CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to...6.5 Medium
- lilypondlilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program...9.8 Critical
- ehcp easy hosting control panelEasy Hosting Control Panel (EHCP) v0.37.12.b makes it easier for attackers to crack database...7.8 High
- ehcp easy hosting control panelEasy Hosting Control Panel (EHCP) v0.37.12.b allows attackers to obtain sensitive information by...7.8 High
- ehcp easy hosting control panelEasy Hosting Control Panel (EHCP) v0.37.12.b, when using a local MySQL server, allows attackers...7.8 High
- ehcp easy hosting control panelEasy Hosting Control Panel (EHCP) v0.37.12.b allows remote attackers to conduct cross-site...8.8 High
- ehcp easy hosting control panelEasy Hosting Control Panel (EHCP) v0.37.12.b has XSS via the domainop action parameter, as...6.1 Medium
- ehcp easy hosting control panelEasy Hosting Control Panel (EHCP) v0.37.12.b has XSS via the op parameter, as demonstrated by...6.1 Medium
- fastweb fastgate firmwareFastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password...8.8 High
- impinj r420 rfid reader firmwareAn issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The...4.3 Medium
- impinj r420 rfid reader firmwareAn issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license...5.4 Medium
- modbuspal project modbuspalModbusPal 1.6b is vulnerable to an XML External Entity (XXE) attack. Projects are saved as .xmpp...5.5 Medium
- pivotal greenplum command centerPivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection...7.5 High
- pivotal application serviceApps Manager included in Pivotal Application Service, versions 1.12.x prior to 1.12.22, 2.0.x...6.5 Medium
- pivotal spring integration zipPath traversal in org.springframework.integration:spring-integration-zip4.7 Medium
- pivotal spring security oauth, spring security oauth +1 moreSpring Security OAuth vulnerable to remote code execution (RCE)9.8 Critical
- broadcom spring data commons, xmlbeam, pivotal software spring data rest +2 moreSpring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references7.5 High
- pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 moreSpring Framework when used in combination with any versions of Spring Security contains an authorization bypass8.8 High
- pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 moreDenial of Service in org.springframework:spring-core6.5 Medium
- absolute computrace agentAbsolute Computrace Agent, as distributed on certain Dell Inspiron systems through 2009, has a...4.1 Medium
- absolute computrace agentThe stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter...6.7 Medium
- absolute computrace agentAbsolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the...6.7 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3 Build 9317. Unauthenticated...5.3 Medium
- latest posts on profile project posts on profileThe "Latest Posts on Profile" plugin 1.1 for MyBB has XSS because there is an added section in a...5.4 Medium
- rockwell automation factorytalk activationWithout quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk...7.8 High
- [unknown] admin-cli, redhat jboss enterprise application platform, keycloak +2 moreadmin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download...4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a text string that happens to be a filename in the operating system's native format is dragged...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur during WebGL operations. While this results in a...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA vulnerability exists in XSLT during number formatting where a negative buffer size may be...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreThe JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including ...6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src"...6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe filename appearing in the "Downloads" panel improperly renders some Unicode characters,...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe Live Bookmarks page and the PDF viewer can run injected script content if a user pastes...4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the ...6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both...4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions can use request redirection and a "filterReponseData" filter to bypass host...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreContent Security Policy (CSP) is not applied correctly to all parts of multipart content sent...6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a malicious attacker has used another vulnerability to gain full control over a content...8.1 High
- mozilla firefox, canonical ubuntu linux +1 moreWebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf websocket data is sent with mixed text and binary in a single message, the binary data can be...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such...6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory...9.8 Critical
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial...8.8 High
- intel corporation dual band wireless-ac, tri-band wireless-ac and wireless-ac family of products, intel dual band wireless-ac 3160, dual band wireless-ac 3165 +16 more +18 moreDLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel...7.8 High
- intel ayaplcel.86a, bios, bnkbl357.86a +15 more +17 moreIntel NUC kits with insufficient input validation in system firmware, potentially allows a local...7.8 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial...6.5 Medium
- postgresql, opensuse leap +1 morepostgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog...4.2 Medium
- koreashow project koreashowAn integer overflow in the transferMulti function of a smart contract implementation for...7.5 High
- social-chain social chainAn integer overflow in the transferMulti function of a smart contract implementation for Social...7.5 High
- Show moreLoading…