# CVEs published 2018-12-11

53 CVEs were published on December 11, 2018: 2 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2018-2486](https://cve.now/CVE-2018-2486.md): SAP Marketing (UICUAN (1.20, 1.30, 1.40), SAPSCORE (1.13, 1.14)) does not sufficiently encode user-controlled inputs, resulting in Cross-Sit (no CVSS, SAP Marketing)
- [CVE-2018-2492](https://cve.now/CVE-2018-2492.md): SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted source. (no CVSS, SAP NetWeaver Application Server)
- [CVE-2018-2494](https://cve.now/CVE-2018-2494.md): Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of SAP (no CVSS, SAP Basis)
- [CVE-2018-2497](https://cve.now/CVE-2018-2497.md): The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax (no CVSS, SAP HANA)
- [CVE-2018-2500](https://cve.now/CVE-2018-2500.md): Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information w (no CVSS, SAP Mobile Secure for Android)
- [CVE-2018-2502](https://cve.now/CVE-2018-2502.md): TRACE method is enabled in SAP Business One Service Layer . (no CVSS, SAP Business One Service Layer)
- [CVE-2018-2503](https://cve.now/CVE-2018-2503.md): By default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that should be protected. (no CVSS, SAP NetWeaver AS Java)
- [CVE-2018-2504](https://cve.now/CVE-2018-2504.md): SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Ma (no CVSS, SAP NetWeaver AS Java)
- [CVE-2018-2505](https://cve.now/CVE-2018-2505.md): SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts tha (no CVSS, SAP Commerce)
- [CVE-2018-6703](https://cve.now/CVE-2018-6703.md): Remote Logging functionality had a use after free vulnerability in McAfee Agent (CVSS 9.8, McAfee Agent)
- [CVE-2018-18810](https://cve.now/CVE-2018-18810.md): TIBCO Managed File Transfer Credentials Disclosure (CVSS 6.8, TIBCO Software TIBCO Managed File Transfer Command Center ·…)
- [CVE-2018-20064](https://cve.now/CVE-2018-20064.md): doorGets 7.0 allows remote attackers to write to arbitrary files via directory traversal, as demonstrated by a dg-user/?controller=theme&act (no CVSS)
- [CVE-2018-20062](https://cve.now/CVE-2018-20062.md): An issue was discovered in NoneCms V1.3. (CVSS 9.8, KEV)
- [CVE-2018-19968](https://cve.now/CVE-2018-19968.md): An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature. (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2018-19969](https://cve.now/CVE-2018-19969.md): phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws. (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2018-19970](https://cve.now/CVE-2018-19970.md): In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2018-20060](https://cve.now/CVE-2018-20060.md): urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that diff (no CVSS, urllib3)
- [CVE-2018-20061](https://cve.now/CVE-2018-20061.md): A SQL injection issue was discovered in ERPNext 10.x and 11.x through 11.0.3-beta.29. (no CVSS)
- [CVE-2018-1652](https://cve.now/CVE-2018-1652.md): IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through (CVSS 6.2, IBM DataPower Gateways · IBM MQ Appliance)
- [CVE-2018-1654](https://cve.now/CVE-2018-1654.md): IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 could allow a remote attacker to conduct phishing attacks, using a (CVSS 6.8, IBM Curam Social Program Management)
- [CVE-2018-1900](https://cve.now/CVE-2018-1900.md): IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Curam Social Program Management)
- [CVE-2018-1904](https://cve.now/CVE-2018-1904.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through an administrativ (CVSS 8.1, IBM WebSphere Application Server)
- [CVE-2018-17480](https://cve.now/CVE-2018-17480.md): Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.35 (CVSS 8.8, KEV, Google Chrome)
- [CVE-2018-17481](https://cve.now/CVE-2018-17481.md): Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap c (no CVSS, Google Chrome)
- [CVE-2018-18335](https://cve.now/CVE-2018-18335.md): Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a c (no CVSS, Google Chrome)
