 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2018-18441 Public exploit

    D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices i…

  • Unscored —
    CVE-2018-18629 Public exploit

    An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search p…

  • Unscored —
    CVE-2018-17246 Public exploit Scanner template EPSS 84%

    Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker wit…

    Elastic Kibana
  • Critical 9.8
    CVE-2018-1160 Public exploit EPSS 86%

    Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checkin…

    Netatalk Netatalk netatalk netatalk Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-1000811 Public exploit EPSS 48%

    bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Page…

  • High 7.5
    CVE-2018-1000850 Public exploit

    Directory Traversal vulnerability in Square Retrofit

    Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources othe…

    com.squareup.retrofit2:retrofit Maven
  • Critical 9.1
    CVE-2018-1000844 Public exploit

    XML External Entity (XXE) vulnerability in Square Retrofit

    Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerability in JAXB that can result in An attacker could use this to remotely read files from the file system or to perform SSR…

    com.squareup.retrofit2:retrofit Maven