# CVEs published 2018-12-11

53 CVEs were published on December 11, 2018: 2 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2018-2486](https://cve.now/CVE-2018-2486.md): SAP Marketing (UICUAN (1.20, 1.30, 1.40), SAPSCORE (1.13, 1.14)) does not sufficiently encode user-controlled inputs, resulting in… (no CVSS, SAP Marketing)
- [CVE-2018-2492](https://cve.now/CVE-2018-2492.md): SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted source. (no CVSS, SAP NetWeaver Application Server)
- [CVE-2018-2494](https://cve.now/CVE-2018-2494.md): Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of… (no CVSS, SAP Basis)
- [CVE-2018-2497](https://cve.now/CVE-2018-2497.md): The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the… (no CVSS, SAP HANA)
- [CVE-2018-2500](https://cve.now/CVE-2018-2500.md): Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information… (no CVSS, SAP Mobile Secure for Android)
- [CVE-2018-2502](https://cve.now/CVE-2018-2502.md): TRACE method is enabled in SAP Business One Service Layer . (no CVSS, SAP Business One Service Layer)
- [CVE-2018-2503](https://cve.now/CVE-2018-2503.md): By default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that should be protected. (no CVSS, SAP NetWeaver AS Java)
- [CVE-2018-2504](https://cve.now/CVE-2018-2504.md): SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header… (no CVSS, SAP NetWeaver AS Java)
- [CVE-2018-2505](https://cve.now/CVE-2018-2505.md): SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts… (no CVSS, SAP Commerce)
- [CVE-2018-6703](https://cve.now/CVE-2018-6703.md): Remote Logging functionality had a use after free vulnerability in McAfee Agent (CVSS 9.8, McAfee Agent)
- [CVE-2018-18810](https://cve.now/CVE-2018-18810.md): TIBCO Managed File Transfer Credentials Disclosure (CVSS 6.8, TIBCO Software TIBCO Managed File Transfer Command Center ·…)
- [CVE-2018-20064](https://cve.now/CVE-2018-20064.md): doorGets 7.0 allows remote attackers to write to arbitrary files via directory traversal, as demonstrated by a… (no CVSS)
- [CVE-2018-20062](https://cve.now/CVE-2018-20062.md): An issue was discovered in NoneCms V1.3. (CVSS 9.8, KEV)
- [CVE-2018-19968](https://cve.now/CVE-2018-19968.md): An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature. (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2018-19969](https://cve.now/CVE-2018-19969.md): phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws. (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2018-19970](https://cve.now/CVE-2018-19970.md): In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user… (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2018-20060](https://cve.now/CVE-2018-20060.md): urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that… (no CVSS, urllib3)
- [CVE-2018-20061](https://cve.now/CVE-2018-20061.md): A SQL injection issue was discovered in ERPNext 10.x and 11.x through 11.0.3-beta.29. (no CVSS)
- [CVE-2018-1652](https://cve.now/CVE-2018-1652.md): IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0… (CVSS 6.2, IBM DataPower Gateways · IBM MQ Appliance)
- [CVE-2018-1654](https://cve.now/CVE-2018-1654.md): IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 could allow a remote attacker to conduct phishing attacks, using… (CVSS 6.8, IBM Curam Social Program Management)
- [CVE-2018-1900](https://cve.now/CVE-2018-1900.md): IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Curam Social Program Management)
- [CVE-2018-1904](https://cve.now/CVE-2018-1904.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through an… (CVSS 8.1, IBM WebSphere Application Server)
- [CVE-2018-17480](https://cve.now/CVE-2018-17480.md): Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.35 (CVSS 8.8, KEV, Google Chrome)
- [CVE-2018-17481](https://cve.now/CVE-2018-17481.md): Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap… (no CVSS, Google Chrome)
- [CVE-2018-18335](https://cve.now/CVE-2018-18335.md): Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a… (no CVSS, Google Chrome)
- [CVE-2018-18336](https://cve.now/CVE-2018-18336.md): Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap… (no CVSS, Google Chrome)
- [CVE-2018-18337](https://cve.now/CVE-2018-18337.md): Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to… (no CVSS, Google Chrome)
- [CVE-2018-18338](https://cve.now/CVE-2018-18338.md): Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit… (no CVSS, Google Chrome)
- [CVE-2018-18339](https://cve.now/CVE-2018-18339.md): Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap… (no CVSS, Google Chrome)
- [CVE-2018-18340](https://cve.now/CVE-2018-18340.md): Incorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap… (no CVSS, Google Chrome)
- [CVE-2018-18341](https://cve.now/CVE-2018-18341.md): An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to… (no CVSS, Google Chrome)
- [CVE-2018-18342](https://cve.now/CVE-2018-18342.md): Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in… (no CVSS, Google Chrome)
- [CVE-2018-18343](https://cve.now/CVE-2018-18343.md): Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to… (no CVSS, Google Chrome)
- [CVE-2018-18344](https://cve.now/CVE-2018-18344.md): Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed… (no CVSS)
- [CVE-2018-18345](https://cve.now/CVE-2018-18345.md): Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the… (no CVSS, Google Chrome)
- [CVE-2018-18346](https://cve.now/CVE-2018-18346.md): Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing… (no CVSS, Google Chrome)
- [CVE-2018-18347](https://cve.now/CVE-2018-18347.md): Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker… (no CVSS, Google Chrome)
- [CVE-2018-18348](https://cve.now/CVE-2018-18348.md): Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote… (no CVSS, Google Chrome)
- [CVE-2018-18349](https://cve.now/CVE-2018-18349.md): Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 allowed an attacker… (no CVSS, Google Chrome)
- [CVE-2018-18350](https://cve.now/CVE-2018-18350.md): Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to… (no CVSS, Google Chrome)
- [CVE-2018-18351](https://cve.now/CVE-2018-18351.md): Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a… (no CVSS, Google Chrome)
- [CVE-2018-18352](https://cve.now/CVE-2018-18352.md): Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote… (no CVSS, Google Chrome)
- [CVE-2018-18353](https://cve.now/CVE-2018-18353.md): Failure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on Android prior to 71.0.3578.80 allowed a… (no CVSS, Google Chrome)
- [CVE-2018-18354](https://cve.now/CVE-2018-18354.md): Insufficient validate of external protocols in Shell Integration in Google Chrome on Windows prior to 71.0.3578.80 allowed a remote… (no CVSS, Google Chrome)
- [CVE-2018-18355](https://cve.now/CVE-2018-18355.md): Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the… (no CVSS, Google Chrome)
- [CVE-2018-18356](https://cve.now/CVE-2018-18356.md): An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to… (no CVSS, Google Chrome)
- [CVE-2018-18357](https://cve.now/CVE-2018-18357.md): Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the… (no CVSS, Google Chrome)
- [CVE-2018-18358](https://cve.now/CVE-2018-18358.md): Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment… (no CVSS, Google Chrome)
- [CVE-2018-18359](https://cve.now/CVE-2018-18359.md): Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perform an out of bounds… (no CVSS, Google Chrome)
- [CVE-2018-20059](https://cve.now/CVE-2018-20059.md): jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE. (no CVSS, ro.pippo:pippo-core)
- [CVE-2018-20056](https://cve.now/CVE-2018-20056.md): An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. (no CVSS)
- [CVE-2018-20057](https://cve.now/CVE-2018-20057.md): An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. (no CVSS)
- [CVE-2018-20058](https://cve.now/CVE-2018-20058.md): In Evernote before 7.6 on macOS, there is a local file path traversal issue in attachment previewing, aka MACOSNOTE-28634. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2018-12-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.