Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2018

73 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2018-19788
    38Monitor

    A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl co

    HighCVSS 8.8Proof of conceptEPSS 11%

    polkit project · polkitDec 3, 2018

  • CVE-2018-16855
    48Plan

    An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds m

    HighCVSS 7.5No exploitEPSS 58%

    powerdns · recursorDec 3, 2018

  • CVE-2018-7114
    49Plan

    HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code ex

    CriticalCVSS 9.8No exploitEPSS 32%

    hp · intelligent management centerDec 3, 2018

  • CVE-2018-7115
    25Monitor

    HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001

    MediumCVSS 5.3No exploitEPSS 13%

    hp · intelligent management centerDec 3, 2018

  • CVE-2018-7116
    33Monitor

    HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003

    HighCVSS 7.5No exploitEPSS 10%

    hp · intelligent management centerDec 3, 2018

  • CVE-2018-14699
    48Plan

    System command injection in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attacker

    CriticalCVSS 9.8Proof of conceptEPSS 29%

    drobo · 5n2 firmwareDec 3, 2018

  • CVE-2018-14701
    45Plan

    System command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attacker

    CriticalCVSS 9.8No exploitEPSS 19%

    drobo · 5n2 firmwareDec 3, 2018

  • CVE-2018-14706
    44Plan

    System command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attac

    CriticalCVSS 9.8No exploitEPSS 17%

    drobo · 5n2 firmwareDec 3, 2018

  • CVE-2018-14707
    38Monitor

    Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload f

    HighCVSS 7.5No exploitEPSS 27%

    drobo · 5n2 firmwareDec 3, 2018

  • CVE-2018-4019
    43Plan

    An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS

    HighCVSS 7.2No exploitEPSS 48%

    netgate · pfsenseDec 3, 2018

  • CVE-2018-4020
    43Plan

    An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS

    HighCVSS 7.2No exploitEPSS 48%

    netgate · pfsenseDec 3, 2018

  • CVE-2018-4021
    50Plan

    An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS

    HighCVSS 7.2No exploitEPSS 72%

    netgate · pfsenseDec 3, 2018

  • CVE-2018-17157
    46Plan

    In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by s

    CriticalCVSS 9.8No exploitEPSS 24%

    freebsd · freebsdDec 4, 2018

  • CVE-2018-19864
    46Plan

    NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    nuuo · nvrmini2 firmwareDec 5, 2018

  • CVE-2018-1002105
    65This week

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the

    CriticalCVSS 9.8Proof of conceptEPSS 86%

    kubernetes · kubernetesDec 5, 2018

  • CVE-2018-19877
    30Monitor

    login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.

    MediumCVSS 6.1Proof of conceptEPSS 18%

    adiscon · loganalyzerDec 5, 2018

  • CVE-2018-18312
    43Plan

    Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

    CriticalCVSS 9.8No exploitEPSS 12%

    perl · perlDec 5, 2018

  • CVE-2018-19753
    35Monitor

    Tarantella Enterprise before 3.11 allows Directory Traversal.

    HighCVSS 7.5Proof of conceptEPSS 16%

    oracle · tarantella enterpriseDec 5, 2018

  • CVE-2018-19908
    40Plan

    An issue was discovered in MISP 2.4.9x before 2.4.99.

    HighCVSS 8.8Proof of conceptEPSS 17%

    misp-project · mispDec 6, 2018

  • CVE-2018-19660
    44Plan

    An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmw

    HighCVSS 8.8No exploitEPSS 28%

    moxa · nport w2x50a firmwareDec 6, 2018

  • CVE-2018-7364
    42Plan

    All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability.

