CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- microsoft windows host compute, windows host compute service shim +1 moreA remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim)...8.6 High
- red hat ansible tower, redhat cloudforms +1 moreAnsible Tower through version 3.2.3 has a vulnerability that allows users only with access to...8.8 High
- zblogcn z-blogphp** DISPUTED ** Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an...6.1 Medium
- miniupnp project ngiflibThe DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width...8.8 High
- red hat ansible tower, redhat cloudforms +1 moreAnsible Tower before version 3.2.4 has a flaw in the management of system and organization...7.2 High
- tbkvision tbk-dvr4104 firmware, tbk-dvr4216 firmware +1 moreCeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers...9.8 Critical
- iliasILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third...6.1 Medium
- matrix synapseMatrix Synapse DoS7.5 High
- getcockpit cockpitSSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5...9.1 Critical
- google androidThe NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1...7.8 High
- vmware xenonVMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in...4.4 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of...4.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest...5.4 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual...7.5 High
- f5 big-iq centralized management, big-iq cloud and orchestration, iworkflow +16 more +18 moreOn F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ...4.7 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with...4.4 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreOn F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload (LRO) and SYN cookies are enabled ...7.5 High
- ibm api connectIBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and...4.3 Medium
- ibm security guardium database activity monitorIBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not...9.8 Critical
- ibm security guardiumIBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 uses weaker than expected...7.5 High
- meross mss110 firmwareMeross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an...9.8 Critical
- safervpnSaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege escalation vulnerability in its ...7.8 High
- cyberghostvpn cyberghostCyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM privilege escalation vulnerability...7.8 High
- goldenfrog vyprvpnGolden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation...7.8 High
- combodo itopCommand injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators...7.2 High
- meross mss110 firmwareMeross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface.9.8 Critical
- squid-cache squidThis vulnerability allows remote attackers to deny service on vulnerable installations of The...5.9 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local...7.8 High
- quassel-irc quassel, debian linux +1 moreA NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void...7.5 High
- quassel-irc quassel, debian linux +1 moreA heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void...9.8 Critical
- nvidia corporation some nvidia tegra mobile processors, nvidia tegra bootrom rcm +1 moreSome NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow...6.8 Medium
- hrsale project hrsaleA Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by...8.8 High
- hrsale project hrsaleAn Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2,...5.4 Medium
- codeslab shopy point of saleA CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with...8.8 High
- hrsale project hrsaleA CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user...8.8 High
- hrsale project hrsaleA SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user...8.8 High
- clustercoding blog master proA CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a...8.8 High
- jfrog artifactoryUnrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16...9.8 Critical
- redhat automatic bug reporting toolAutomatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive...3.3 Low
- katelloKatello allows remote authenticated users to call the "system remove_deletion" CLI command via...4.3 Medium
- redhat cloudforms management engineRed Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session...7.5 High
- redhat manageiq enterprise virtualization managerCross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager ...8.8 High
- fedoraproject fedoraThe fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1...7.1 High
- openvpn, slackware linux +1 moreopenvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local...7.8 High
- twsz be126 firmwareDue to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126...7.8 High
- ca spectrumCA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote...7.5 High
- tibco datasynapse gridserver managerTIBCO DataSynapse GridServer manager component vulnerable to cross-site scripting attacks6.3 Medium
- tibco datasynapse gridserver managerTIBCO DataSynapse GridServer improper use of encryption6.8 Medium
- Show moreLoading…