CVEs published November 4, 2018
6 CVEs were published on November 4, 2018: 0 critical, 0 high.
- Published
- 6
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- code.gitea.io/gitea
- 1
Medium, low and unrated 6
- CVE-2018-18928International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in
- CVE-2018-18924The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" be
- CVE-2018-18925Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery
- CVE-2018-18926Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs.code.gitea.io/gitea
- CVE-2018-18927An issue was discovered in PublicCMS V4.0.
- CVE-2018-18919The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area.