CVEs published November 18, 2018
5 CVEs were published on November 18, 2018: 0 critical, 0 high.
- Published
- 5
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- notebook
- 2
Medium, low and unrated 5
- CVE-2008-7320GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattende
- CVE-2018-19358GNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the k
- CVE-2018-19351Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as thenotebook
- CVE-2018-19352Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unotebook
- CVE-2018-19353The ansilove_ansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to cause a denial of service (out-of-bounds read a