CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In December 2018

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
151 CVE-2018-20560 79 XSS 2018-12-28 2019-01-04
3.5
None Remote Medium Single system None Partial None
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the show_name parameter.
152 CVE-2018-20559 79 XSS 2018-12-28 2019-01-04
3.5
None Remote Medium Single system None Partial None
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name parameter.
153 CVE-2018-20558 79 XSS 2018-12-28 2019-01-04
3.5
None Remote Medium Single system None Partial None
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the site_name parameter.
154 CVE-2018-20557 79 XSS 2018-12-28 2019-01-04
3.5
None Remote Medium Single system None Partial None
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the page_name parameter.
155 CVE-2018-20553 125 2018-12-28 2019-01-06
6.8
None Remote Medium Not required Partial Partial Partial
Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.
156 CVE-2018-20552 125 2018-12-28 2019-01-06
6.8
None Remote Medium Not required Partial Partial Partial
Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.
157 CVE-2018-20551 20 DoS 2018-12-28 2019-09-11
4.3
None Remote Medium Not required None None Partial
A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.
158 CVE-2018-20549 190 2018-12-28 2019-04-04
6.8
None Remote Medium Not required Partial Partial Partial
There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19.
159 CVE-2018-20548 190 2018-12-28 2019-04-04
6.8
None Remote Medium Not required Partial Partial Partial
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data.
160 CVE-2018-20547 190 2018-12-28 2019-04-04
5.8
None Remote Medium Not required Partial None Partial
There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data.
161 CVE-2018-20546 190 2018-12-28 2019-04-04
5.8
None Remote Medium Not required Partial None Partial
There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case.
162 CVE-2018-20545 190 2018-12-28 2019-04-04
6.8
None Remote Medium Not required Partial Partial Partial
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data.
163 CVE-2018-20544 369 2018-12-28 2019-04-04
4.3
None Remote Medium Not required None None Partial
There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19.
164 CVE-2018-20543 400 DoS 2018-12-28 2019-01-11
4.3
None Remote Medium Not required None None Partial
There is an attempted excessive memory allocation at libxsmm_sparse_csc_reader in generator_spgemm_csc_reader.c in LIBXSMM 1.10 that will cause a denial of service.
165 CVE-2018-20542 119 Overflow 2018-12-28 2019-01-11
6.8
None Remote Medium Not required Partial Partial Partial
There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 (which is in a different part of the source code and is seen at a different address).
166 CVE-2018-20541 119 Overflow 2018-12-28 2019-01-11
6.8
None Remote Medium Not required Partial Partial Partial
There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 (which is in a different part of the source code and is seen at different addresses).
167 CVE-2018-20540 772 2018-12-28 2019-10-02
4.3
None Remote Medium Not required None None Partial
There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1.
168 CVE-2018-20539 20 DoS 2018-12-28 2019-01-06
4.3
None Remote Medium Not required None None Partial
There is a Segmentation fault triggered by illegal address access at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
169 CVE-2018-20538 416 DoS 2018-12-28 2019-01-10
4.3
None Remote Medium Not required None None Partial
There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests.
170 CVE-2018-20537 476 DoS 2018-12-28 2019-01-06
4.3
None Remote Medium Not required None None Partial
There is a NULL pointer dereference at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
171 CVE-2018-20536 125 DoS 2018-12-28 2019-01-06
4.3
None Remote Medium Not required None None Partial
There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
172 CVE-2018-20535 416 DoS 2018-12-28 2019-01-18
4.3
None Remote Medium Not required None None Partial
There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during a line-number increment attempt.
173 CVE-2018-20534 119 DoS Overflow 2018-12-28 2019-10-02
4.3
None Remote Medium Not required None None Partial
** DISPUTED ** There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application.
174 CVE-2018-20533 476 DoS 2018-12-28 2019-08-06
4.3
None Remote Medium Not required None None Partial
There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
175 CVE-2018-20532 476 DoS 2018-12-28 2019-08-06
4.3
None Remote Medium Not required None None Partial
There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
176 CVE-2018-20530 79 XSS 2018-12-28 2019-01-03
3.5
None Remote Medium Single system None Partial None
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896.
177 CVE-2018-20528 918 2018-12-28 2019-01-09
4.0
None Remote Low Single system Partial None None
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter.