    CriticalCVSS 9.8No exploitEPSS 10%

    zte · zxin10Dec 7, 2018

  • CVE-2018-18311
    43Plan

    Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

    CriticalCVSS 9.8No exploitEPSS 11%

    perl · perlDec 7, 2018

  • CVE-2018-1000861
    98Now

    A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/cor

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    jenkins · jenkinsDec 10, 2018

  • CVE-2018-17480
    76This week

    Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.35

    HighCVSS 8.8KEVWeaponizedEPSS 35%

    google · chromeDec 11, 2018

  • CVE-2018-20062
    99Now

    An issue was discovered in NoneCms V1.3.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    5none · nonecmsDec 11, 2018

  • CVE-2018-10143
    46Plan

    The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system

    CriticalCVSS 9.8No exploitEPSS 24%

    paloaltonetworks · expeditionDec 11, 2018

  • CVE-2018-8540
    45Plan

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote

    CriticalCVSS 9.8No exploitEPSS 21%

    microsoft · .net frameworkDec 11, 2018

  • CVE-2018-8583
    33Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · chakracoreDec 11, 2018

  • CVE-2018-8587
    40Plan

    A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof

    HighCVSS 7.8Proof of conceptEPSS 28%

    microsoft · officeDec 11, 2018

  • CVE-2018-8597
    36Monitor

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    HighCVSS 7.8No exploitEPSS 16%

    microsoft · excelDec 11, 2018

  • CVE-2018-8611
    62This week

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva

    HighCVSS 7.8KEVWeaponizedEPSS 4%

    microsoft · windows 10 1607Dec 11, 2018

  • CVE-2018-8617
    49Plan

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5Proof of conceptEPSS 62%

    microsoft · chakracoreDec 11, 2018

  • CVE-2018-8618
    33Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · chakracoreDec 11, 2018

  • CVE-2018-8619
    43Plan

    A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under

    HighCVSS 7.5Proof of conceptEPSS 44%

    microsoft · internet explorerDec 11, 2018

  • CVE-2018-8624
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · chakracoreDec 11, 2018

  • CVE-2018-8625
    43Plan

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem

    HighCVSS 7.5Proof of conceptEPSS 43%

    microsoft · internet explorerDec 11, 2018

  • CVE-2018-8626
    45Plan

    A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Wi

    CriticalCVSS 9.8No exploitEPSS 21%

    microsoft · windows 10Dec 11, 2018

  • CVE-2018-8628
    36Monitor

    A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory,

    HighCVSS 7.8No exploitEPSS 15%

    microsoft · officeDec 11, 2018

  • CVE-2018-8629
    37Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 22%

    microsoft · chakracoreDec 11, 2018

  • CVE-2018-8631
    51Plan

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    HighCVSS 7.5Proof of conceptEPSS 68%

    microsoft · internet explorerDec 11, 2018

  • CVE-2018-8634
    40Plan

    A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "

    HighCVSS 8.8No exploitEPSS 15%

    microsoft · windows 10Dec 11, 2018

  • CVE-2018-8636
    36Monitor

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    HighCVSS 7.8No exploitEPSS 16%

    microsoft · excelDec 11, 2018

  • CVE-2018-8639
    68This week

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k

    HighCVSS 7.8KEVWeaponizedEPSS 22%

    microsoft · windows 10 1507Dec 11, 2018

  • CVE-2018-8033
    38Monitor

    In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP serv

    HighCVSS 7.5Proof of conceptEPSS 25%

    apache · ofbizDec 13, 2018

  • CVE-2018-1821
    41Plan

    IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) attack when processin

    CriticalCVSS 9.1Proof of conceptEPSS 15%

    ibm · operational decision managerDec 13, 2018

  • CVE-2018-19439
    30Monitor

    XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but was fixed in later versions including 5.4).

    MediumCVSS 6.1Proof of conceptEPSS 20%

    oracle · secure global desktopDec 13, 2018

  • CVE-2018-16873
    52Plan

    In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and

    HighCVSS 8.1No exploitEPSS 66%

    golang · goDec 14, 2018

  • CVE-2018-18006
    45Plan

    Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myP

    CriticalCVSS 9.8No exploitEPSS 21%

    ricoh · myprintDec 14, 2018

  • CVE-2018-20148
    47Plan

    In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection attacks via crafted metadata in a wp.getMedi

    CriticalCVSS 9.8Proof of conceptEPSS 26%

    wordpress · wordpressDec 14, 2018

  • CVE-2018-20173
    46Plan

    Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API.

    CriticalCVSS 9.8No exploitEPSS 24%

    zohocorp · manageengine opmanagerDec 17, 2018

  • CVE-2018-18556
    44Plan

    A privilege escalation issue was discovered in VyOS 1.1.8.

    CriticalCVSS 9.9WeaponizedEPSS 15%

    vyos · vyosDec 17, 2018

  • CVE-2018-15126
    43Plan

    LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer ext

    CriticalCVSS 9.8No exploitEPSS 11%

    libvnc project · libvncserverDec 19, 2018

  • CVE-2018-15127
    44Plan

    LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer

    CriticalCVSS 9.8No exploitEPSS 15%

    libvnc project · libvncserverDec 19, 2018

  • CVE-2018-6307
    40Plan

    LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer ext

    HighCVSS 8.1No exploitEPSS 26%

    libvnc project · libvncserverDec 19, 2018

  • CVE-2018-8653
    69This week

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    HighCVSS 7.5KEVWeaponizedEPSS 29%

    microsoft · internet explorerDec 20, 2018

  • CVE-2018-1000811
    49Plan

    bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can res

    HighCVSS 8.8Proof of conceptEPSS 47%

    bludit · bluditDec 20, 2018

  • CVE-2018-1160
    65This week

    Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c.

    CriticalCVSS 9.8Proof of conceptEPSS 86%

    netatalk · netatalkDec 20, 2018

  • CVE-2018-17246
    64This week

    Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin.

    CriticalCVSS 9.8Proof of conceptEPSS 82%

    elastic · kibanaDec 20, 2018

  • CVE-2018-20338
    42Plan

    Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section.

    CriticalCVSS 9.8No exploitEPSS 11%

    zohocorp · manageengine opmanagerDec 21, 2018

  • CVE-2018-20346
    35Monitor

    SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries th

    HighCVSS 8.1No exploitEPSS 10%

    sqlite · sqliteDec 21, 2018

  • CVE-2018-19320
    62This week

    The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26,

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    gigabyte · aorus graphics engineDec 21, 2018

  • CVE-2018-19321
    62This week

    The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    gigabyte · aorus graphics engineDec 21, 2018

  • CVE-2018-19322
    62This week

    The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    gigabyte · aorus graphics engineDec 21, 2018

  • CVE-2018-19323
    72This week

    The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26,

    CriticalCVSS 9.8KEVWeaponizedEPSS 8%

    gigabyte · aorus graphics engineDec 21, 2018

  • CVE-2018-7836
    49Plan

    An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could a

    CriticalCVSS 9.8No exploitEPSS 31%

    schneider-electric · iiot monitorDec 24, 2018

  • CVE-2018-20247
    47Plan

    In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree

    HighCVSS 7.8No exploitEPSS 54%

    foxitsoftware · quick pdf libraryDec 24, 2018

  • CVE-2018-20463
    34Monitor

    An issue was discovered in the JSmol2WP plugin 1.07 for WordPress.

    HighCVSS 7.5Proof of conceptEPSS 13%

    jsmol2wp project · jsmol2wpDec 25, 2018

  • CVE-2018-11741
    44Plan

    NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId

    CriticalCVSS 9.8Proof of conceptEPSS 17%

    nec · univerge sv9100 webpro firmwareDec 26, 2018

  • CVE-2018-11742
    43Plan

    NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.

    CriticalCVSS 9.8Proof of conceptEPSS 14%

    nec · univerge sv9100 webpro firmwareDec 26, 2018

  • CVE-2018-19616
    41Plan

    An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000.

    HighCVSS 8.1Proof of conceptEPSS 30%

    rockwellautomation · powermonitor 1000 firmwareDec 26, 2018

  • CVE-2018-1000888
    41Plan

    PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class.

    HighCVSS 8.8Proof of conceptEPSS 19%

    php · pear archive tarDec 28, 2018

  • CVE-2018-20608
    34Monitor

    imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.

    HighCVSS 7.5Proof of conceptEPSS 12%

    txjia · imcatDec 30, 2018

  • CVE-2018-6341
    25Monitor

    React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time.

    MediumCVSS 6.1Proof of conceptEPSS 3%

    facebook · reactDec 31, 2018