CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- hdfgroup hdf5An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c...8.1 High
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 Critical
- haxx curl, canonical ubuntu linux +1 morecurl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer...9.8 Critical
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...9.8 Critical
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...7.8 High
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...9.8 Critical
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...7.5 High
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...7.5 High
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...9.8 Critical
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...9.8 Critical
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...7.5 High
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...6.1 Medium
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...7.5 High
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...9.8 Critical
- [unknown] jenkinsCross-Site Request Forgery in Jenkins5.4 Medium
- [unknown] jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- [unknown] jenkinsImproper Authentication in Jenkins4.3 Medium
- [unknown] jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins2.6 Low
- [unknown] jenkinsIncomplete List of Disallowed Inputs in Jenkins3.1 Low
- pivotal spring integration zipspring-integration-zip Arbitrary File Write4.7 Medium
- cloud foundry cloudfoundry uaa, cloudfoundry cf-deployment, pivotal software cloud foundry uaa +1 more +3 moreUAA privilege escalation across identity zones7.2 High
- [unknown] jenkinsIncorrect Permission Assignment for Critical Resource in Jenkins5.4 Medium
- [unknown] jenkinsDeserialization of Untrusted Data in Jenkins8.8 High
- [unknown] jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins4.3 Medium
- intelbras ncloud 300 firmwareAn issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform...9.8 Critical
- e107e107 2.1.7 has CSRF resulting in arbitrary user deletion.6.5 Medium
- doorgetsdg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an...8.8 High
- igniterealtime user import export, talos open fire user import export plugin +1 moreAn exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2...8.1 High
- 3cx live chatThere is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for...6.1 Medium
- intel selview, syscfg, intel corporation system configuration utilities +2 moreBuffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version...5.5 Medium
- intel online connect accessParameter corruption in NDIS filter driver in Intel Online Connect Access 1.9.22.0 allows an...5.5 Medium
- intel graphics driverBounds check vulnerability in User Mode Driver in Intel Graphics Driver 15.40.x.4 and 21.20.x.x...6.5 Medium
- infinispan, redhat jboss data grid +1 moreDeserialization of Untrusted Data in Infinispan8.8 High
- mimobaby mimo baby 2 firmwareMimo Baby 2 devices do not use authentication or encryption for the Bluetooth Low Energy (BLE)...5.3 Medium
- libavAn issue was discovered in Libav 12.3. A read access violation in the mov_probe function in...7.5 High
- libmingThe decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where...8.8 High
- frog cms project cmsAn issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?...7.2 High
- cstring project cstringAn issue was discovered in cloudwu/cstring through 2016-11-09. There is a memory leak...7.5 High
- libmingThe decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the...8.8 High
- mybiz myprocurenetAn issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the...9.9 Critical
- mybiz myprocurenetAn XSS issue was discovered in MyBiz MyProcureNet 5.0.0. This vulnerability within "ProxyPage...6.1 Medium
- signal signal-desktopjs/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) before 1.10.1 allows XSS via...6.1 Medium
- moxa, moxa edr-810 firmware +1 moreExploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa...7.5 High
- moxa, moxa edr-810 firmware +1 moreExploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa...7.5 High
- moxa, moxa edr-810 firmware +1 moreAn exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR...7.5 High
- moxa, moxa edr-810 firmware +1 moreAn exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR...7.5 High
- moxa, moxa edr-810 firmware +1 moreAn exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR...7.5 High
- moxa, moxa edr-810 firmware +1 moreAn exploitable command injection vulnerability exists in the web server functionality of Moxa EDR...8.8 High
- moxa, moxa edr-810 firmware +1 moreAn exploitable command injection vulnerability exists in the web server functionality of Moxa EDR...8.8 High
- moxa, moxa edr-810 firmware +1 moreAn exploitable command injection vulnerability exists in the web server functionality of Moxa EDR...8.8 High
- Show moreLoading…