CVEs published November 12, 2018
43 CVEs were published on November 12, 2018: 0 critical, 0 high.
- Published
- 43
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 40
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- ethereumjs-vm
- 1
- github.com/ethereum/go-ethereum
- 1
- IBM Case Manager
- 1
- IBM Spectrum Protect
- 1
- IBM WebSphere Application Server
- 1
- py-evm · evm-py
- 1
Medium, low and unrated 43
- CVE-2018-19220An issue was discovered in LAOBANCMS 2.0.
- CVE-2018-19221An issue was discovered in LAOBANCMS 2.0.
- CVE-2018-19222An issue was discovered in LAOBANCMS 2.0.
- CVE-2018-19223An issue was discovered in LAOBANCMS 2.0.
- CVE-2018-19224An issue was discovered in LAOBANCMS 2.0.
- CVE-2018-19225An issue was discovered in LAOBANCMS 2.0.
- CVE-2018-19226An issue was discovered in LAOBANCMS 2.0.
- CVE-2018-19227An issue was discovered in LAOBANCMS 2.0.
- CVE-2018-19228An issue was discovered in LAOBANCMS 2.0.
- CVE-2018-19229An issue was discovered in LAOBANCMS 2.0.
- CVE-2018-19208In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will le
- CVE-2018-19209Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack.
- CVE-2018-19210In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of
- CVE-2018-19211In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attac
- CVE-2018-19212In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack.
- CVE-2018-19213Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c.
- CVE-2018-19214Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input.
- CVE-2018-19215Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % an
- CVE-2018-19216Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c.
- CVE-2018-19217In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service
- CVE-2018-19218In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead to a DoS attack.
- CVE-2018-19219In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack.
- CVE-2018-19205Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive informati
- CVE-2018-19206steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as demonstrated by an onload attribute in a BODY elem
- CVE-2018-19207The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code
- CVE-2018-1786IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state.IBM Spectrum Protect
- CVE-2018-1798IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Application Server
- CVE-2018-1884IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a reIBM Case Manager
- CVE-2018-19203PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTT
- CVE-2018-19204PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and O
- CVE-2018-19198An issue was discovered in uriparser before 0.9.0.
- CVE-2018-19199An issue was discovered in uriparser before 0.9.0.
- CVE-2018-19200An issue was discovered in uriparser before 0.9.0.
- CVE-2018-19185An issue has been found in libIEC61850 v1.3.
- CVE-2018-19192An issue was discovered in XiaoCms 20141229.
- CVE-2018-19193An issue was discovered in XiaoCms 20141229.
- CVE-2018-19194An issue was discovered in XiaoCms 20141229.
- CVE-2018-19195An issue was discovered in XiaoCms 20141229.
- CVE-2018-19196An issue was discovered in XiaoCms 20141229.
- CVE-2018-19197An issue was discovered in XiaoCms 20141229.
- CVE-2018-18920Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100,py-evm · evm-py
- CVE-2018-19184cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.github.com/ethereum/go-ethereum
- CVE-2018-19183ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" ethereumjs-vm