Archive

20 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /20 January 2019 →

All Critical High Medium Low Exploited only Public exploit

136 results · Feed

Unscored —

CVE-2018-1000834

runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runs…

Dec 20, 2018
Unscored —

CVE-2018-1000851

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key stora…

Dec 20, 2018
Unscored —

CVE-2018-1000824

MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclos…

Dec 20, 2018
High 7.5

CVE-2018-1000817

Asset Pipeline Grails Plugin vulnerable to Path Traversal

Asset Pipeline Grails Plugin Asset-pipeline plugin version Prior to 2.14.1.1, 2.15.1 and 3.0.6 contains a Incorrect Access Control vulnerability in Applications deployed in Jetty that can result in Download .class files and any arbitrary file. This attack app…

org.grails.plugins:asset-pipeline Maven

Dec 20, 2018
Unscored —

CVE-2018-1000841

Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.php page that can res…

Dec 20, 2018
Critical 10.0

CVE-2018-1000823

exist-db:exist-core XML External Entity (XXE) vulnerability

exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

org.exist-db:exist-core Maven

Dec 20, 2018
Medium 5.4

CVE-2018-1000816

Grafana XSS Vulnerability

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated us…

grafana github.com/grafana/grafana Ubuntu Go

Dec 20, 2018
Unscored —

CVE-2018-1000829

Anyplace version before commit 80359b4 contains a XML External Entity (XXE) vulnerability in Man in the middle on map A…

Dec 20, 2018
Unscored —

CVE-2018-1000837

UML Designer version <= 8.0.0 contains a XML External Entity (XXE) vulnerability in XML parser for plugins that can res…

Dec 20, 2018
Unscored —

CVE-2018-1000827

Ubilling version <= 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclo…

Dec 20, 2018
Unscored —

CVE-2018-1000852

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unkn…

freerdp2 freerdp2 Debian Ubuntu

Dec 20, 2018
Unscored —

CVE-2018-1000828

FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the…

Dec 20, 2018
Critical 10.0

CVE-2018-1000820

XML External Entity (XXE) vulnerability in neo4j.procedure:apoc

neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This vulnerability appears to have b…

org.neo4j.procedure:apoc Maven

Dec 20, 2018
Unscored —

CVE-2018-1000835

KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can resu…

Dec 20, 2018
Unscored —

CVE-2018-1000833

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Dis…

zoneminder zoneminder Debian Ubuntu

Dec 20, 2018
Unscored —

CVE-2018-1000821

MicroMathematics version before commit 5c05ac8 contains a XML External Entity (XXE) vulnerability in SMathStudio files …

Dec 20, 2018
Unscored —

CVE-2018-1000839

LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Re…

Dec 20, 2018
Unscored —

CVE-2018-1000831

K9Mail version <= v5.600 contains a XML External Entity (XXE) vulnerability in WebDAV response parser that can result i…

Dec 20, 2018
Critical 9.1

CVE-2018-1000844 Public exploit

XML External Entity (XXE) vulnerability in Square Retrofit

Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerability in JAXB that can result in An attacker could use this to remotely read files from the file system or to perform SSR…

com.squareup.retrofit2:retrofit Maven

Dec 20, 2018
Unscored —

CVE-2018-1000815

Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function Content…

Dec 20, 2018
Unscored —

CVE-2018-1000838

autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result …

Dec 20, 2018
Medium 6.1

CVE-2018-1000842

Fat Free CRM vulnerable to Cross-site Scripting

FatFreeCRM version <=0.14.1, >=0.15.0 <=0.15.1, >=0.16.0 <=0.16.3, >=0.17.0 <=0.17.2, ==0.18.0 contains a Cross Site Scripting (XSS) vulnerability in commit 6d60bc8ed010c4eda05d6645c64849f415f68d65 that can result in Javascript execution. This attack appear t…

fat_free_crm RubyGems

Dec 20, 2018
Unscored —

CVE-2018-1000825

FreeCol version <= nightly-2018-08-22 contains a XML External Entity (XXE) vulnerability in FreeColXMLReader parser tha…

freecol freecol Debian Ubuntu

Dec 20, 2018
Unscored —

CVE-2018-1000832

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Dis…

zoneminder zoneminder Debian Ubuntu

Dec 20, 2018
Unscored —

CVE-2018-11986

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buf…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2018-11961

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possibility …

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2018-11983

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Error in ker…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2018-11965

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Anyone can e…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2018-11964

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Exposing the…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2018-11984

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after …

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2018-11987

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, if there is …

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2018-11985

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, When allocat…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2018-11988

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Un-trusted p…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2018-11960

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after …

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2018-11963

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Buffer overr…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Unscored —

CVE-2017-9704

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, There is no …

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 20, 2018
Medium 5.1

CVE-2018-7365

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerabil…

ZTE uSmartView

Dec 20, 2018
High 7.1

CVE-2018-1784

IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. I…

IBM API Connect

Dec 20, 2018
High 7.7

CVE-2018-1778

IBM LoopBack (IBM API Connect 2018.1, 2018.4.1, 5.0.8.0, and 5.0.8.4) could allow an attacker to bypass authentication …

IBM API Connect

Dec 20, 2018
Medium 6.5

CVE-2018-1661

IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an atta…

IBM DataPower Gateways

Dec 20, 2018