Skip to content
OpenAdvisories

Archive

December 2018

Vulnerabilities first published in this month (UTC), newest first.

← November 2018 2018 / December January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-6341 Public exploit

    Cross-Site Scripting in react-dom

    React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x,…

    Facebook react-dom react-dom npm
  • Medium 6.1
    CVE-2018-19799 Public exploit

    Dolibarr ERP and CRM contain XSS Vulnerability

    Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium 4.8
    CVE-2018-20418 Public exploit

    Craft CMS Cross-site Scripting (XSS) Vulnerability

    index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.

    craftcms/cms Packagist
  • Medium 6.1
    CVE-2018-19933 Public exploit

    Bolt Cross-site Scripting (XSS) via text input click preview button

    Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.

    bolt/bolt Packagist
  • Medium 5.9
    CVE-2018-16875 Public exploit

    Denial of service in chain verification in crypto/x509

    The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting…

    [UNKNOWN] golang stdlib golang-1.8 Ubuntu Go
  • Medium 6.5
    CVE-2018-7691 Public exploit

    MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access

    A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access

    Micro Focus Fortify Software Security Center (SSC)
  • Medium 6.5
    CVE-2018-7690 Public exploit

    MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access

    A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access

    Micro Focus Fortify Software Security Center (SSC)
  • Medium 6.5
    CVE-2018-19859 Public exploit

    OpenRefine Directory Traversal

    OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.

    org.openrefine:main Maven