CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- dasan gigabit passive optical network (gpon) routers, dasannetworks gpon router firmware +1 moreAn issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host...9.8 Critical
- dasan gigabit passive optical network (gpon) routers, dasannetworks gpon router firmware +1 moreAn issue was discovered on Dasan GPON home routers. It is possible to bypass authentication...9.8 Critical
- cylance cylanceprotectIn Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges...7.8 High
- apache ambariApache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing...5.3 Medium
- activision call of duty modern warfare 2Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018...10.0 Critical
- tp-link eap controllerTP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control...8.8 High
- tp-link eap controllerThe web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5...7.5 High
- tp-link eap controllerThe web management interface in the TP-Link EAP Controller and Omada Controller versions 2.5...8.8 High
- tp-link eap controllerStored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada...5.4 Medium
- tp-link eap controllerStored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada...5.4 Medium
- miniupnp project ngiflibThe DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of...8.8 High
- 2345 security guard project security guardAn issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe,...5.5 Medium
- d-link dsl-3782 firmwareAn issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long...8.8 High
- siemens siveillance vms video, siemens ag siveillance vms video for android, siveillance vms video for ios +1 moreA vulnerability has been identified in Siveillance VMS Video for Android (All versions < V12.1a ...7.4 High
- blktrace project blktraceblktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer...5.5 Medium
- auroradao idex membershipThe Owned smart contract implementation for Aurora IDEX Membership (IDXM), an Ethereum ERC20...7.5 High
- partclone project partclonepartclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability...9.8 Critical
- partclonepartclone.restore in Partclone 0.2.87 is prone to a heap-based buffer overflow vulnerability due...9.8 Critical
- long range zip project range zipIn Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the lzma_decompress_buf...9.8 Critical
- cisco webex meetings onlineA vulnerability in Cisco WebEx Recording Format (WRF) Player could allow an unauthenticated,...5.3 Medium
- cisco webex meetings onlineA vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF)...8.8 High
- cisco ios xrA vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated,...5.3 Medium
- cisco prime service catalogA vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated,...6.5 Medium
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- cisco secure firewall management centerA vulnerability in the management console of Cisco Firepower System Software could allow an...6.5 Medium
- cisco webex meeting server, webex meetings, webex business suite 31 +1 more +3 moreA vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF)...9.6 Critical
- cisco meeting serverA vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain...8.1 High
- cisco prime data center network manager, prime infrastructure +1 moreA vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could...9.8 Critical
- cisco secure access control systemA vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could...9.8 Critical
- cisco wireless lan controller softwareA vulnerability in the IP Version 4 (IPv4) fragment reassembly function of Cisco 3500, 5500, and...8.6 High
- cisco aironet access point software, aironet access points +1 moreA vulnerability in Central Web Authentication (CWA) with FlexConnect Access Points (APs) for...4.1 Medium
- cisco aironet access point softwareA vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series...4.3 Medium
- cisco aironet access point software, wireless lan controller software +1 moreA vulnerability in Web Authentication (WebAuth) clients for the Cisco Wireless LAN Controller ...4.7 Medium
- cisco wireless lan controller softwareA vulnerability in the REST API of Cisco 5500 and 8500 Series Wireless LAN Controller (WLC)...5.3 Medium
- cisco wireless lan controller softwareA vulnerability in the 802.11 frame validation functionality of the Cisco Wireless LAN Controller...7.4 High
- cisco aironet access point softwareA vulnerability in the implementation of Point-to-Point Tunneling Protocol (PPTP) functionality...8.6 High
- cisco mobility express softwareA vulnerability in the assignment and management of default user accounts for Secure Shell (SSH)...7.5 High
- tp-shopA web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which...9.8 Critical
- gemalto sentinel ldk rteThe License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to...6.1 Medium
- watchguard ap100 firmware, ap102 firmware, ap200 firmware +1 more +3 moreAn issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9...9.8 Critical
- watchguard ap100 firmware, ap102 firmware, ap200 firmware +1 more +3 moreAn issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9...8.8 High
- flexense disksorterXSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7.6.1 Medium
- flexense vx searchXSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7.6.1 Medium
- flexense dupscoutXSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7.6.1 Medium
- flexense disksavvyXSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7.6.1 Medium
- flexense diskpulseXSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7.6.1 Medium
- flexense syncbreezeAn XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1...6.1 Medium
- flexense diskbossFlexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS.6.1 Medium
- 7-zipIncorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage...7.8 High
- Show moreLoading…