CVEs published December 31, 2018
34 CVEs were published on December 31, 2018: 5 critical, 11 high.
- Published
- 34
- Critical
- 5
- High
- 11
- Medium
- 10
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- Facebook HHVM
- 3
- Facebook Proxygen
- 3
- Apache Software Foundation Apache NetBeans
- 1
- Facebook Buck
- 1
- Facebook HHVM · Facebook folly
- 1
- Facebook Nuclide · nuclide
- 1
- Facebook osquery
- 1
- Facebook react-dev-utils · react-dev-utils
- 1
- Facebook react-dom · react-dom
- 1
- Facebook WhatsApp for Android · Facebook WhatsApp for iOS +1
- 1
Critical 5
- CVE-2018-6331Buck parser-cache command loads/saves state using Java serialized object.Facebook Buck
- CVE-2018-6333The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering.Facebook Nuclide · nuclide
- CVE-2018-6342react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editoFacebook react-dev-utils · react-dev-utils
- CVE-2018-6334Multipart-file uploads call variables to be improperly registered in the global scope.Facebook HHVM
- CVE-2018-18602The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.
High 11
- CVE-2018-6337folly::secureRandom will re-use a buffer between parent and child processes when fork() is called.Facebook HHVM · Facebook folly
- CVE-2018-6340The Memcache::getextendedstats function can be used to trigger an out-of-bounds read.Facebook HHVM
- CVE-2018-6343Proxygen fails to validate that a secondary auth manager is set before dereferencing it.Facebook Proxygen
- CVE-2018-6344A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established.Facebook WhatsApp for Android · Facebook WhatsApp for iOS +1
- CVE-2018-6346A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency).Facebook Proxygen
- CVE-2018-6347An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack.Facebook Proxygen
- CVE-2018-6335A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data.Facebook HHVM
- CVE-2018-6336An issue was discovered in osquery.Facebook osquery
- CVE-2018-18600The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.
- CVE-2018-18601The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buf
- CVE-2018-20618ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.
Medium, low and unrated 18
- CVE-2018-6341React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time.Facebook react-dom · react-dom
- CVE-2018-20622JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
- CVE-2018-20623In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readel
- CVE-2018-6668Bypass Application Control with simple DLLMcAfee Application and Change Control
- CVE-2018-19937A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turni
- CVE-2018-18593MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple VulnerabilitiesMicro Focus UCMDB Configuration Management Service
- CVE-2018-19844FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10
- CVE-2018-19845There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325.
- CVE-2018-19901No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.
- CVE-2018-19902No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.
- CVE-2018-19903Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page title field.
- CVE-2018-19904Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page "body" field.
- CVE-2018-19905HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.
- CVE-2018-19906Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.
- CVE-2018-19918CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table_manager/view/cu_views URI.
- CVE-2018-17191Apache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configuration (PAC) interpretation is vulnerable for remote command execution (RCE).Apache Software Foundation Apache NetBeans
- CVE-2018-20617ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_csv_decode2 function in ok_csv.c.
- CVE-2018-20616ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_wav_decode_ms_adpcm_data function in ok_wav.c.