Skip to content
OpenAdvisories

Archive

31 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /31 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-6341 Public exploit

    Cross-Site Scripting in react-dom

    React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x,…

    Facebook react-dom react-dom npm
  • Medium 6.5
    CVE-2018-20622

    JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.

    jasper Ubuntu
  • Medium 5.5
    CVE-2018-20623

    In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archi…

    binutils binutils Debian Ubuntu
  • Medium 6.1
    CVE-2018-6668

    Bypass Application Control with simple DLL

    A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell.

    McAfee Application and Change Control
  • Medium 6.6
    CVE-2018-19937

    A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by op…

  • Medium 6.5
    CVE-2018-18593

    MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities

    Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3,…

    Micro Focus UCMDB Configuration Management Service
  • Medium 6.1
    CVE-2018-19904

    Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page "body" field.

  • Medium 5.4
    CVE-2018-19905

    HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.

  • Medium 5.4
    CVE-2018-19918

    CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table_manager/view/cu_views URI.

  • Medium 5.4
    CVE-2018-19906

    Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.