CVEs published December 25, 2018
26 CVEs were published on December 25, 2018: 0 critical, 1 high.
- Published
- 26
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 25
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- craftcms/cms
- 1
High 1
Medium, low and unrated 25
- CVE-2018-20464There is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 admin/myaccount.php.
- CVE-2018-20465Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demcraftcms/cms
- CVE-2018-20462An issue was discovered in the JSmol2WP plugin 1.07 for WordPress.
- CVE-2018-20463An issue was discovered in the JSmol2WP plugin 1.07 for WordPress.
- CVE-2018-20455In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (applic
- CVE-2018-20456In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (applic
- CVE-2018-20457In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application cr
- CVE-2018-20458In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (ap
- CVE-2018-20459In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (applicat
- CVE-2018-20460In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (applica
- CVE-2018-20461In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused b
- CVE-2018-20450The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via
- CVE-2018-20451The process_file function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial
- CVE-2018-20452The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application cra
- CVE-2018-20453The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of
- CVE-2018-20454An issue was discovered in 74cms v4.2.111.
- CVE-2018-20448Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.
- CVE-2018-20438Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.
- CVE-2018-20439Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.
- CVE-2018-20440Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.
- CVE-2018-20441Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1
- CVE-2018-20442Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.3
- CVE-2018-20443Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1
- CVE-2018-20444Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.
- CVE-2018-20445D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover Wi-Fi credentials via