Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: декабрь 2018 г.

73 записей · 10 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2018-19788
    38Наблюдать

    A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl co

    ВысокаяCVSS 8,8Proof of conceptEPSS 11 %

    polkit project · polkit3 дек. 2018 г.

  • CVE-2018-16855
    48В плане

    An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds m

    ВысокаяCVSS 7,5Эксплойта нетEPSS 58 %

    powerdns · recursor3 дек. 2018 г.

  • CVE-2018-7114
    49В плане

    HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code ex

    КритическаяCVSS 9,8Эксплойта нетEPSS 32 %

    hp · intelligent management center3 дек. 2018 г.

  • CVE-2018-7115
    25Наблюдать

    HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001

    СредняяCVSS 5,3Эксплойта нетEPSS 13 %

    hp · intelligent management center3 дек. 2018 г.

  • CVE-2018-7116
    33Наблюдать

    HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · intelligent management center3 дек. 2018 г.

  • CVE-2018-14699
    48В плане

    System command injection in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attacker

    КритическаяCVSS 9,8Proof of conceptEPSS 29 %

    drobo · 5n2 firmware3 дек. 2018 г.

  • CVE-2018-14701
    45В плане

    System command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attacker

    КритическаяCVSS 9,8Эксплойта нетEPSS 19 %

    drobo · 5n2 firmware3 дек. 2018 г.

  • CVE-2018-14706
    44В плане

    System command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attac

    КритическаяCVSS 9,8Эксплойта нетEPSS 17 %

    drobo · 5n2 firmware3 дек. 2018 г.

  • CVE-2018-14707
    38Наблюдать

    Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload f

    ВысокаяCVSS 7,5Эксплойта нетEPSS 27 %

    drobo · 5n2 firmware3 дек. 2018 г.

  • CVE-2018-4019
    43В плане

    An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS

    ВысокаяCVSS 7,2Эксплойта нетEPSS 48 %

    netgate · pfsense3 дек. 2018 г.

  • CVE-2018-4020
    43В плане

    An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS

    ВысокаяCVSS 7,2Эксплойта нетEPSS 48 %

    netgate · pfsense3 дек. 2018 г.

  • CVE-2018-4021
    50В плане

    An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS

    ВысокаяCVSS 7,2Эксплойта нетEPSS 72 %

    netgate · pfsense3 дек. 2018 г.

  • CVE-2018-17157
    46В плане

    In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by s

    КритическаяCVSS 9,8Эксплойта нетEPSS 24 %

    freebsd · freebsd4 дек. 2018 г.

  • CVE-2018-19864
    46В плане

    NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (

    КритическаяCVSS 9,8Proof of conceptEPSS 24 %

    nuuo · nvrmini2 firmware5 дек. 2018 г.

  • CVE-2018-1002105
    65На этой неделе

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the

    КритическаяCVSS 9,8Proof of conceptEPSS 86 %

    kubernetes · kubernetes5 дек. 2018 г.

  • CVE-2018-19877
    30Наблюдать

    login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.

    СредняяCVSS 6,1Proof of conceptEPSS 18 %

    adiscon · loganalyzer5 дек. 2018 г.

  • CVE-2018-18312
    43В плане

    Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

    КритическаяCVSS 9,8Эксплойта нетEPSS 12 %

    perl · perl5 дек. 2018 г.

  • CVE-2018-19753
    35Наблюдать

    Tarantella Enterprise before 3.11 allows Directory Traversal.

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    oracle · tarantella enterprise5 дек. 2018 г.

  • CVE-2018-19908
    40В плане

    An issue was discovered in MISP 2.4.9x before 2.4.99.

    ВысокаяCVSS 8,8Proof of conceptEPSS 17 %

    misp-project · misp6 дек. 2018 г.

  • CVE-2018-19660
    44В плане

    An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmw

    ВысокаяCVSS 8,8Эксплойта нетEPSS 28 %

    moxa · nport w2x50a firmware6 дек. 2018 г.

  • CVE-2018-7364
    42В плане

    All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability.

    КритическаяCVSS 9,8Эксплойта нетEPSS 10 %

    zte · zxin107 дек. 2018 г.

  • CVE-2018-18311
    43В плане

    Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

    КритическаяCVSS 9,8Эксплойта нетEPSS 11 %

    perl · perl7 дек. 2018 г.

  • CVE-2018-1000861
    98Срочно

    A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/cor

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 98 %

    jenkins · jenkins10 дек. 2018 г.

  • CVE-2018-17480
    76На этой неделе

    Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.35

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 35 %

    google · chrome11 дек. 2018 г.

