CVEs published November 3, 2018
3 CVEs were published on November 3, 2018: 0 critical, 0 high.
- Published
- 3
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 3
- CVE-2018-18909xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor's source-code view.
- CVE-2018-18903Vanilla 2.6.x before 2.6.4 allows remote code execution.
- CVE-2018-18915There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1.