# CVEs published 2018-12-10 32 CVEs were published on December 10, 2018: 1 critical, 2 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2018-20050](https://cve.now/CVE-2018-20050.md): Mishandling of an empty string on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of service (no CVSS) - [CVE-2018-20051](https://cve.now/CVE-2018-20051.md): Mishandling of '\>' on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of service (crash and (no CVSS) - [CVE-2018-20029](https://cve.now/CVE-2018-20029.md): The nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10 allows local users to cause a denial of service (BS (no CVSS) - [CVE-2018-1279](https://cve.now/CVE-2018-1279.md): RabbitMQ cluster compromise due to deterministically generated cookie (CVSS 8.5, Pivotal RabbitMq for PCF) - [CVE-2018-15800](https://cve.now/CVE-2018-15800.md): Timing attack allows extraction of signing key in Bits Service (CVSS 8.1, Cloud Foundry Bits Service Release) - [CVE-2018-15805](https://cve.now/CVE-2018-15805.md): Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitr (no CVSS) - [CVE-2018-16635](https://cve.now/CVE-2018-16635.md): Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php. (no CVSS) - [CVE-2018-16636](https://cve.now/CVE-2018-16636.md): Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter. (no CVSS) - [CVE-2018-3988](https://cve.now/CVE-2018-3988.md): Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature avai (CVSS 3.3, Signal) - [CVE-2016-10502](https://cve.now/CVE-2016-10502.md): While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobi (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear) - [CVE-2018-1000861](https://cve.now/CVE-2018-1000861.md): A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/cor (CVSS 9.8, KEV, org.jenkins-ci.main:jenkins-core) - [CVE-2018-1000862](https://cve.now/CVE-2018-1000862.md): An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allo (no CVSS, org.jenkins-ci.main:jenkins-core) - [CVE-2018-1000863](https://cve.now/CVE-2018-1000863.md): A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows att (no CVSS, org.jenkins-ci.main:jenkins-core) - [CVE-2018-1000864](https://cve.now/CVE-2018-1000864.md): A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Ov (no CVSS, org.jenkins-ci.main:jenkins-core) - [CVE-2018-1000865](https://cve.now/CVE-2018-1000865.md): A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/ (no CVSS, org.jenkins-ci.plugins:script-security) - [CVE-2018-1000866](https://cve.now/CVE-2018-1000866.md): A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.59 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox (no CVSS, org.jenkins-ci.plugins.workflow:workflow-cps · org.jenkins-…) - [CVE-2018-1671](https://cve.now/CVE-2018-1671.md): IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection. (no CVSS) - [CVE-2018-1957](https://cve.now/CVE-2018-1957.md): IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based (CVSS 4.0, IBM WebSphere Application Server) - [CVE-2018-20009](https://cve.now/CVE-2018-20009.md): DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field. (no CVSS) - [CVE-2018-20010](https://cve.now/CVE-2018-20010.md): DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field. (no CVSS) - [CVE-2018-20011](https://cve.now/CVE-2018-20011.md): DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field. (no CVSS) - [CVE-2018-20012](https://cve.now/CVE-2018-20012.md): PHPCMF 4.1.3 has XSS via the first input field to the index.php?s=member&c=register&m=index URI. (no CVSS) - [CVE-2018-20015](https://cve.now/CVE-2018-20015.md): YzmCMS v5.2 has admin/role/add.html CSRF. (no CVSS) - [CVE-2018-20017](https://cve.now/CVE-2018-20017.md): SEMCMS 3.5 has XSS via the first text box to the SEMCMS\_Main.php URI. (no CVSS) - [CVE-2018-20018](https://cve.now/CVE-2018-20018.md): S-CMS V3.0 has SQL injection via the S\_id parameter, as demonstrated by the /1/?type=productinfo&S\_id=140 URI. (no CVSS) - [CVE-2018-20004](https://cve.now/CVE-2018-20004.md): An issue has been found in Mini-XML (aka mxml) 2.12. (no CVSS) - [CVE-2018-20005](https://cve.now/CVE-2018-20005.md): An issue has been found in Mini-XML (aka mxml) 2.12. (no CVSS) - [CVE-2018-20006](https://cve.now/CVE-2018-20006.md): An issue was discovered in PHPok v5.0.055. (no CVSS) - [CVE-2018-20000](https://cve.now/CVE-2018-20000.md): Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an invite-reply document that reads a local file, related to w (no CVSS, org.bedework:bw-webdav) - [CVE-2018-20001](https://cve.now/CVE-2018-20001.md): In Libav 12.3, there is a floating point exception in the range\_decode\_culshift function (called from range\_decode\_bits) in libavcodec/apede (no CVSS) - [CVE-2018-20002](https://cve.now/CVE-2018-20002.md): The \_bfd\_generic\_read\_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutil (no CVSS) - [CVE-2018-19991](https://cve.now/CVE-2018-19991.md): VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get\_uri\_args o (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-12-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.