21 December 2018

30 results · Feed

• Unscored —
  CVE-2018-18007

  atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials.

  Dec 21, 2018
• Unscored —
  CVE-2018-18009

  dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials.

  Dec 21, 2018
• Unscored —
  CVE-2018-18008

  spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to discover admin credent…

  Dec 21, 2018
• Critical 9.8
  CVE-2018-19323 Exploited · Ransomware Public exploit

  The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING…

  Dec 21, 2018

  KEV Oct 24, 2022
• High 7.8
  CVE-2018-19321 Exploited · Ransomware Public exploit

  The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, …

  Dec 21, 2018

  KEV Oct 24, 2022
• High 7.8
  CVE-2018-19322 Exploited · Ransomware

  The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, …

  Dec 21, 2018

  KEV Oct 24, 2022
• High 7.8
  CVE-2018-19320 Exploited · Ransomware Public exploit

  The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING…

  Dec 21, 2018

  KEV Oct 24, 2022
• Unscored —
  CVE-2018-20193

  Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but now sold and supported b…

  Dec 21, 2018
• Unscored —
  CVE-2018-16778

  Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary w…

  Dec 21, 2018
• Unscored —
  CVE-2018-20322

  LimeSurvey version 3.15.5 contains a Cross-site scripting (XSS) vulnerability in Survey Resource zip upload, resulting …

  Dec 21, 2018
• Unscored —
  CVE-2018-20226

  An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of o…

  Dec 21, 2018
• Critical 9.8
  CVE-2018-20325

  Code injection in Danijar Definitions

  There is a vulnerability in load() method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution.

  definitions PyPI
  Dec 21, 2018
• Unscored —
  CVE-2018-20346 EPSS 10%

  SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow…

  chromium sqlite3 sqlite3 ceph Debian Ubuntu Azure Linux Alpine
  Dec 21, 2018
• Unscored —
  CVE-2018-20345

  Incorrect access control in StackStorm API (st2api) in StackStorm before 2.9.2 and 2.10.x before 2.10.1 allows an attac…

  Dec 21, 2018
• Unscored —
  CVE-2018-20342

  The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This al…

  Dec 21, 2018
• Unscored —
  CVE-2018-5202

  SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. Th…

  SIGNKOREA SKCertService
  Dec 21, 2018
• Unscored —
  CVE-2018-5201

  Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 an…

  Hancom Hancom Office
  Dec 21, 2018
• Unscored —
  CVE-2018-18331

  A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow…

  Trend Micro Trend Micro OfficeScan
  Dec 21, 2018
• Unscored —
  CVE-2018-18332

  A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permiss…

  Trend Micro Trend Micro OfficeScan
  Dec 21, 2018
• Unscored —
  CVE-2018-18330

  An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3.0.1324 and below coul…

  Trend Micro Trend Micro Dr. Safety for Android (Consumer) Android
  Dec 21, 2018
• High 8.8
  CVE-2018-5196

  Alzip Stack Overflow Vulnerability

  Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted LZH archive file, a attacker could execute arbitrary code execution.

  ESTSOFT ALZIP
  Dec 21, 2018
• Unscored —
  CVE-2018-20339

  Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section.

  Dec 21, 2018
• Unscored —
  CVE-2018-20332

  An issue has been discovered in the OpenWebif plugin through 1.2.4 for Enigma2 based devices. Reading of arbitrary file…

  Dec 21, 2018
• Unscored —
  CVE-2018-20338 EPSS 12%

  Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section.

  Dec 21, 2018
• Unscored —
  CVE-2018-20330

  The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via…

  libjpeg-turbo Alpine
  Dec 21, 2018
• Unscored —
  CVE-2018-20337

  There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted in…

  kodi dcraw libraw rawtherapee Debian Ubuntu
  Dec 21, 2018
• Unscored —
  CVE-2018-20328

  Chamilo LMS version 1.11.8 contains XSS in main/social/group_view.php in the social groups tool, allowing authenticated…

  Dec 21, 2018
• Unscored —
  CVE-2018-20329

  Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users wi…

  Dec 21, 2018
• Unscored —
  CVE-2018-20327

  Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebook_list.tpl in the gradebook dependencies…

  Dec 21, 2018
• Unscored —
  CVE-2018-20318

  An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseW…

  Dec 21, 2018