Skip to content
OpenAdvisories

Archive

December 2018

Vulnerabilities first published in this month (UTC), newest first.

← November 2018 2018 / December January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.8
    CVE-2018-1000888 Public exploit EPSS 19%

    Archive_Tar contains Potential RCE if filename starts with phar://

    PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class. There are several file operations with `$v_header['filename']` as parameter (such as file_exists, is_file, is_dir, etc). When extract is called with…

    drupal7 php-pear php-pear pear/archive_tar Debian Ubuntu Alpine Packagist
  • High 7.8
    CVE-2018-19321 Exploited · Ransomware Public exploit

    The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, …

    KEV Oct 24, 2022
  • High 7.8
    CVE-2018-19320 Exploited · Ransomware Public exploit

    The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING…

    KEV Oct 24, 2022
  • High 7.5
    CVE-2018-1000850 Public exploit

    Directory Traversal vulnerability in Square Retrofit

    Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources othe…

    com.squareup.retrofit2:retrofit Maven
  • High 7.1
    CVE-2018-1821 Public exploit EPSS 16%

    IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) …

    IBM Operational Decision Management
  • High 8.4
    CVE-2018-8639 Exploited · Ransomware Public exploit EPSS 22%

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

    Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows
    KEV Mar 3, 2025
  • High 7.8
    CVE-2018-8611 Exploited Public exploit

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

    Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows
    KEV May 24, 2022
  • High 7.5
    CVE-2018-8617 Public exploit EPSS 62%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.8
    CVE-2018-6756 Public exploit

    True Key (TK) Windows Client - Authentication Abuse vulnerability

    Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.

    McAfee True Key
  • High 7.5
    CVE-2018-6757 Public exploit

    True Key (TK) Windows Client - Privilege Escalation vulnerability

    Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.

    McAfee True Key
  • High 7.2
    CVE-2018-6755 Public exploit

    True Key (TK) Windows Client - Weak Directory Permission Vulnerability

    Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.

    McAfee True Key