CVEs published December 20, 2018
136 CVEs were published on December 20, 2018: 1 critical, 8 high. 1 is now in CISA KEV.
- Published
- 136
- Critical
- 1
- High
- 8
- Medium
- 5
- Low
- 0
- Unrated
- 122
- Now in CISA KEV
- 1
- Fix available
- 18
Most affected products
- Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- 12
- Logitech Harmony Hub
- 4
- BlackBerry UEM
- 3
- IBM API Connect
- 3
- com.squareup.retrofit2:retrofit
- 2
- Elastic Kibana
- 2
- Elasticsearch · org.elasticsearch:elasticsearch
- 2
- F5 Networks BIG-IP
- 2
- IBM DataPower Gateways
- 2
- WIZVERA Veraport
- 2
Critical 1
High 8
- CVE-2018-1771IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of commandIBM Domino
- CVE-2018-1778IBM LoopBack (IBM API Connect 2018.1, 2018.4.1, 5.0.8.0, and 5.0.8.4) could allow an attacker to bypass authentication if the AccessToken MoIBM API Connect
- CVE-2018-1784IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework.IBM API Connect
- CVE-2018-1973IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves full 'Administrator' lIBM API Connect
- CVE-2018-5198WIZVERA Veraport Race Condition VulnerabilityWIZVERA Veraport
- CVE-2018-5199WIZVERA Remote Code Execution VulnerabilityWIZVERA Veraport
- CVE-2018-5200KMPlayer Heap Overflow VulnerabilityPandora.tv KMPlayer
- CVE-2018-8653A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "ScripMicrosoft Internet Explorer
Medium, low and unrated 127
- CVE-2017-9732The read_packet function in knc (Kerberised NetCat) before 1.11-1 is vulnerable to denial of service (memory exhaustion) that can be exploit
- CVE-2018-12651A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software.
- CVE-2018-14846The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php.
- CVE-2018-16627panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.
- CVE-2018-17244Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active DirElasticsearch · org.elasticsearch:elasticsearch
- CVE-2018-17245Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PElastic Kibana
- CVE-2018-17246Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin.Elastic Kibana
- CVE-2018-17247Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API.Elasticsearch · org.elasticsearch:elasticsearch
- CVE-2018-18388eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary c
- CVE-2018-18399SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacke
- CVE-2018-18441D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration.
- CVE-2018-18442D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service (DoS) attacks.
- CVE-2018-18629An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux.
- CVE-2018-18767An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06.
- CVE-2018-19134In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types.
- CVE-2018-19239TRENDnet TEW-673GRU v1.00b40 devices have an OS command injection vulnerability in the start_arpping function of the timer binary, which all
- CVE-2018-19240Buffer overflow in network.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices
- CVE-2018-19241Buffer overflow in video.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices a
- CVE-2018-19242Buffer overflow in apply.cgi on TRENDnet TEW-632BRP 1.010B32 and TEW-673GRU devices allows attackers to hijack the control flow to any attac
- CVE-2018-20124hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge val
- CVE-2018-20191hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which allows attackers to
- CVE-2018-15720Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the localLogitech Harmony Hub
- CVE-2018-15721The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request.Logitech Harmony Hub
- CVE-2018-15722The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request.Logitech Harmony Hub
- CVE-2018-15723The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request.Logitech Harmony Hub
- CVE-2018-18871Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (
- CVE-2018-19005Cscape, Version 9.80.75.3 SP3 and prior.Cscape
- CVE-2018-20125hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive memory allocation) in
- CVE-2018-20126hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled.
- CVE-2018-20216QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled).
- CVE-2018-1000883Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be
- CVE-2018-1000884Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to 0.9.8-18 contains a CWE-208 / Information
- CVE-2018-1000885PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b contains a Improper Neutralization of Special Elements used in a Comm
- CVE-2018-1000886nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by trig
- CVE-2018-15329On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, or Enterprise Manager 3.1.1, when authenticated administrative users run comF5 Networks BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS…
- CVE-2018-15330On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bombF5 Networks BIG-IP
- CVE-2018-15331On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to drop group permissions when executing helper sF5 Networks BIG-IP
- CVE-2018-8888A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an aBlackBerry UEM
- CVE-2018-8891Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could alBlackBerry UEM
- CVE-2018-8892A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an atBlackBerry UEM
- CVE-2018-1000867WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions*.php scripts that can result in Da
- CVE-2018-1000868WeBid version up to current version 1.2.2 contains a Cross Site Scripting (XSS) vulnerability in user_login.php, register.php that can resul
- CVE-2018-1000869phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection..
- CVE-2018-1000870PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the
- CVE-2018-1000871HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in "id_utente_mod" parameter in gestione_utenti
- CVE-2018-1000872OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors (similar issue to CVE-2015-5262) vulnerabilpykmip
- CVE-2018-1000873Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result icom.fasterxml.jackson.datatype:jackson-datatype-jsr310
- CVE-2018-1000874PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in all distributed parsers allowing a
- CVE-2018-1000875Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass
- CVE-2018-1000876binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_d
- CVE-2018-1000877libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerab
- CVE-2018-1000878libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulne
- CVE-2018-1000879libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Derefer
- CVE-2018-1000880libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Valida
- CVE-2018-1000881Traccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in
- CVE-2018-1000882WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image Fi
- CVE-2018-19233COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted passw
- CVE-2018-19234The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with
- CVE-2018-1000854esigate.org esigate version 5.2 and earlier contains a CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Coorg.esigate:esigate-core
- CVE-2018-1000855easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result easymon
- CVE-2018-1000856DomainMOD version 4.09.03 and above.
