CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- haproxy, redhat enterprise linux +1 moreAn issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against...7.5 High
- zclassic z-nompZ-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to...7.5 High
- litecartLiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption)...7.5 High
- severalnines clustercontrolSeveralnines ClusterControl before 1.6.0-4699 allows XSS.6.1 Medium
- auroradao auraThe Owned smart contract implementation for Aurora DAO (AURA), an Ethereum ERC20 token, allows...7.5 High
- libtiff, canonical ubuntu linux, debian linux +2 moreThe TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote...6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreIn types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory...6.5 Medium
- debian linux, linux kernel +1 moreThe cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6...5.5 Medium
- prosody, debian linux +1 moreProsody before 0.10.0 allows remote attackers to cause a denial of service (application crash),...7.5 High
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins4.3 Medium
- icewarp mail serverMultiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote...7.5 High
- freebsdIn FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization...5.5 Medium
- freebsdIn FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE...5.5 Medium
- bitpie bitcoin walletThe Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital...4.1 Medium
- perforce puppet enterprise, puppet enterprise +1 moreXSS Vulnerability in Puppet Enterprise Console5.4 Medium
- perforce puppet enterprise, puppet enterprise +1 moreXSS Vulnerability in Puppet Enterprise Console5.4 Medium
- jenkins, redhat openshift +1 moreIncorrect Authorization in Jenkins Core4.3 Medium
- hawt hawtioPath Traversal in io.hawt:project5.4 Medium
- jenkins s3 publisherStored XSS vulnerability in Jenkins S3 Publisher Plugin5.4 Medium
- jenkins email extensionJenkins Email Extension Plugin showed plain text SMTP password in configuration form field6.5 Medium
- jenkins html publisherJenkins HTML Publisher Plugin path traversal vulnerability6.5 Medium
- jenkins google loginJenkins Google Login Plugin Open Redirect vulnerability6.1 Medium
- jenkins google loginJenkins Google Login Plugin Session Fixation vulnerability5.9 Medium
- dell emc rsa authentication manager security console, operation console and self-service console, rsa authentication manager +1 moreRSA Authentication Manager Security Console, Operation Console and Self-Service Console, version...6.1 Medium
- dell emc rsa authentication manager security console, rsa authentication manager +1 moreRSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External...7.1 High
- dell emc unity operating environment, dell emc unity operating environment (oe), dell emc unityvsa operating environment +2 moreDell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by...7.2 High
- debian linux, kde plasma, opensuse leap +2 morekwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a...7.8 High
- frogcms project frogcmsAn issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting...5.4 Medium
- kongtop a303 firmware, a403 firmware, d303 firmware +2 more +4 moreKONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login...9.8 Critical
- libtiffTIFFClientOpen in tif_unix.c in LibTIFF 3.8.2 has memory leaks, as demonstrated by bmp2tiff.6.5 Medium
- debian linux, freebsd, xen +8 more +10 moreA statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software...7.8 High
- debian linux, kernel kvm, linux kernel +9 more +11 morekernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and...8.0 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c.6.5 Medium
- pivotal spring cloud sso connectorIssuer validation regression in Spring Cloud SSO Connector8.1 High
- braveA hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). This vulnerability...6.5 Medium
- braveA hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). The vulnerability is...6.5 Medium
- 2345 security guard project security guardIn 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a...7.8 High
- fortinet fortiwlcThe presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain...9.8 Critical
- fortinet fortiwlcThe presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to...9.8 Critical
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- apache derby, oracle weblogic server +1 moreImproper Access Control in Apache Derby5.3 Medium
- liferay portal** DISPUTED ** Liferay 6.2.x and before has an FCKeditor configuration that allows an attacker to...8.8 High
- exiv2Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read.6.5 Medium
- mp3gainRead access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain...7.8 High
- mp3gainBuffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows...7.8 High
- mp3gainThe getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to...7.8 High
- bibutils project bibutilsNULL pointer dereference in the _fields_add function in fields.c in libbibcore.a in bibutils...6.5 Medium
- bibutils project bibutilsRead access violation in the isiin_keyword function in isiin.c in libbibutils.a in bibutils...6.5 Medium
- Show moreLoading…