Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2018
May

CVEs published in May 2018

1,213 vulnerabilities, 158 critical, 7 exploited.

Known exploitedIn KEVPublic exploitFix available

podofo project podofoAn issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in...CVE-2018-11256Fix available6.5 MediumMay 18, 2018
podofo project podofoAn issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in...CVE-2018-11255Fix available5.5 MediumMay 18, 2018
podofo project podofoAn issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree:...CVE-2018-11254Fix available5.5 MediumMay 18, 2018
imagemagickIn ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in...CVE-2017-18272Fix available6.5 MediumMay 18, 2018
liulishuo filedownloaderutil/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. If an...CVE-2018-112489.8 CriticalMay 18, 2018
misp-project mispapp/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes.CVE-2018-112456.1 MediumMay 18, 2018
kubernetes cri-oKubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270)...CVE-2018-10004008.8 HighMay 18, 2018
apache orcApache ORC vulnerable to Uncontrolled RecursionCVE-2018-8015Fix available7.5 HighMay 18, 2018
dopewp bbe themeThe BBE theme before 1.53 for WordPress allows a direct launch of an HTML editor.CVE-2018-112445.3 MediumMay 18, 2018
upxPackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of...CVE-2018-11243Fix available7.8 HighMay 18, 2018
gnu glibc, canonical ubuntu linux, netapp data ontap edge +7 more +9 moreAn AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or...CVE-2018-11237Fix available7.8 HighMay 18, 2018
gnu glibc, netapp data ontap edge, element software management +6 more +8 morestdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing...CVE-2018-11236Fix available9.8 CriticalMay 18, 2018
gnu glibcAn SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2...CVE-2017-18269Fix available9.8 CriticalMay 18, 2018
debian linux, kernel drivers, linux kernel +1 more +3 morekernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's...CVE-2018-1108Fix available5.9 MediumMay 18, 2018
redhat tectonicCoreOS Tectonic 1.7.x before 1.7.9-tectonic.4 and 1.8.x before 1.8.4-tectonic.3 mounts a direct...CVE-2018-52567.5 HighMay 18, 2018
open-emr openemrinterface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to...CVE-2018-9250EPSS 30.6%8.8 HighMay 18, 2018
d-link dir-550a firmware, dir-604m firmware +1 moreOn D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default...CVE-2018-109689.8 CriticalMay 18, 2018
d-link dir-550a firmware, dir-604m firmware +1 moreOn D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP...CVE-2018-109678.8 HighMay 18, 2018
medtronic n'vision clinician programmer, 8870 n’vision removable application card, n\'vision 8840 firmware +1 more +3 moreMedtronic N'Vision Clinician Programmer Missing Encryption of Sensitive DataCVE-2018-88494.6 MediumMay 18, 2018
iliaserror.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception.CVE-2018-103076.1 MediumMay 18, 2018
iliasServices/Form/classes/class.ilDateDurationInputGUI.php and Services/Form/classes/class...CVE-2018-103066.1 MediumMay 18, 2018
schneider electric se ampla mes, schneider-electric ampla manufacturing execution system +1 moreSchneider Electric Ampla MES 6.4 provides capability to interact with data from third party...CVE-2017-96374.1 MediumMay 18, 2018
schneider electric se ampla mes, schneider-electric ampla manufacturing execution system +1 moreSchneider Electric Ampla MES 6.4 provides capability to configure users and their privileges....CVE-2017-96353.9 LowMay 18, 2018
linux kernelThe etm_setup_aux function in drivers/hwtracing/coresight/coresight-etm-perf.c in the Linux...CVE-2018-112325.5 MediumMay 18, 2018
imagemagickIn ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in...CVE-2018-11251Fix available6.5 MediumMay 18, 2018
imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the...CVE-2017-18273Fix available6.5 MediumMay 18, 2018
imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the...CVE-2017-18271Fix available6.5 MediumMay 18, 2018
linux kernelIn the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl...CVE-2017-18270Fix available7.1 HighMay 18, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from...CVE-2018-58277.8 HighMay 17, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from...CVE-2018-35687.8 HighMay 17, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from...CVE-2018-35677.8 HighMay 17, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from...CVE-2017-158557.8 HighMay 17, 2018
ibm san volume controller, spectrum virtualize, flashsystem v9000 +12 more +14 moreIBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6...CVE-2018-14665.3 MediumMay 17, 2018
ibm san volume controller, spectrum virtualize, flashsystem v9000 +12 more +14 moreIBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6...CVE-2018-14655.3 MediumMay 17, 2018
ibm san volume controller, spectrum virtualize, flashsystem v9000 +12 more +14 moreIBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6...CVE-2018-14646.5 MediumMay 17, 2018
ibm san volume controller, spectrum virtualize, flashsystem v9000 +12 more +14 moreIBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6...CVE-2018-14636.5 MediumMay 17, 2018
ibm san volume controller, spectrum virtualize, flashsystem v9000 +12 more +14 moreIBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6...CVE-2018-14627.6 HighMay 17, 2018
ibm san volume controller, spectrum virtualize, flashsystem v9000 +12 more +14 moreIBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6...CVE-2018-14615.4 MediumMay 17, 2018
ibm spectrum virtualize, san volume controller firmware, spectrum virtualize for public cloud +5 more +7 moreIBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6...CVE-2018-14387.5 HighMay 17, 2018
ibm san volume controller, spectrum virtualize, flashsystem v9000 +12 more +14 moreIBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6...CVE-2018-14348.8 HighMay 17, 2018
ibm spectrum virtualize, san volume controller firmware, spectrum virtualize for public cloud +5 more +7 moreIBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6...CVE-2018-14337.5 HighMay 17, 2018
cloud foundry windows2012r2 stemcell, pivotal software windows stemcells +1 moreWindows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure...CVE-2018-12766.5 MediumMay 17, 2018
honeywell matrikonopc explorerHoneywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary...CVE-2018-87146.1 MediumMay 17, 2018
citrix application delivery controller firmware, netscaler gateway firmware +1 moreThe AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler...CVE-2018-72189.8 CriticalMay 17, 2018
pdfparserThe ObjReader::ReadObj() function in ObjReader.cpp in vincent0629 PDFParser allows remote...CVE-2018-111287.8 HighMay 17, 2018
signal signal-desktopOpen Whisper Signal (aka Signal-Desktop) through 1.10.1 allows XSS via a resource location...CVE-2018-111016.1 MediumMay 17, 2018
phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAll Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1...CVE-2018-107319.0 CriticalMay 17, 2018
phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAll Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1...CVE-2018-107309.1 CriticalMay 17, 2018
phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAll Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1...CVE-2018-107295.3 MediumMay 17, 2018
phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAll Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1...CVE-2018-107288.1 HighMay 17, 2018
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open