# CVEs published 2018-12-19 30 CVEs were published on December 19, 2018: 0 critical, 1 high. Days are UTC. - [CVE-2018-15798](https://cve.now/CVE-2018-15798.md): Pivotal Concourse allows malicious redirect urls on login (CVSS 7.6, Pivotal Concourse · github.com/concourse/concourse) - [CVE-2018-15801](https://cve.now/CVE-2018-15801.md): Authorization Bypass During JWT Issuer Validation with spring-security (CVSS 3.3, Spring by Pivotal Spring Security · org.springframework.… +1) - [CVE-2018-20299](https://cve.now/CVE-2018-20299.md): An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. (no CVSS) - [CVE-2018-11799](https://cve.now/CVE-2018-11799.md): Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. (no CVSS, Apache Software Foundation Apache Oozie · org.apache.oozie:…) - [CVE-2018-19506](https://cve.now/CVE-2018-19506.md): Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI. (no CVSS) - [CVE-2018-19507](https://cve.now/CVE-2018-19507.md): CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI. (no CVSS) - [CVE-2018-19508](https://cve.now/CVE-2018-19508.md): CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI. (no CVSS) - [CVE-2018-19596](https://cve.now/CVE-2018-19596.md): Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506. (no CVSS) - [CVE-2018-19597](https://cve.now/CVE-2018-19597.md): CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798. (no CVSS) - [CVE-2018-19598](https://cve.now/CVE-2018-19598.md): Statamic 2.10.3 allows XSS via First Name or Last Name to the /users URI in an 'Add new user' request. (no CVSS) - [CVE-2018-18999](https://cve.now/CVE-2018-18999.md): WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1. (no CVSS, WebAccess/SCADA) - [CVE-2018-20298](https://cve.now/CVE-2018-20298.md): S3 Browser before 8.1.5 contains an XML external entity (XXE) vulnerability, allowing remote attackers to read arbitrary files and obtain NT (no CVSS) - [CVE-2018-15126](https://cve.now/CVE-2018-15126.md): LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer ext (no CVSS, LibVNC) - [CVE-2018-15127](https://cve.now/CVE-2018-15127.md): LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer (no CVSS, LibVNC) - [CVE-2018-20019](https://cve.now/CVE-2018-20019.md): LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code t (no CVSS, LibVNC) - [CVE-2018-20020](https://cve.now/CVE-2018-20020.md): LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client (no CVSS, LibVNC) - [CVE-2018-20021](https://cve.now/CVE-2018-20021.md): LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. (no CVSS, LibVNC) - [CVE-2018-20022](https://cve.now/CVE-2018-20022.md): LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC cl (no CVSS, LibVNC) - [CVE-2018-20023](https://cve.now/CVE-2018-20023.md): LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code t (no CVSS, LibVNC) - [CVE-2018-20024](https://cve.now/CVE-2018-20024.md): LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS. (no CVSS, LibVNC) - [CVE-2018-6307](https://cve.now/CVE-2018-6307.md): LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer ext (no CVSS, LibVNC) - [CVE-2018-16883](https://cve.now/CVE-2018-16883.md): sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed\_uids" configuration par (CVSS 2.5, \[UNKNOWN\] sssd) - [CVE-2018-17192](https://cve.now/CVE-2018-17192.md): The X-Frame-Options headers were applied inconsistently on some HTTP responses, resulting in duplicate or missing security headers. (no CVSS, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…) - [CVE-2018-17193](https://cve.now/CVE-2018-17193.md): The message-page.jsp error page used the value of the HTTP request header X-ProxyContextPath without sanitization, resulting in a reflected (no CVSS, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…) - [CVE-2018-17194](https://cve.now/CVE-2018-17194.md): When a client request to a cluster node was replicated to other nodes in the cluster for verification, the Content-Length was forwarded. (no CVSS, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…) - [CVE-2018-17195](https://cve.now/CVE-2018-17195.md): The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle (MiT (no CVSS, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…) - [CVE-2018-20227](https://cve.now/CVE-2018-20227.md): RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive. (no CVSS, org.eclipse.rdf4j:rdf4j) - [CVE-2018-20228](https://cve.now/CVE-2018-20228.md): Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF. (no CVSS) - [CVE-2018-20230](https://cve.now/CVE-2018-20230.md): An issue was discovered in PSPP 1.2.0. (no CVSS) - [CVE-2018-20231](https://cve.now/CVE-2018-20231.md): Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-12-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.