CVEs published November 23, 2018
13 CVEs were published on November 23, 2018: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 13
- CVE-2018-19499Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code Execution because authenticated administrators have a reachable call to unser
- CVE-2018-19502An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1.
- CVE-2018-19503An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1.
- CVE-2018-19504An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1.
- CVE-2018-19490An issue was discovered in datafile.c in Gnuplot 5.2.5.
- CVE-2018-19491An issue was discovered in post.trm in Gnuplot 5.2.5.
- CVE-2018-19492An issue was discovered in cairo.trm in Gnuplot 5.2.5.
- CVE-2018-19486Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cas
- CVE-2018-19468HuCart 5.7.4 has SQL injection in get_ip() in system/class/helper_class.php via the X-Forwarded-For HTTP header to the user/index.php?load=l
- CVE-2018-19469ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.
- CVE-2018-19475psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack spa
- CVE-2018-19476psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type
- CVE-2018-19477psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode typ