Skip to content
OpenAdvisories

Archive

31 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /31 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-6333

    Nuclide Improper Input Validation

    The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chain…

    Facebook Nuclide nuclide npm
  • Critical 9.8
    CVE-2018-6331

    Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously craft…

    Facebook Buck
  • Critical 9.8
    CVE-2018-6342

    react-dev-utils on Windows vulnerable to Remote Code Execution

    react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the ser…

    Facebook react-dev-utils react-dev-utils npm
  • Critical 9.8
    CVE-2018-6334

    Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not…

    Facebook HHVM hhvm Ubuntu
  • Critical 9.8
    CVE-2018-18602

    The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitorin…