Skip to content
OpenAdvisories

Archive

December 2018

Vulnerabilities first published in this month (UTC), newest first.

← November 2018 2018 / December January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

92 results · Clear filters · Feed

  • High 7.2
    CVE-2018-4021 EPSS 70%

    An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the paramet…

    Netgate Netgate pfSense
  • High 7.8
    CVE-2018-6439

    A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, …

    Brocade Communications Systems Brocade FABRIC OS
  • High 7.1
    CVE-2018-3854

    An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2…

  • High 7.3
    CVE-2018-16863

    It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant o…

    Artifex Ghostscript
  • High 7.5
    CVE-2018-16855 EPSS 59%

    An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigg…

    [UNKNOWN] pdns-recursor pdns-recursor pdns-recursor Debian Ubuntu Alpine
  • High 8.8
    CVE-2018-4040

    An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, ve…

    Talos Atlantis Word Processor
  • High 8.8
    CVE-2018-4039

    An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3…

    Talos Atlantis Word Processor
  • High 8.8
    CVE-2018-4038

    An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, …

    Talos Atlantis Word Processor
  • High 7.2
    CVE-2018-3951

    An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN…

    Talos TP-Link
  • High 7.2
    CVE-2018-3950

    An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600V…

    Talos TP-Link
  • High 7.5
    CVE-2018-3949 EPSS 53%

    An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. …

    Talos TP-Link
  • High 7.5
    CVE-2018-19784

    Weak Cryptography in PHP-Proxy

    The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.

    athlon1600/php-proxy Packagist