- [CVE-2018-18336](https://cve.now/CVE-2018-18336.md): Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption (no CVSS, Google Chrome)
- [CVE-2018-18337](https://cve.now/CVE-2018-18337.md): Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to p (no CVSS, Google Chrome)
- [CVE-2018-18338](https://cve.now/CVE-2018-18338.md): Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit he (no CVSS, Google Chrome)
- [CVE-2018-18339](https://cve.now/CVE-2018-18339.md): Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corrupti (no CVSS, Google Chrome)
- [CVE-2018-18340](https://cve.now/CVE-2018-18340.md): Incorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap cor (no CVSS, Google Chrome)
- [CVE-2018-18341](https://cve.now/CVE-2018-18341.md): An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potential (no CVSS, Google Chrome)
- [CVE-2018-18342](https://cve.now/CVE-2018-18342.md): Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Goog (no CVSS, Google Chrome)
- [CVE-2018-18343](https://cve.now/CVE-2018-18343.md): Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potential (no CVSS, Google Chrome)
- [CVE-2018-18344](https://cve.now/CVE-2018-18344.md): Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a (no CVSS)
- [CVE-2018-18345](https://cve.now/CVE-2018-18345.md): Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the r (no CVSS, Google Chrome)
- [CVE-2018-18346](https://cve.now/CVE-2018-18346.md): Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing brows (no CVSS, Google Chrome)
- [CVE-2018-18347](https://cve.now/CVE-2018-18347.md): Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to (no CVSS, Google Chrome)
- [CVE-2018-18348](https://cve.now/CVE-2018-18348.md): Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote atta (no CVSS, Google Chrome)
- [CVE-2018-18349](https://cve.now/CVE-2018-18349.md): Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 allowed an attacker wh (no CVSS, Google Chrome)
- [CVE-2018-18350](https://cve.now/CVE-2018-18350.md): Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass (no CVSS, Google Chrome)
- [CVE-2018-18351](https://cve.now/CVE-2018-18351.md): Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a re (no CVSS, Google Chrome)
- [CVE-2018-18352](https://cve.now/CVE-2018-18352.md): Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attac (no CVSS, Google Chrome)
- [CVE-2018-18353](https://cve.now/CVE-2018-18353.md): Failure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on Android prior to 71.0.3578.80 allowed a rem (no CVSS, Google Chrome)
- [CVE-2018-18354](https://cve.now/CVE-2018-18354.md): Insufficient validate of external protocols in Shell Integration in Google Chrome on Windows prior to 71.0.3578.80 allowed a remote attacker (no CVSS, Google Chrome)
- [CVE-2018-18355](https://cve.now/CVE-2018-18355.md): Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the c (no CVSS, Google Chrome)
- [CVE-2018-18356](https://cve.now/CVE-2018-18356.md): An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to po (no CVSS, Google Chrome)
- [CVE-2018-18357](https://cve.now/CVE-2018-18357.md): Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the c (no CVSS, Google Chrome)
- [CVE-2018-18358](https://cve.now/CVE-2018-18358.md): Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment to (no CVSS, Google Chrome)
- [CVE-2018-18359](https://cve.now/CVE-2018-18359.md): Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perform an out of bounds m (no CVSS, Google Chrome)
- [CVE-2018-20059](https://cve.now/CVE-2018-20059.md): jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE. (no CVSS, ro.pippo:pippo-core)
- [CVE-2018-20056](https://cve.now/CVE-2018-20056.md): An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. (no CVSS)
- [CVE-2018-20057](https://cve.now/CVE-2018-20057.md): An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. (no CVSS)
- [CVE-2018-20058](https://cve.now/CVE-2018-20058.md): In Evernote before 7.6 on macOS, there is a local file path traversal issue in attachment previewing, aka MACOSNOTE-28634. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-12-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.