CVEs published November 19, 2018
9 CVEs were published on November 19, 2018: 2 critical, 0 high.
- Published
- 9
- Critical
- 2
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Apache Software Foundation Apache Spark · org.apache.spa… +1
- 1
- Cloud Foundry UAA · org.cloudfoundry.identity:cloudfoundry-…
- 1
- FineUploader php-traditional-server · fineuploader/php-trad…
- 1
- hayageek jQuery Upload File · jquery-file-upload
- 1
- IBM Cloud Private
- 1
- Philips iSite and IntelliSpace PACS
- 1
- Pivotal On Demand Services SDK
- 1
Critical 2
Medium, low and unrated 7
- CVE-2018-17906Philips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all versions.Philips iSite and IntelliSpace PACS
- CVE-2018-9209Unauthenticated arbitrary file upload vulnerability in FineUploader php-traditional-server <= v1.2.2FineUploader php-traditional-server · fineuploader/php-trad…
- CVE-2018-9207Arbitrary file upload in jQuery Upload File <= 4.0.2hayageek jQuery Upload File · jquery-file-upload
- CVE-2018-17190In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'woApache Software Foundation Apache Spark · org.apache.spa… +1
- CVE-2018-1841IBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being world readable in boot/master node.IBM Cloud Private
- CVE-2018-18519BestXsoftware Best Free Keylogger before 6.0.0 allows local users to gain privileges via a Trojan horse "%PROGRAMFILES%\BFK 5.2.9\syscrb.exe
- CVE-2018-19355modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allows remote attackers to