A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 requests.

Published Dec 31, 2018 · Updated May 6, 2025

Medium · CVSS 5.9

CVE-2018-6332: A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the...

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM (3.24.3 and 3.21.7 and below) when using the proxygen server to handle HTTP2 requests.

Published Dec 3, 2018 · Updated May 6, 2025

High · CVSS 7.8

CVE-2018-6336: An issue was discovered in osquery.

An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7

Published Dec 31, 2018 · Updated May 6, 2025

High · CVSS 8.1

CVE-2018-6340: The Memcache::getextendedstats function can be used to trigger an out-of-bounds read.

The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames and/or ports. This affects all supported versions of HHVM (3.30 and 3.27.4 and below).

Published Dec 31, 2018 · Updated May 6, 2025

Medium · CVSS 5.4

CVE-2018-19906: Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.

Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.

Published Dec 31, 2018 · Updated May 6, 2025

High · CVSS 8.1

CVE-2018-18600: The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware v...

The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.

Published Dec 31, 2018 · Updated May 6, 2025

High · CVSS 8.1

CVE-2018-18601: The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W device...

The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overflow.

Published Dec 31, 2018 · Updated May 6, 2025

Medium · CVSS 5.5

CVE-2018-20623: In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the p...

In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file.

Published Dec 31, 2018 · Updated May 6, 2025

High · CVSS 8.8

CVE-2018-20618: ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.

Published Dec 31, 2018 · Updated May 6, 2025

Medium · CVSS 6.1

CVE-2018-6668: Bypass Application Control with simple DLL

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell.

Published Dec 31, 2018 · Updated May 6, 2025

Medium · CVSS 6.1

CVE-2018-6341: React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attr...

React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x, 16.2.x, 16.3.x, and 16.4.x. It was fixed in 16.0.1, 16.1.2, 16.2.1, 16.3.3, and 16.4.2.

Published Dec 31, 2018 · Updated May 6, 2025

Medium · CVSS 6.6

CVE-2018-19937: A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 f...

A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone.

Published Dec 31, 2018 · Updated May 6, 2025

Critical · CVSS 9.8

CVE-2018-6334: Multipart-file uploads call variables to be improperly registered in the global scope.

Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not declared explicitly before being used this can lead to unexpected behavior. This affects all supported versions of HHVM prior to the patch (3.25.1, 3.24.5, and 3.21.9 and below).

Published Dec 31, 2018 · Updated May 6, 2025

High · CVSS 7.5

CVE-2018-6337: folly::secureRandom will re-use a buffer between parent and child processes when fork() is called.

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00.

Published Dec 31, 2018 · Updated May 6, 2025

Medium · CVSS 6.5

CVE-2018-20622: JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.

JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.

Published Dec 31, 2018 · Updated May 6, 2025

Critical · CVSS 9.8

CVE-2018-18602: The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access a...

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.

Published Dec 31, 2018 · Updated May 6, 2025

Critical · CVSS 9.8

CVE-2018-6342: react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, inclu...

react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the server (either via CSRF or by direct request) to execute arbitrary commands on the targeted system. This issue affects multiple branches: 1.x.x prior to 1.0.4, 2.x.x prior to 2.0.2, 3.x.x prior to 3.1.2, 4.x.x prior to 4.2.2, and 5.x.x prior to 5.0.2.

Published Dec 31, 2018 · Updated May 6, 2025

High · CVSS 7.5

CVE-2018-6343: Proxygen fails to validate that a secondary auth manager is set before dereferencing it.

Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/CertificateRequest HTTP2 Frame over a fizz (TLS 1.3) transport. This issue affects Proxygen releases starting from v2018.10.29.00 until the fix in v2018.11.19.00.

Published Dec 31, 2018 · Updated May 6, 2025

High · CVSS 7.5

CVE-2018-6344: A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established.

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172.

Published Dec 31, 2018 · Updated May 6, 2025

High · CVSS 7.5

CVE-2018-6346: A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifical...

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency). This affects Proxygen prior to v2018.12.31.00.

Published Dec 31, 2018 · Updated May 6, 2025

High · CVSS 7.5

CVE-2018-6347: An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack.

An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affects Proxygen prior to v2018.12.31.00.

Published Dec 31, 2018 · Updated May 6, 2025

Critical · CVSS 9.8

CVE-2018-6331: Buck parser-cache command loads/saves state using Java serialized object.

Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01.

Published Dec 31, 2018 · Updated May 6, 2025

Medium · CVSS 6.1

CVE-2018-1000874: PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in a...

PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by crafting a three backtick wrapped payload with a character in front: L: "```<script>alert();</script>```". NOTE: This has been argued as a non-issue (see references) since it is not the parser's job to sanitize malicious code from a parsed document

Published Dec 20, 2018 · Updated May 6, 2025

Critical · CVSS 9.8

CVE-2018-6333: The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when...

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This issue affected Nuclide prior to v0.290.0.

Published Dec 31, 2018 · Updated May 6, 2025

Medium · CVSS 6.5

CVE-2018-16135: The Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the Location Permi...

The Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the Location Permission dialog via a crafted web site.

Published Dec 26, 2022 · Updated Apr 14, 2025

Critical · CVSS 9.1

CVE-2018-25046: Path traversal in code.cloudfoundry.org/archiver

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.

Published Dec 27, 2022 · Updated Apr 11, 2025

Low · CVSS 3

CVE-2018-25049: email-existence index.js redos

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability.

Published Dec 27, 2022 · Updated Apr 11, 2025

Low · CVSS 3.5

CVE-2018-25050: Harvest Chosen abstract-chosen.coffee AbstractChosen cross site scripting

A vulnerability, which was classified as problematic, has been found in Harvest Chosen up to 1.8.6. Affected by this issue is the function AbstractChosen of the file coffee/lib/abstract-chosen.coffee. The manipulation of the argument group_label leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.8.7 is able to address this issue. The name of the patch is 77fd031d541e77510268d1041ed37798fdd1017e. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216956.

Published Dec 28, 2022 · Updated Apr 10, 2025

Medium · CVSS 5.4

CVE-2018-8650: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly saniti...

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint.

Published Dec 12, 2018 · Updated Feb 28, 2025

High · CVSS 7.5

CVE-2018-25107: The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, whic...

The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of random bits.

Published Dec 29, 2024 · Updated Dec 31, 2024

Unknown · CVSS Not scored

CVE-2018-20060: urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin red...

urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext.

Published Dec 11, 2018 · Updated Dec 27, 2024

Medium · CVSS 6.5

CVE-2018-25106: webuidesigning NebulaX Theme Legacy.php nebula_send_to_hubspot sql injection

A vulnerability, which was classified as critical, has been found in webuidesigning NebulaX Theme up to 5.0 on WordPress. This issue affects the function nebula_send_to_hubspot of the file libs/Legacy/Legacy.php. The manipulation leads to sql injection. The attack may be initiated remotely. The patch is named 41230a81db0f671c570c2644bc2f80565ca83c5a. It is recommended to apply a patch to fix this issue.

Published Dec 23, 2024 · Updated Dec 24, 2024

Medium · CVSS 6.7

CVE-2018-9386: In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a...

In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 5, 2024 · Updated Dec 6, 2024

High · CVSS 7.8

CVE-2018-9388: In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes d...

In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows. These could lead to escalation of privilege.

Published Dec 5, 2024 · Updated Dec 6, 2024

Medium · CVSS 6.7

CVE-2018-9390: In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an...

In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 5, 2024 · Updated Dec 6, 2024

Medium · CVSS 6.7

CVE-2018-9391: In update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/...

In update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor ker.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 5, 2024 · Updated Dec 6, 2024

High · CVSS 7.8

CVE-2018-9392: In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a...

In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 4, 2024 · Updated Dec 5, 2024

High · CVSS 7.8

CVE-2018-9393: In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible O...

In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 4, 2024 · Updated Dec 5, 2024

High · CVSS 7.8

CVE-2018-9394: In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possi...

In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 4, 2024 · Updated Dec 5, 2024

High · CVSS 7.8

CVE-2018-9395: In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/...

In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 4, 2024 · Updated Dec 5, 2024

High · CVSS 7.8

CVE-2018-9396: In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out...

In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 4, 2024 · Updated Dec 5, 2024

High · CVSS 7.8

CVE-2018-9397: In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds c...

In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 4, 2024 · Updated Dec 5, 2024

High · CVSS 7.8

CVE-2018-9398: In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validat...

In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 4, 2024 · Updated Dec 5, 2024

High · CVSS 7.8

CVE-2018-9399: In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes.

In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 4, 2024 · Updated Dec 5, 2024

High · CVSS 7.8

CVE-2018-9400: In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic....

In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 4, 2024 · Updated Dec 5, 2024

High · CVSS 8.8

CVE-2018-9402: In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check.

In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel.

Published Dec 4, 2024 · Updated Dec 5, 2024

High · CVSS 7.8

CVE-2018-9403: In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack...

In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overflow due to a missing bounds check. This could lead to local escalation of privilege in a privileged process with System execution privileges needed. User interaction is not needed for exploitation.

Published Dec 4, 2024 · Updated Dec 5, 2024