UBUNTU-CVE-2018-11761

In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack...

88slot-ap (=1.0.0), @bipsync/apiclient (>=0.0.23 <=0.2.5) +163 more potentially affected by CVE-2018-16459 via exceljs (>=0.2.11 <=1.5.1)

exceljs NPM version =0.2.11, =0.0.23, =1.0.12, =2.0.2, =2.0.0, =1.1.0, =1.0.0, =1.0.3, =0.2.0, =1.0.0, =1.0.3, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2018-16459 Source advisory: OSV:GHSA-2J2J-8RRV-264G...

Wireshark Radiotap Parser Denial of Service Vulnerability

Wireshark formerly Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.Radiotap dissector is one of the Radiotap the de facto standard for 802.11 frame injectio...

DEBIAN-CVE-2018-1318

Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server ATS 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrad...

@felixrieseberg/electron-prebuilt-compile (>=3.0.0-beta.1 <=3.0.0-beta.13), @getstation/electron-prebuilt-compile (=3.0.0-beta.12) +1 more potentially affected by CVE-2018-15685 via electron (>=3.0.0-beta.1 <=3.0.0-beta.6)

electron NPM version =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.5 Source cves: CVE-2018-15685 Source advisory: OSV:GHSA-HV9C-QWQG-QJ3V...

4cdl (>=1.0.1 <=1.0.7), 77cli (>=0.0.10 <=0.0.12) +364 more potentially affected by CVE-2018-15685 via electron (>=2.0.0 <=2.0.8-nightly.20180820)

electron NPM version =2.0.0, =1.0.1, =0.0.10, =3.0.5, =0.1.0, =1.0.0, =0.0.2, =0.0.1, =1.0.2, =0.0.1, =1.1.0, =0.0.1, =0.0.5 and more Source cves: CVE-2018-15685 Source advisory: OSV:GHSA-HV9C-QWQG-QJ3V...

abbr (=0.0.0), aequitas (>=0.26.0 <=0.42.0) +112 more potentially affected by CVE-2018-1000656 via flask (>=0.10.1 <=0.12.2)

flask PYPI version =0.10.1, =0.26.0, =1.4.15, =0.11.1, =0.4.0, =0.1.0, =0.1.1, =0.1.17, =0.1.0, =0.4.1, =0.1.0, =0.0.1, =1.0.8, =1.1.0 and more Source cves: CVE-2018-1000656 Source advisory: OSV:PYSEC-2018-66...

IBM Tivoli Application Dependency Discovery Manager Cross-Site Request Forgery Vulnerability

IBM Tivoli Application Dependency Discovery Manager TADDM is a product in a suite of IT service management solutions from IBM USA that provides robust automated application mapping and discovery to help administrators understand the structure, state, configuration and change history of business...

IBM API Connect Server-Side Request Forgery Vulnerability

IBM API Connect aka APIConnect is a set of integrated solutions for managing the API lifecycle from IBM in the United States. The solution supports creating, running, managing and protecting APIs and microservices, etc. Developer Portal is one of the developer portals. A server-side request forge...

@sematext/logagent (>=2.0.101 <=2.0.126), cashew-mqtt (>=0.0.6 <=0.1.20) +6 more potentially affected by CVE-2018-3778 via aedes (>=0.11.1 <=0.34.1)

aedes NPM version =0.11.1, =2.0.101, =0.0.6, =0.1.0, =0.0.1, =0.5.1, =1.0.2, =0.0.1, =0.5.1, =0.5.16 Source cves: CVE-2018-3778 Source advisory: OSV:GHSA-4CMX-HRQ9-C23P...

libsbmlsim (>=0.0.1 <=0.0.2), wa-bisnis-bot (=1.0.0) potentially affected by CVE-2016-10642 via cmake (>=0.0.1 <=0.0.4)

cmake NPM version =0.0.1, =0.0.1, =0.0.2 - wa-bisnis-bot =1.0.0 Source cves: CVE-2016-10642 Source advisory: OSV:GHSA-4J59-HFW6-6W7H...

0.8.18-p11 (=0.8.18-p12), 04_nodeblog (=1.0.0) +37638 more potentially affected by CVE-2017-16137 via debug (>=0.1.0 <=2.6.8)

debug NPM version =0.1.0, =1.0.0, =0.0.15, =1.0.4, =1.0.1, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =0.1.2 - 200 =0.0.1 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...

Apache Tomcat Native Authentication Vulnerability

Apache Tomcat is the United States Apache Apache Software Foundation under the Jakarta project of a lightweight Web application server , it is mainly used for the development and debugging of JSP programs for small and medium-sized systems.Apache Tomcat Native is a support for the use of native...

@bitacode/apispecmd-ts (=0.0.2), @cjser/gulp-markdown-pdf (=9.0.0-cjser.2) +63 more potentially affected by CVE-2018-3770 via markdown-pdf (>=0.1.1 <=8.1.1)

markdown-pdf NPM version =0.1.1, =1.0.0, =1.0.0, =1.0.6, =1.2.151, =1.0.1, =1.17.0, =2.0.0, =0.1.0, =2.0.0, =2.1.0 and more Source cves: CVE-2018-3770 Source advisory: OSV:GHSA-P7C9-JQHQ-VR3V...

Unspecified Vulnerability in Eclipse Vert.x

Eclipse Vert.x is an Eclipse Foundation toolkit for building responsive applications on the JVM , which is mainly used to build applications such as network utilities , Web applications , HTTP/REST microservices and so on. A security vulnerability exists in Eclipse Vert.x versions 3.0.0 through...

CVE-2018-0617

Directory traversal vulnerability in ChamaNet MemoCGI v2.1800 to v2.2200 allows remote attackers to read arbitrary files via unspecified vectors...

Intel Quartus II Elevation of Privilege Vulnerability

Intel Quartus II is a suite of software for hardware programming from the American company Intel Intel. An elevation of privilege vulnerability exists in Intel Quartus II versions 11.0 through 15.0. A local attacker could exploit this vulnerability to execute arbitrary code...

@arpinum/postgres (>=4.0.0-beta12 <=4.0.0-beta14), appointmed-epr-template-common (>=0.0.46 <=0.0.65) +9 more potentially affected by CVE-2017-16082 via pg (>=6.2.2 <=6.2.3)

pg NPM version =6.2.2, =4.0.0-beta12, =0.0.46, =0.0.35, =0.13.3, =0.0.1, =0.0.1, =1.0.0, =1.0.3 - pg-promise-strict =0.3.4 - pgo =0.2.1 Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

PT-2018-16189 · Unknown · Statics-Server

Name of the Vulnerable Software and Affected Versions: statics-server versions 0.0.0 through 0.0.9 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs when statics-server displays a directory index in the browser and an attacker injects an iframe in the...

fluentd: Escape sequence injection in filter_parser.rb:filter_stream can lead to arbitrary command execution when processing logs

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors...