CVEs published November 21, 2018
15 CVEs were published on November 21, 2018: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 15
- Critical
- 1
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- IBM Cloud Private
- 1
- intelliants/subrion
- 1
Critical 1
Medium, low and unrated 14
- CVE-2018-19420In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative cases in which HTML can be executed, such as
- CVE-2018-19421In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/up
- CVE-2018-19423Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.
- CVE-2018-19424ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files.
- CVE-2018-19416An issue was discovered in sysstat 12.1.1.
- CVE-2018-19417An issue was discovered in the MQTT server in Contiki-NG before 4.2.
- CVE-2018-19409An issue was discovered in Artifex Ghostscript before 9.26.
- CVE-2018-19411PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write acco
- CVE-2009-5153In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allo
- CVE-2018-1843The Identity and Access Management (IAM) services (IBM Cloud Private 3.1.0) do not use a secure channel, such as SSL, to exchange informatioIBM Cloud Private
- CVE-2018-19404In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by
- CVE-2018-19406kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer der
- CVE-2018-19407The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL
- CVE-2018-19422/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess fiintelliants/subrion