Skip to content
OpenAdvisories

Archive

December 2018

Vulnerabilities first published in this month (UTC), newest first.

← November 2018 2018 / December January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-6333

    Nuclide Improper Input Validation

    The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chain…

    Facebook Nuclide nuclide npm
  • Critical 9.8
    CVE-2018-6331

    Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously craft…

    Facebook Buck
  • Critical 9.8
    CVE-2018-6342

    react-dev-utils on Windows vulnerable to Remote Code Execution

    react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the ser…

    Facebook react-dev-utils react-dev-utils npm
  • Critical 9.8
    CVE-2018-6334

    Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not…

    Facebook HHVM hhvm Ubuntu
  • Critical 9.8
    CVE-2018-18602

    The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitorin…

  • Critical 9.8
    CVE-2018-20433 Public exploit

    XML External Entity Reference in mchange:c3p0

    c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization.

    c3p0 com.mchange:c3p0 c3p0 Debian Ubuntu Maven
  • Critical 9.8
    CVE-2018-19323 Exploited · Ransomware Public exploit

    The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING…

    KEV Oct 24, 2022
  • Critical 9.8
    CVE-2018-20325

    Code injection in Danijar Definitions

    There is a vulnerability in load() method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution.

    definitions PyPI
  • Critical 9.8
    CVE-2018-1160 Public exploit EPSS 86%

    Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checkin…

    Netatalk Netatalk netatalk netatalk Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2018-1000854

    Remote Code Execution in esigate-core

    esigate.org esigate version 5.2 and earlier contains a CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in ESI directive with user specified XSLT that can result in Remote Code Execution.…

    org.esigate:esigate-core Maven
  • Critical 10.0
    CVE-2018-1000822

    XML External Entity (XXE) vulnerability in codelibs fess

    codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via speciall…

    org.codelibs.fess:fess Maven
  • Critical 9.0
    CVE-2018-1000836

    XML External Entity (XXE) vulnerability in bw-calendar-engine

    bw-calendar-engine version <= bw-calendar-engine-3.12.0 contains a XML External Entity (XXE) vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be explo…

    org.bedework.caleng:bw-calendar-engine Maven
  • Critical 10.0
    CVE-2018-1000823

    exist-db:exist-core XML External Entity (XXE) vulnerability

    exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

    org.exist-db:exist-core Maven
  • Critical 10.0
    CVE-2018-1000820

    XML External Entity (XXE) vulnerability in neo4j.procedure:apoc

    neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This vulnerability appears to have b…

    org.neo4j.procedure:apoc Maven
  • Critical 9.1
    CVE-2018-1000844 Public exploit

    XML External Entity (XXE) vulnerability in Square Retrofit

    Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerability in JAXB that can result in An attacker could use this to remotely read files from the file system or to perform SSR…

    com.squareup.retrofit2:retrofit Maven
  • Critical 9.8
    CVE-2018-20133

    Code injection in ymlref

    ymlref allows code injection.

    ymlref PyPI
  • Critical 9.8
    CVE-2018-6703

    Remote Logging functionality had a use after free vulnerability in McAfee Agent

    Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sen…

    McAfee McAfee Agent
  • Critical 9.8
    CVE-2018-20062 Exploited Public exploit Scanner template EPSS 100%

    An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PH…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2018-20060

    Exposure of Sensitive Information to an Unauthorized Actor in urllib3

    urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended h…

    urllib3 python-urllib3 python-urllib3 Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2018-20059

    Improper Restriction of XML External Entity Reference in pippo-core

    jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.

    ro.pippo:pippo-core Maven
  • Critical 9.8
    CVE-2018-1000861 Exploited Public exploit Scanner template EPSS 98%

    Deserialization of Untrusted Data in Jenkins

    A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by acce…

    org.jenkins-ci.main:jenkins-core Maven
    KEV Feb 10, 2022
  • Critical 9.8
    CVE-2018-1002105 Public exploit EPSS 87%

    Privilege Escalation in Kubernetes

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…

    Kubernetes Kubernetes kubernetes github.com/kubernetes/kubernetes Debian Go