CVEs published December 18, 2018
19 CVEs were published on December 18, 2018: 0 critical, 1 high.
- Published
- 19
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- [UNKNOWN] kernel:
- 1
- IBM Event Streams
- 1
- phpservermon/phpservermon
- 1
- symfony/security-http · symfony/security +1
- 1
- symfony/symfony · symfony/form
- 1
- Webroot
- 1
High 1
Medium, low and unrated 18
- CVE-2018-16884A flaw was found in the Linux kernel's NFS41+ subsystem.[UNKNOWN] kernel:
- CVE-2018-17777An issue was discovered on D-Link DVA-5592 A1_WI_20180823 devices.
- CVE-2018-18921PHP Server Monitor before 3.3.2 has CSRF, as demonstrated by a Delete action.phpservermon/phpservermon
- CVE-2018-19789An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, andsymfony/symfony · symfony/form
- CVE-2018-19790An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.symfony/security-http · symfony/security +1
- CVE-2018-19829Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID num
- CVE-2018-6978vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege esca
- CVE-2018-20213wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long name.
- CVE-2017-15031In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak secure
- CVE-2018-1833IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header.IBM Event Streams
- CVE-2018-19522DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x800020F4) with a buffer containing user de
- CVE-2018-20201There is a stack-based buffer over-read in the jsfNameFromString function of jsflash.c in Espruino 2V00, leading to a denial of service or p
- CVE-2018-20194There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Aud
- CVE-2018-20195A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
- CVE-2018-20196There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audi
- CVE-2018-20197There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Aud
- CVE-2018-20198A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
- CVE-2018-20199A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.