Adiscon LogAnalyzer versions 4.1.6 and below suffer from a cross site scripting vulnerability.
DomainMOD 4.11.01 – ‘DisplayName’ Cross-Site Scripting
Adiscon LogAnalyzer 4.1.7 – Cross-Site Scripting
i-doit CMDB 1.11.2 – Remote Code Execution
Textpad 8.1.2 – Denial Of Service (PoC)
Apple Security Advisory 2018-12-06-1 – watchOS 5.1.2 is now available and addresses code execution and denial of service vulnerabilities.
FutureNet NXR-G240 Series remote shellshock command injection exploit.
Apple Security Advisory 2018-12-05-2 – macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra are now available and addresses denial of service vulnerabilities.
Apple Security Advisory 2018-12-05-1 – iOS 12.1.1 is now available and addresses code execution and denial of service vulnerabilities.
Apple Security Advisory 2018-12-05-4 – Safari 12.0.2 is now available and addresses code execution vulnerabilities.