CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- 2345.cc security guardIn 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to...7.8 High
- 2345.cc security guardIn 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to...7.8 High
- 2345.cc security guardIn 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to...7.8 High
- 2345.cc security guardIn 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to...7.8 High
- flif free lossless image formatAn issue was discovered in Free Lossless Image Format (FLIF) 0.3. The TransformPaletteC::process...7.8 High
- flifAn issue was discovered in Free Lossless Image Format (FLIF) 0.3. The Plane function in image...5.5 Medium
- pulsesecure pulse connect securePulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8...5.5 Medium
- huawei technologies co., ltd. ibmc, huawei 1288h v5 firmware, 2288h v5 firmware +18 more +20 moreHuawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low...8.8 High
- huawei mate 9 firmware, mate 9 pro firmware, huawei technologies co., ltd. mate 10, huawei mate 10 pro +2 moreHuawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and...6.2 Medium
- huawei hirouter-cd20 firmware, ws5200 firmware, huawei technologies co., ltd. hirouter-cd20, ws5200 +2 moreHuawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1...7.8 High
- google androidIn Android before the 2018-05-05 security patch level, NVIDIA Media Server contains an out-of...3.3 Low
- google androidIn Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a...5.3 Medium
- zohocorp manageengine netflow analyzerCross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho...6.1 Medium
- devicelock plug and play auditorDLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer...7.8 High
- google androidIn Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a...7.8 High
- google androidIn Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE)...7.8 High
- humhub calendarCross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1...6.5 Medium
- plex media serverSQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4...7.3 High
- synology drive, drive server +1 moreCross-site scripting (XSS) vulnerability in Attachment Preview in Synology Drive before 1.0.1...6.5 Medium
- foxconn ap-fc4064-t firmwareA low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO...9.8 Critical
- foxconn ap-fc4064-t firmwareCross Site Scripting (XSS) exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE...5.4 Medium
- prestashop, responsive mega menu pro project mega menu pro +1 moremodules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown)...9.8 Critical
- hwinfo amd64 kernel driverHWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send IOCTL...7.1 High
- hwinfo amd64 kernel driverHWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to...5.5 Medium
- attribute wizard project wizardmodules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4...9.8 Critical
- opmantek open-auditCross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to...5.4 Medium
- 2345 security guard project security guardAn issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe,...5.5 Medium
- dlink dir-868l firmwareCSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password....8.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to...7.8 High
- synacor zimbra collaboration suitemailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before...6.5 Medium
- synacor zimbra collaboration suitemailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before...5.3 Medium
- synacor zimbra collaboration suitemailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMozilla developers backported selected changes in the Skia library. These changes correct memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreSites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreMalicious PDF can inject JavaScript into PDF Viewer8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...7.5 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreLinux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in...5.5 Medium
- debian linux, kernel vhost, linux kernel +5 more +7 moreLinux kernel vhost since version 4.8 does not properly initialize memory in messages passed...2.3 Low
- jenkinsCross-site Scripting in Jenkins6.1 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...5.5 Medium
- freedesktop xdg-utils, canonical ubuntu linux, debian linux +2 moreThe open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before...8.8 High
- ics-cert vgo robot, vecna vgo firmware +1 moreIn Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware...6.5 Medium
- Show moreLoading…