- CVE-2018-1000857log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin/log-user-session th
- CVE-2018-1000858GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CS
- CVE-2018-1000860phpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The value of the phpipamredirect cookie is copied i
- CVE-2017-9704In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, There is no synchronization betweQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-1000811bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can res
- CVE-2018-1000812Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten
- CVE-2018-1000813Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Sanitization of custom class names used on bl
- CVE-2018-1000814aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage thaiohttp-session
- CVE-2018-1000815Brave Software Inc.
- CVE-2018-1000816Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor thatgithub.com/grafana/grafana
- CVE-2018-1000817Asset Pipeline Grails Plugin Asset-pipeline plugin version Prior to 2.14.1.1, 2.15.1 and 3.0.6 contains a Incorrect Access Control vulnerabiorg.grails.plugins:asset-pipeline
- CVE-2018-1000820neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that can org.neo4j.procedure:apoc
- CVE-2018-1000821MicroMathematics version before commit 5c05ac8 contains a XML External Entity (XXE) vulnerability in SMathStudio files that can result in Di
- CVE-2018-1000822codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in Disorg.codelibs.fess:fess
- CVE-2018-1000823exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure oforg.exist-db:exist-core
- CVE-2018-1000824MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential d
- CVE-2018-1000825FreeCol version <= nightly-2018-08-22 contains a XML External Entity (XXE) vulnerability in FreeColXMLReader parser that can result in Discl
- CVE-2018-1000826Microweber version <= 1.0.7 contains a Cross Site Scripting (XSS) vulnerability in Admin login form template that can result in Execution ofmicroweber/microweber
- CVE-2018-1000827Ubilling version <= 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential
- CVE-2018-1000828FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update tha
- CVE-2018-1000829Anyplace version before commit 80359b4 contains a XML External Entity (XXE) vulnerability in Man in the middle on map API call that can resu
- CVE-2018-1000830XR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in Playlist parser that can result in Disclosure of confident
- CVE-2018-1000831K9Mail version <= v5.600 contains a XML External Entity (XXE) vulnerability in WebDAV response parser that can result in Disclosure of confi
- CVE-2018-1000832ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidenti
- CVE-2018-1000833ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidenti
- CVE-2018-1000834runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runscape services call th
- CVE-2018-1000835KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can result in Disclosure of c
- CVE-2018-1000836bw-calendar-engine version <= bw-calendar-engine-3.12.0 contains a XML External Entity (XXE) vulnerability in IscheduleClient XML Parser thaorg.bedework.caleng:bw-calendar-engine
- CVE-2018-1000837UML Designer version <= 8.0.0 contains a XML External Entity (XXE) vulnerability in XML parser for plugins that can result in Disclosure of
- CVE-2018-1000838autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result in Disclosure of conf
- CVE-2018-1000839LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution.
- CVE-2018-1000840Processing Foundation Processing version 3.4 and earlier contains a XML External Entity (XXE) vulnerability in loadXML() function that can r
- CVE-2018-1000841Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.php page that can result in An attacker co
- CVE-2018-1000842FatFreeCRM version <=0.14.1, >=0.15.0 <=0.15.1, >=0.16.0 <=0.16.3, >=0.17.0 <=0.17.2, ==0.18.0 contains a Cross Site Scripting (XSS) vulnerafat_free_crm
- CVE-2018-1000843Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aaeb; after GitHub PR spotify/luigi/pull/1870 containluigi
- CVE-2018-1000844Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerabilcom.squareup.retrofit2:retrofit
- CVE-2018-1000846FreshDNS version 1.0.3 and earlier contains a Cross ite Request Forgery (CSRF) vulnerability in All (authenticated) API calls in index.php /
- CVE-2018-1000847FreshDNS version 1.0.3 and prior contains a Cross Site Scripting (XSS) vulnerability in Account data form; Zone editor that can result in Ex
- CVE-2018-1000848Wampserver version prior to version 3.1.5 contains a Cross Site Scripting (XSS) vulnerability in index.php localhost page that can result in
- CVE-2018-1000849Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux' package
- CVE-2018-1000850Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder ccom.squareup.retrofit2:retrofit
- CVE-2018-1000851Copay Bitcoin Wallet version 5.01 to 5.1.0 included.
- CVE-2018-1000852FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in
- CVE-2018-11960In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after free condition can ocQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11961In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possibility of accessing out of bQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11963In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Buffer overread may occur due to Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11964In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Exposing the hashed content in /eQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11965In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Anyone can execute proptrigger.shQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11983In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Error in kernel observed while acQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11984In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after free condition and anQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11985In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, When allocating heap using user sQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11986In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX anQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11987In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, if there is an unlikely memory alQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11988In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Un-trusted pointer de-reference iQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-1661IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicIBM DataPower Gateways
- CVE-2018-1677IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the iIBM DataPower Gateways
- CVE-2018-6669Bypass Application Control through an ASP.NET formMcAfee Application and Change Control
- CVE-2018-7365All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow ZTE uSmartView
- CVE-2018-20301An issue was discovered in Steve Pallen Coherence before 0.5.2 that is similar to a Mass Assignment vulnerability.
- CVE-2018-20306A stored cross-site scripting (XSS) vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow
- CVE-2018-20307Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical
- CVE-2018-20300Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this
- CVE-2018-20302An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter.
- CVE-2018-20303In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a figogs.io/gogs
- CVE-2018-20304wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long second argum
- CVE-2018-20305D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter.