CVEs published December 1, 2018
8 CVEs were published on December 1, 2018: 0 critical, 6 high.
- Published
- 8
- Critical
- 0
- High
- 6
- Medium
- 0
- Low
- 0
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Talos Atlantis Word Processor
- 3
- Talos TP-Link
- 3
- athlon1600/php-proxy
- 1
- athlon1600/php-proxy-app
- 1
High 6
- CVE-2018-4040An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2.Talos Atlantis Word Processor
- CVE-2018-4039An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2.Talos Atlantis Word Processor
- CVE-2018-4038An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, whilTalos Atlantis Word Processor
- CVE-2018-3951An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server.Talos TP-Link
- CVE-2018-3950An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 andTalos TP-Link
- CVE-2018-3949An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN.Talos TP-Link