CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...4.7 Medium
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA remote code execution vulnerability exists in the way that Windows handles objects in memory,...7.8 High
- microsoft windows 10, windows 10 servers, windows 8.1 +5 more +7 moreAn elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces...7.0 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Windows which could allow an attacker to bypass...5.3 Medium
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Windows which could allow an attacker to bypass...5.3 Medium
- microsoft chakracore, edge +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft internet explorer 11, internet explorer +1 moreA security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode...8.8 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.0 High
- microsoft edgeAn information disclosure vulnerability exists when Microsoft Edge improperly handles objects in...4.3 Medium
- microsoft internet explorer 11, internet explorer +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft win32k, windows 7, windows server 2008 +1 more +3 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.0 High
- microsoft c sdk, c# sdk, java sdk +3 more +5 moreA spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library...5.6 Medium
- microsoft internet explorer 11, internet explorer +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft edgeA security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of...4.3 Medium
- microsoft .net frameworkA security feature bypass vulnerability exists in .Net Framework which could allow an attacker to...7.8 High
- microsoft edge, internet explorer 11, internet explorer +2 moreAn information disclosure vulnerability exists when affected Microsoft browsers improperly handle...4.3 Medium
- microsoft chakracore, edge, internet explorer 11 +1 more +3 moreChakraCore RCE Vulnerability7.5 High
- microsoft edgeAn information disclosure vulnerability exists when Microsoft Edge improperly handles objects in...4.3 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA remote code execution vulnerability exists when Windows Hyper-V on a host server fails to...7.6 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA remote code execution vulnerability exists when Windows Hyper-V on a host server fails to...7.6 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Windows which could allow an attacker to bypass...5.3 Medium
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft chakracore, edge, internet explorer 10 +3 more +5 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft edgeA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Windows Scripting Host which could allow an...5.3 Medium
- microsoft windows, windows 10, windows 7 +12 more +14 moreA remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to...8.8 High
- microsoft .net core, .net framework +1 moreDenial of service vulnerability exists when .NET and .NET Core improperly process XML documents7.5 High
- advantech webaccess, ics-cert advantech webaccess versions 8.1 and prior. +1 moreAdvantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an...7.8 High
graphicsmagickMageiaUpdated graphicsmagick packages fix security vulnerabilitiesNo scorenextcloudMageiaUpdated nextcloud packages fix security vulnerabilities and update versionNo score- alps pointing-device driverAn issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the...5.5 Medium
- annigroup 5 in 1 xvr firmwaredownload.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the...9.8 Critical
- unspecified 389-ds-base, debian linux, fedoraproject 389 directory server +3 more +5 more389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search...7.5 High
- node.jsWithdrawn Advisory: Node.js Inspector RCE via DNS Rebinding8.8 High
drupal/simple_revisionPackagistSimple Taxonomy Revision module enables revisions for taxonomy terms for Drupal 8. The security team is marking this module unsupported. There is a known security issue with the module that has not be…No score- synology note stationCross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before...6.5 Medium
- synology note stationCross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2...6.5 Medium
- red lion controls sixnet-managed industrial switches, automationdirect stride-managed ethernet switch models, redlion sixnet-managed industrial switches firmware +1 more +3 moreA hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed...10.0 Critical
- redhat wildfly** DISPUTED ** An issue was discovered in WildFly 10.1.2.Final. In the case of a default...9.8 Critical
- wildfly** DISPUTED ** An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to...9.8 Critical
- 2345 security guard project security guardIn 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to...7.8 High
- Show moreLoading…