# CVEs published 2018-12-31 34 CVEs were published on December 31, 2018: 5 critical, 11 high. Days are UTC. - [CVE-2018-6331](https://cve.now/CVE-2018-6331.md): Buck parser-cache command loads/saves state using Java serialized object. (CVSS 9.8, Facebook Buck) - [CVE-2018-6333](https://cve.now/CVE-2018-6333.md): The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. (CVSS 9.8, Facebook Nuclide · nuclide) - [CVE-2018-6337](https://cve.now/CVE-2018-6337.md): folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. (CVSS 7.5, Facebook HHVM · Facebook folly) - [CVE-2018-6340](https://cve.now/CVE-2018-6340.md): The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. (CVSS 8.1, Facebook HHVM) - [CVE-2018-6341](https://cve.now/CVE-2018-6341.md): React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. (CVSS 6.1, Facebook react-dom · react-dom) - [CVE-2018-6342](https://cve.now/CVE-2018-6342.md): react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an edito (CVSS 9.8, Facebook react-dev-utils · react-dev-utils) - [CVE-2018-6343](https://cve.now/CVE-2018-6343.md): Proxygen fails to validate that a secondary auth manager is set before dereferencing it. (CVSS 7.5, Facebook Proxygen) - [CVE-2018-6344](https://cve.now/CVE-2018-6344.md): A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. (CVSS 7.5, Facebook WhatsApp for Android · Facebook WhatsApp for iOS +1) - [CVE-2018-6346](https://cve.now/CVE-2018-6346.md): A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency). (CVSS 7.5, Facebook Proxygen) - [CVE-2018-6347](https://cve.now/CVE-2018-6347.md): An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. (CVSS 7.5, Facebook Proxygen) - [CVE-2018-6334](https://cve.now/CVE-2018-6334.md): Multipart-file uploads call variables to be improperly registered in the global scope. (CVSS 9.8, Facebook HHVM) - [CVE-2018-6335](https://cve.now/CVE-2018-6335.md): A Malformed h2 frame can cause 'std::out\_of\_range' exception when parsing priority meta data. (CVSS 7.5, Facebook HHVM) - [CVE-2018-6336](https://cve.now/CVE-2018-6336.md): An issue was discovered in osquery. (CVSS 7.8, Facebook osquery) - [CVE-2018-20622](https://cve.now/CVE-2018-20622.md): JasPer 2.0.14 has a memory leak in base/jas\_malloc.c in libjasper.a when "--output-format jp2" is used. (CVSS 6.5) - [CVE-2018-20623](https://cve.now/CVE-2018-20623.md): In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process\_archive function in readel (CVSS 5.5) - [CVE-2018-6668](https://cve.now/CVE-2018-6668.md): Bypass Application Control with simple DLL (CVSS 6.1, McAfee Application and Change Control) - [CVE-2018-18600](https://cve.now/CVE-2018-18600.md): The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter. (CVSS 8.1) - [CVE-2018-18601](https://cve.now/CVE-2018-18601.md): The TK\_set\_deviceModel\_req\_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buf (CVSS 8.1) - [CVE-2018-18602](https://cve.now/CVE-2018-18602.md): The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring. (CVSS 9.8) - [CVE-2018-19937](https://cve.now/CVE-2018-19937.md): A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turni (CVSS 6.6) - [CVE-2018-18593](https://cve.now/CVE-2018-18593.md): MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities (CVSS 6.5, Micro Focus UCMDB Configuration Management Service) - [CVE-2018-19844](https://cve.now/CVE-2018-19844.md): FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10 (no CVSS) - [CVE-2018-19845](https://cve.now/CVE-2018-19845.md): There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325. (no CVSS) - [CVE-2018-19901](https://cve.now/CVE-2018-19901.md): No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage\_article/index/ "article\_title" parameter. (no CVSS) - [CVE-2018-19902](https://cve.now/CVE-2018-19902.md): No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage\_article "keyword" parameter. (no CVSS) - [CVE-2018-19903](https://cve.now/CVE-2018-19903.md): Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page title field. (no CVSS) - [CVE-2018-19904](https://cve.now/CVE-2018-19904.md): Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page "body" field. (CVSS 6.1) - [CVE-2018-19905](https://cve.now/CVE-2018-19905.md): HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter. (CVSS 5.4) - [CVE-2018-19906](https://cve.now/CVE-2018-19906.md): Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter. (CVSS 5.4) - [CVE-2018-19918](https://cve.now/CVE-2018-19918.md): CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table\_manager/view/cu\_views URI. (CVSS 5.4) - [CVE-2018-20618](https://cve.now/CVE-2018-20618.md): ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok\_mo\_decode2 function in ok\_mo.c. (CVSS 8.8) - [CVE-2018-17191](https://cve.now/CVE-2018-17191.md): Apache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configuration (PAC) interpretation is vulnerable for remote command execution (RCE). (no CVSS, Apache Software Foundation Apache NetBeans) - [CVE-2018-20617](https://cve.now/CVE-2018-20617.md): ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok\_csv\_decode2 function in ok\_csv.c. (no CVSS) - [CVE-2018-20616](https://cve.now/CVE-2018-20616.md): ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok\_wav\_decode\_ms\_adpcm\_data function in ok\_wav.c. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-12-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.