  • CVE-2018-20062
    99Срочно

    An issue was discovered in NoneCms V1.3.

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 99 %

    5none · nonecms11 дек. 2018 г.

  • CVE-2018-10143
    46В плане

    The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system

    КритическаяCVSS 9,8Эксплойта нетEPSS 24 %

    paloaltonetworks · expedition11 дек. 2018 г.

  • CVE-2018-8540
    45В плане

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote

    КритическаяCVSS 9,8Эксплойта нетEPSS 21 %

    microsoft · .net framework11 дек. 2018 г.

  • CVE-2018-8583
    33Наблюдать

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    microsoft · chakracore11 дек. 2018 г.

  • CVE-2018-8587
    40В плане

    A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof

    ВысокаяCVSS 7,8Proof of conceptEPSS 28 %

    microsoft · office11 дек. 2018 г.

  • CVE-2018-8597
    36Наблюдать

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    ВысокаяCVSS 7,8Эксплойта нетEPSS 16 %

    microsoft · excel11 дек. 2018 г.

  • CVE-2018-8611
    62На этой неделе

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 4 %

    microsoft · windows 10 160711 дек. 2018 г.

  • CVE-2018-8617
    49В плане

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    ВысокаяCVSS 7,5Proof of conceptEPSS 62 %

    microsoft · chakracore11 дек. 2018 г.

  • CVE-2018-8618
    33Наблюдать

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    microsoft · chakracore11 дек. 2018 г.

  • CVE-2018-8619
    43В плане

    A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under

    ВысокаяCVSS 7,5Proof of conceptEPSS 44 %

    microsoft · internet explorer11 дек. 2018 г.

  • CVE-2018-8624
    34Наблюдать

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %

    microsoft · chakracore11 дек. 2018 г.

  • CVE-2018-8625
    43В плане

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem

    ВысокаяCVSS 7,5Proof of conceptEPSS 43 %

    microsoft · internet explorer11 дек. 2018 г.

  • CVE-2018-8626
    45В плане

    A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Wi

    КритическаяCVSS 9,8Эксплойта нетEPSS 21 %

    microsoft · windows 1011 дек. 2018 г.

  • CVE-2018-8628
    36Наблюдать

    A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory,

    ВысокаяCVSS 7,8Эксплойта нетEPSS 15 %

    microsoft · office11 дек. 2018 г.

  • CVE-2018-8629
    37Наблюдать

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    ВысокаяCVSS 7,5Эксплойта нетEPSS 22 %

    microsoft · chakracore11 дек. 2018 г.

  • CVE-2018-8631
    51В плане

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    ВысокаяCVSS 7,5Proof of conceptEPSS 68 %

    microsoft · internet explorer11 дек. 2018 г.

  • CVE-2018-8634
    40В плане

    A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "

    ВысокаяCVSS 8,8Эксплойта нетEPSS 15 %

    microsoft · windows 1011 дек. 2018 г.

  • CVE-2018-8636
    36Наблюдать

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    ВысокаяCVSS 7,8Эксплойта нетEPSS 16 %

    microsoft · excel11 дек. 2018 г.

  • CVE-2018-8639
    68На этой неделе

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 22 %

    microsoft · windows 10 150711 дек. 2018 г.

  • CVE-2018-8033
    38Наблюдать

    In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP serv

    ВысокаяCVSS 7,5Proof of conceptEPSS 25 %

    apache · ofbiz13 дек. 2018 г.

  • CVE-2018-1821
    41В плане

    IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) attack when processin

    КритическаяCVSS 9,1Proof of conceptEPSS 15 %

    ibm · operational decision manager13 дек. 2018 г.

  • CVE-2018-19439
    30Наблюдать

    XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but was fixed in later versions including 5.4).

    СредняяCVSS 6,1Proof of conceptEPSS 20 %

    oracle · secure global desktop13 дек. 2018 г.

  • CVE-2018-16873
    52В плане

    In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and

    ВысокаяCVSS 8,1Эксплойта нетEPSS 66 %

    golang · go14 дек. 2018 г.

  • CVE-2018-18006
    45В плане

    Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myP

    КритическаяCVSS 9,8Эксплойта нетEPSS 21 %

    ricoh · myprint14 дек. 2018 г.

  • CVE-2018-20148
    47В плане

    In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection attacks via crafted metadata in a wp.getMedi

    КритическаяCVSS 9,8Proof of conceptEPSS 26 %

    wordpress · wordpress14 дек. 2018 г.

  • CVE-2018-20173
    46В плане

    Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API.

