Archive
December 2018
Vulnerabilities first published in this month (UTC), newest first.
1,165 results · Feed
-
Unscored —
An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of o…
-
Critical 9.8
Code injection in Danijar Definitions
There is a vulnerability in load() method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution.
-
Unscored —CVE-2018-20346 EPSS 10%
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow…
-
Unscored —
Incorrect access control in StackStorm API (st2api) in StackStorm before 2.9.2 and 2.10.x before 2.10.1 allows an attac…
-
Unscored —
The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This al…
-
Unscored —
SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. Th…
-
Unscored —
Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 an…
-
Unscored —
A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow…
-
Unscored —
A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permiss…
-
Unscored —
An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3.0.1324 and below coul…
-
High 8.8
Alzip Stack Overflow Vulnerability
Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted LZH archive file, a attacker could execute arbitrary code execution.
-
Unscored —
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section.
-
Unscored —
An issue has been discovered in the OpenWebif plugin through 1.2.4 for Enigma2 based devices. Reading of arbitrary file…
-
Unscored —CVE-2018-20338 EPSS 12%
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section.
-
Unscored —
The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via…
-
Unscored —
There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted in…
-
Unscored —
Chamilo LMS version 1.11.8 contains XSS in main/social/group_view.php in the social groups tool, allowing authenticated…
-
Unscored —
Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users wi…
-
Unscored —
Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebook_list.tpl in the gradebook dependencies…
-
Unscored —
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseW…
-
Unscored —
SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 al…
-
Unscored —CVE-2018-18441 Public exploit
D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices i…
-
Unscored —
eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers t…
-
Unscored —
An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g.…
-
Unscored —
D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service (DoS) attack…
-
Unscored —CVE-2018-18629 Public exploit
An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search p…
-
Unscored —
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.
-
Unscored —
Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker wit…
-
Unscored —
Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are u…
-
Medium 6.5
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same username i…
-
Medium 5.9
Improper Restriction of XML External Entity Reference in Elasticsearch
Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager then an attacker could send a specially cra…
-
Unscored —
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied i…
-
Unscored —
In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially craft…
-
Unscored —
Buffer overflow in video.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2…
-
Unscored —
TRENDnet TEW-673GRU v1.00b40 devices have an OS command injection vulnerability in the start_arpping function of the ti…
-
Unscored —
Buffer overflow in network.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1…
-
Unscored —
Buffer overflow in apply.cgi on TRENDnet TEW-632BRP 1.010B32 and TEW-673GRU devices allows attackers to hijack the cont…
-
Unscored —
The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php.
-
Unscored —
hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which…
-
Unscored —
hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element wit…