178 CVE-2018-20524 79 XSS 2018-12-27 2019-01-17
4.3
None Remote Medium Not required None Partial None
The Chat Anywhere extension 2.4.0 for Chrome allows XSS via crafted use of <<a> in a message, because a danmuWrapper DIV element in chatbox-only\danmu.js is outside the scope of a Content Security Policy (CSP).
179 CVE-2018-20520 79 XSS 2018-12-27 2019-01-08
4.3
None Remote Medium Not required None Partial None
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233.
180 CVE-2018-20519 20 2018-12-27 2019-01-24
5.5
None Remote Low Single system Partial Partial None
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajax_save_basic pid parameter.
181 CVE-2018-20511 200 +Info 2018-12-27 2019-04-01
2.1
None Local Low Not required Partial None None
An issue was discovered in the Linux kernel before 4.18.11. The ipddp_ioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel address information by leveraging CAP_NET_ADMIN to read the ipddp_route dev and next fields via an SIOCFINDIPDDPRT ioctl call.
182 CVE-2018-20508 89 Sql 2018-12-27 2019-01-08
7.5
None Remote Low Not required Partial Partial Partial
CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search() function.
183 CVE-2018-20502 2018-12-26 2018-12-26
0.0
None ??? ??? ??? ??? ??? ???
An issue was discovered in Bento4 1.5.1-627. There is an attempt at excessive memory allocation in the AP4_DataBuffer class when called from AP4_HvccAtom::Create in Core/Ap4HvccAtom.cpp.
184 CVE-2018-20486 79 XSS 2018-12-26 2019-01-14
4.3
None Remote Medium Not required None Partial None
MetInfo 6.x through 6.1.3 has XSS via the /admin/login/login_check.php url_array[] parameter.
185 CVE-2018-20485 79 XSS 2018-12-26 2019-05-10
4.3
None Remote Medium Not required None Partial None
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.
186 CVE-2018-20484 79 XSS 2018-12-26 2019-05-10
4.3
None Remote Medium Not required None Partial None
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.
187 CVE-2018-20483 255 +Info 2018-12-26 2019-04-09
2.1
None Local Low Not required Partial None None
set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.
188 CVE-2018-20482 835 DoS 2018-12-26 2019-10-02
1.9
None Local Medium Not required None None Partial
GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root).
189 CVE-2018-20481 476 DoS 2018-12-25 2019-08-06
4.3
None Remote Medium Not required None None Partial
XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.
190 CVE-2018-20480 89 Sql 2018-12-25 2018-12-31
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php P_id parameter.
191 CVE-2018-20479 89 Sql 2018-12-25 2018-12-31
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wap_index.php?type=newsinfo S_id parameter.
192 CVE-2018-20478 200 +Info 2018-12-25 2019-01-17
5.0
None Remote Low Not required Partial None None
An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code, via the admin/download.php DownName parameter with a mixed-case extension, as demonstrated by a DownName=download.Php value.
193 CVE-2018-20477 89 Sql 2018-12-25 2018-12-29
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in S-CMS 3.0. It allows SQL Injection via the bank/callback1.php P_no field.
194 CVE-2018-20476 79 XSS 2018-12-25 2018-12-29
4.3
None Remote Medium Not required None Partial None
An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php T_id parameter.
195 CVE-2018-20467 835 DoS 2018-12-25 2019-10-02
4.3
None Remote Medium Not required None None Partial
In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.
196 CVE-2018-20465 311 2018-12-25 2019-10-02
4.0
None Remote Low Single system Partial None None
Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demonstrated by a {% string for craft.app.config.DB.user and craft.app.config.DB.password in the URI Format of the Site Settings, which causes a cleartext username and password to be displayed in a URI field.
197 CVE-2018-20464 79 XSS 2018-12-25 2019-01-10
4.3
None Remote Medium Not required None Partial None
There is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 admin/myaccount.php. This vulnerability is triggered upon an attempt to modify a user's mailbox with the wrong format. The response contains the user's previously entered email address.
198 CVE-2018-20463 22 Dir. Trav. 2018-12-25 2019-01-09
5.0
None Remote Low Not required Partial None None
An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. There is an arbitrary file read vulnerability via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. This can also be used for SSRF.
199 CVE-2018-20462 79 XSS 2018-12-25 2019-01-09
4.3
None Remote Medium Not required None Partial None
An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the jsmol.php data parameter.
200 CVE-2018-20461 125 2018-12-25 2018-12-31
4.3
None Remote Medium Not required None None Partial
In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting a binary file.
Total number of vulnerabilities : 1160   Page : 1 2 3 4 (This Page)5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.