CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- bibutils project bibutilsNULL pointer deference in the addsn function in serialno.c in libbibcore.a in bibutils through 6...6.5 Medium
- exiv2The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause...6.5 Medium
- moinejf abcm2ps, debian linux, fedoraproject fedora +2 moreStack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows...9.8 Critical
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before...8.8 High
- libtiff, canonical ubuntu linux +1 moreTIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as...6.5 Medium
- gnome libgxps, redhat ansible tower, enterprise linux desktop +2 more +4 moreThere is a stack-based buffer over-read in calling GLib in the function...6.5 Medium
- vestacp control panelAn issue was discovered in Vesta Control Panel 0.9.8-20. There is Reflected XSS via $_REQUEST[...6.1 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...6.5 Medium
- gnu wget, canonical ubuntu linux, debian linux +3 more +5 moreGNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in...6.5 Medium
- rangerstudio directusDirectus 6.4.9 has a hardcoded admin password for the Admin account because of an INSERT...9.8 Critical
- datenstrom yellowThe edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles.6.5 Medium
- csp mysql user manager project mysql user managerCSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a...9.8 Critical
- moinejf abcm2ps, debian linux, fedoraproject fedora +2 moreStack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20...9.8 Critical
- tagregator project tagregatorThe Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action.4.8 Medium
libdatetime-timezone-perlDebianlibdatetime-timezone-perl - new upstream versionNo scoretzdataDebiantzdata - new upstream versionNo score- jasper project jasperThere is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of...7.5 High
- sierrawireless aleosA vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware...9.8 Critical
- google chrome, lg nexus 5, mozilla firefox +2 moreA hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural...4.8 Medium
- sierrawireless es440 firmware, es450 firmware, gx400 firmware +7 more +9 moreA vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware...8.8 High
- redhat ansibleAnsible fails to cache SSH host keys7.4 High
- gofer project gofergofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which...4.4 Medium
- fedoraproject 389 directory server389 Directory Server 1.2.7.5, when built with mozldap, allows remote attackers to cause a denial...5.9 Medium
- deltaww wplsoft, ics-cert delta electronics wplsoft +1 moreWPLSoft in Delta Electronics versions 2.45.0 and prior writes data from a file outside the bounds...8.8 High
- deltaww wplsoft, ics-cert delta electronics wplsoft +1 moreWPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where...8.8 High
- deltaww wplsoft, ics-cert delta electronics wplsoft +1 moreWPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where...8.8 High
- medtronic 2090 carelink programmer, 2090 carelink programmer firmware, 29901 encore programmer +2 moreMedtronic 2090 Carelink Programmer Relative Path Traversal4.8 Medium
- medtronic 2090 carelink programmer, 2090 carelink programmer firmware, 29901 encore programmer +2 moreMedtronic 2090 Carelink Programmer Storing Passwords in a Recoverable Format4.9 Medium
- d-link dsl-3782 firmwareAn issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long...8.8 High
- d-link dsl-3782 firmwareAn issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long...8.8 High
- d-link dsl-3782 firmwareAn issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long...8.8 High
- d-link dsl-3782 firmwareAn issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long...8.8 High
- d-link dsl-3782 firmwareAn issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long...8.8 High
- axublogAxublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code (contained in...9.8 Critical
gsoapMageiaUpdated gsoap packages fix security vulnerabilityNo scoreboostMageiaUpdated boost packages fix security vulnerabilityNo score- schneider electric triconex tricon, schneider-electric triconex tricon mp 3008 firmware +1 moreIn Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls...8.1 High
- lantech ids 2102, ids 2102 firmware +1 moreIn Lantech IDS 2102 2.0 and prior, nearly all input fields allow for arbitrary input on the...9.8 Critical
- lantech ids 2102, ids 2102 firmware +1 moreIn Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been...9.8 Critical
- philips brilliance ct big bore firmware, brilliance ct scanners, brilliance firmware 64 +2 more +4 moreVulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2...8.7 High
- philips brilliance ct big bore firmware, brilliance ct scanners, brilliance firmware 64 +2 more +4 morePhilips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4...7.8 High
- philips brilliance ct big bore firmware, brilliance ct scanners, brilliance firmware 64 +2 more +4 morePhilips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft...8.8 High
- schneider electric triconex tricon, schneider-electric triconex tricon mp 3008 firmware +1 moreIn Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system...6.7 Medium
- 2345 security guard project security guardAn issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe allows local users...5.5 Medium
- lenovo system updateMapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions...7.8 High
- gnome libgxps, opensuse leap, redhat ansible tower +3 more +5 moreThere is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in...6.5 Medium
- lenovo flex system x240 m5 bios, flex system x280 x6 bios, flex system x480 x6 bios +9 more +11 moreSome Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system...6.4 Medium
- datenstrom yellow** DISPUTED ** A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page"...5.4 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain...4.3 Medium
- dlink dir-601 firmwareD-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which...8.1 High
- Show moreLoading…