    КритическаяCVSS 9,8Эксплойта нетEPSS 24 %

    zohocorp · manageengine opmanager17 дек. 2018 г.

  • CVE-2018-18556
    44В плане

    A privilege escalation issue was discovered in VyOS 1.1.8.

    КритическаяCVSS 9,9Готовый эксплойтEPSS 15 %

    vyos · vyos17 дек. 2018 г.

  • CVE-2018-15126
    43В плане

    LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer ext

    КритическаяCVSS 9,8Эксплойта нетEPSS 11 %

    libvnc project · libvncserver19 дек. 2018 г.

  • CVE-2018-15127
    44В плане

    LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer

    КритическаяCVSS 9,8Эксплойта нетEPSS 15 %

    libvnc project · libvncserver19 дек. 2018 г.

  • CVE-2018-6307
    40В плане

    LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer ext

    ВысокаяCVSS 8,1Эксплойта нетEPSS 26 %

    libvnc project · libvncserver19 дек. 2018 г.

  • CVE-2018-8653
    69На этой неделе

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    ВысокаяCVSS 7,5KEVГотовый эксплойтEPSS 29 %

    microsoft · internet explorer20 дек. 2018 г.

  • CVE-2018-1000811
    49В плане

    bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can res

    ВысокаяCVSS 8,8Proof of conceptEPSS 47 %

    bludit · bludit20 дек. 2018 г.

  • CVE-2018-1160
    65На этой неделе

    Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c.

    КритическаяCVSS 9,8Proof of conceptEPSS 86 %

    netatalk · netatalk20 дек. 2018 г.

  • CVE-2018-17246
    64На этой неделе

    Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin.

    КритическаяCVSS 9,8Proof of conceptEPSS 82 %

    elastic · kibana20 дек. 2018 г.

  • CVE-2018-20338
    42В плане

    Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section.

    КритическаяCVSS 9,8Эксплойта нетEPSS 11 %

    zohocorp · manageengine opmanager21 дек. 2018 г.

  • CVE-2018-20346
    35Наблюдать

    SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries th

    ВысокаяCVSS 8,1Эксплойта нетEPSS 10 %

    sqlite · sqlite21 дек. 2018 г.

  • CVE-2018-19320
    62На этой неделе

    The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26,

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 3 %

    gigabyte · aorus graphics engine21 дек. 2018 г.

  • CVE-2018-19321
    62На этой неделе

    The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 3 %

    gigabyte · aorus graphics engine21 дек. 2018 г.

  • CVE-2018-19322
    62На этой неделе

    The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 1 %

    gigabyte · aorus graphics engine21 дек. 2018 г.

  • CVE-2018-19323
    72На этой неделе

    The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26,

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 8 %

    gigabyte · aorus graphics engine21 дек. 2018 г.

  • CVE-2018-7836
    49В плане

    An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could a

    КритическаяCVSS 9,8Эксплойта нетEPSS 31 %

    schneider-electric · iiot monitor24 дек. 2018 г.

  • CVE-2018-20247
    47В плане

    In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree

    ВысокаяCVSS 7,8Эксплойта нетEPSS 54 %

    foxitsoftware · quick pdf library24 дек. 2018 г.

  • CVE-2018-20463
    34Наблюдать

    An issue was discovered in the JSmol2WP plugin 1.07 for WordPress.

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    jsmol2wp project · jsmol2wp25 дек. 2018 г.

  • CVE-2018-11741
    44В плане

    NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId

    КритическаяCVSS 9,8Proof of conceptEPSS 17 %

    nec · univerge sv9100 webpro firmware26 дек. 2018 г.

  • CVE-2018-11742
    43В плане

    NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.

    КритическаяCVSS 9,8Proof of conceptEPSS 14 %

    nec · univerge sv9100 webpro firmware26 дек. 2018 г.

  • CVE-2018-19616
    41В плане

    An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000.

    ВысокаяCVSS 8,1Proof of conceptEPSS 30 %

    rockwellautomation · powermonitor 1000 firmware26 дек. 2018 г.

  • CVE-2018-1000888
    41В плане

    PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class.

    ВысокаяCVSS 8,8Proof of conceptEPSS 19 %

    php · pear archive tar28 дек. 2018 г.

  • CVE-2018-20608
    34Наблюдать

    imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    txjia · imcat30 дек. 2018 г.

  • CVE-2018-6341
    25Наблюдать

    React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time.

    СредняяCVSS 6,1Proof of conceptEPSS 3 %

    facebook · react31 дек. 2018 г.