CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- libmingThe dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header...8.8 High
- libavAn issue was discovered in Libav 12.3. A read access violation in the in_table_init16 function in...6.5 Medium
- cisco unified communications managerA vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified...6.1 Medium
- cisco identity services engine softwareA vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an...6.1 Medium
- cisco telepresence server, telepresence tx9000 firmware +1 moreA vulnerability in the web UI of Cisco TelePresence Server Software could allow an...6.1 Medium
- cisco ip phone 7800 series and 8800 series, ip phone 7800 firmware, ip phone 8800 firmware +2 moreA vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP...7.5 High
- cisco enterprise nfv infrastructure software, network functions virtualization infrastructure +1 moreA vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an...6.7 Medium
- cisco enterprise nfv infrastructure software, network functions virtualization infrastructure +1 moreA vulnerability in the web management interface of Cisco Enterprise NFV Infrastructure Software ...6.5 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an...5.8 Medium
- cisco socialminerA vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote...5.3 Medium
- cisco identity services engine softwareA vulnerability in the logs component of Cisco Identity Services Engine could allow an...6.1 Medium
- cisco meeting serverA vulnerability in the Real-Time Transport Protocol (RTP) bitstream processing of the Cisco...7.5 High
- cisco enterprise nfv infrastructure softwareA vulnerability in the Secure Copy Protocol (SCP) server of Cisco Enterprise NFV Infrastructure...8.8 High
- cisco identity services engineA vulnerability in the Extensible Authentication Protocol-Transport Layer Security (EAP-TLS)...8.6 High
- cisco digital network architecture centerA vulnerability in the API gateway of the Cisco Digital Network Architecture (DNA) Center could...9.8 Critical
- cisco iot field network directorA vulnerability in the web-based management interface of Cisco IoT Field Network Director (IoT...8.8 High
- cisco digital network architecture centerA vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA)...10.0 Critical
- cisco digital network architecture centerA vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated...10.0 Critical
- vcftools project vcftoolsThe header::add_FORMAT_descriptor function in header.cpp in VCFtools 0.1.15 allows remote...7.8 High
- vcftools project vcftoolsThe header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers...7.8 High
- vcftools project vcftoolsThe header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers...5.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIn the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI...7.5 High
- 9folders nine, apple mail, bloop airmail +14 more +16 moreThe S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can...5.9 Medium
- apple mail, bloop airmail, emclient +8 more +10 more** DISPUTED ** The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget...5.9 Medium
- siemens simatic s7-400 firmware, simatic s7-400h firmware, siemens ag simatic s7-400 (incl. f) cpu hardware version 4.0 and below, simatic s7-400 (incl. f) cpu hardware version 5.0, simatic s7-400h cpu hardware version 4.5 and below +2 moreA vulnerability has been identified in SIMATIC S7-400 (incl. F) CPU hardware version 4.0 and...7.5 High
- tinyxml2 project tinyxml2** DISPUTED ** TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse...9.8 Critical
- zblogcn z-blogphp** DISPUTED ** An issue was discovered in Z-BlogPHP 2.0.0. zb_system/cmd.php?act=verify relies on...7.2 High
- zblogcn z-blogphp** DISPUTED ** An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows...4.8 Medium
- hdfgroup hdf5A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library...6.5 Medium
- hdfgroup hdf5A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It...8.1 High
- hdfgroup hdf5A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5...6.5 Medium
- hdfgroup hdf5A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2...6.5 Medium
- hdfgroup hdf5A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1...6.5 Medium
- projectpierUnrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows...8.8 High
- projectpierPHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and...9.8 Critical
- solarwinds serv-uA denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated...6.5 Medium
- solarwinds serv-uSolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token...7.3 High
- atlassian jira, jira server +1 moreThe ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before...7.5 High
- livezillachat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site...6.1 Medium
- nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php...7.2 High
- nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php...7.2 High
- nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1...7.2 High
- nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php...7.2 High
- intenogroup iopsys firmwarep910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to,...8.8 High
librawMageiaUpdated libraw packages fix security vulnerabilitiesNo score- No product listedEmail folding function Denial-of-ServiceNo score
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 Critical
- ijg libjpeg, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote...6.5 Medium
- ijg libjpeg, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote...6.5 Medium
- ijg libjpeg, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows...6.5 Medium
- Show moreLoading…