CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- silextechnology geh-sd-320an firmware, sd-320an firmware +1 moreSilex SD-320AN version 2.01 and prior and GE MobileLink(GEH-SD-320AN) version GEH-1.1 and prior...7.4 High
- silextechnology geh-500 firmware, geh-sd-320an firmware, sd-320an firmware +1 more +3 moreIn Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is...6.5 Medium
drupal/svg_formatterPackagistThis module adds a new formatter for the file fields, which allows any file extension to be uploaded. The module doesn't sufficiently handle sanitization under the scenario uploaded SVG files. This vu…No score- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows...5.3 Medium
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an...5.3 Medium
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an...5.3 Medium
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload...6.5 Medium
- sap ea-finserv, s4core, sapscore +3 more +5 moreSAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05,...3.7 Low
- sap maxdb odbc driverSAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can...5.5 Medium
- sap identity managementUnder certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an...5.3 Medium
- sap identity managementSAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an...5.4 Medium
- sap j2ee engine server core, netweaver java web container and http service engine, sap se netweaver application server (engine api) +1 more +3 moreSAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7...4.7 Medium
- mysql-mmm mysql multi-master replication manager, talos mysql mmm +1 moreIn the MMM::Agent::Helpers::Network::send_arp function in MySQL Multi-Master Replication Manager ...9.8 Critical
- mysql-mmm mysql multi-master replication manager, talos mysql mmm +1 moreIn the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager ...9.8 Critical
- mysql-mmm mysql multi-master replication manager, talos mysql mmm +1 moreIn the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager ...9.8 Critical
- mysql-mmm mysql multi-master replication manager, talos mysql mmm +1 moreIn the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager ...9.8 Critical
- mysql-mmm mysql multi-master replication manager, talos mysql mmm +1 moreIn the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager ...9.8 Critical
- mysql-mmm mysql multi-master replication manager, talos mysql mmm +1 moreIn the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager ...9.8 Critical
- mysql-mmm mysql multi-master replication manager, talos mysql mmm +1 moreIn the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager ...9.8 Critical
- mysql-mmm mysql multi-master replication manager, talos mysql mmm +1 moreIn the MMM::Agent::Helpers::_execute function in MySQL Multi-Master Replication Manager (MMM)...9.8 Critical
- ics-cert vgo robot, vecna vgo firmware +1 moreIn Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could...8.8 High
- microsoft edgeA remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in...7.5 High
- microsoft chakracore, edge, internet explorer 11 +1 more +3 moreA remote code execution vulnerability exists in the way that Microsoft browsers access objects in...7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows, windows 10, windows 10 servers +12 more +14 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft infopathA remote code execution vulnerability exists in Microsoft InfoPath when the software fails to...7.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists in the way that the Windows kernel image handles...7.0 High
- microsoft sharepoint, sharepoint server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS)...7.0 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.0 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- microsoft excel, office +1 moreAn information disclosure vulnerability exists when Microsoft Excel improperly discloses the...5.5 Medium
- microsoft excel, office, office for mac +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft office, sharepoint, word +2 more +4 moreA remote code execution vulnerability exists in Microsoft Office software when the software fails...7.8 High
- microsoft office, word, office compatibility pack +2 more +4 moreAn information disclosure vulnerability exists in Outlook when a message is opened, aka ...6.5 Medium
- microsoft exchange serverAn elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA)...5.4 Medium
- microsoft officeA remote code execution vulnerability exists in Microsoft Office software when the software fails...7.8 High
- microsoft officeA remote code execution vulnerability exists in Microsoft Office software when the software fails...7.8 High
- microsoft project server, sharepoint, sharepoint server +2 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft sharepoint, sharepoint server, sharepoint foundation +2 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft exchange serverA remote code execution vulnerability exists in Microsoft Exchange software when the software...9.8 Critical
- microsoft exchange serverA spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails...5.4 Medium
- microsoft exchange serverAn elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA)...5.4 Medium
- microsoft exchange serverAn information disclosure vulnerability exists when Microsoft Exchange improperly handles objects...4.3 Medium
- microsoft officeA security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter...6.5 Medium
- microsoft sharepoint, sharepoint server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft excel, office, office compatibility pack +1 more +3 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft excel, office, office compatibility pack +1 more +3 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft chakracore, edge, internet explorer 10 +2 more +4 moreChakraCore information disclosure vulnerability7.5 High
- Show moreLoading…