Archive

24 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /24 January 2019 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 6.5

CVE-2018-8918

Cross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1.7-6941 allows remote a…

Synology Synology Router Manager (SRM)

Dec 24, 2018
Medium 6.5

CVE-2018-8917

Cross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows re…

Synology DiskStation Manager (DSM)

Dec 24, 2018
Medium 5.9

CVE-2018-8920

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager (DSM) before 6.1.6-1526…

Synology DiskStation Manager (DSM)

Dec 24, 2018
Medium 6.5

CVE-2018-17197

Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser

A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.

Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven

Dec 24, 2018
Medium 4.8

CVE-2018-20418 Public exploit

Craft CMS Cross-site Scripting (XSS) Vulnerability

index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.

craftcms/cms Packagist

Dec 24, 2018