CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- [unknown] undertow, redhat jboss enterprise application platform, virtualization host +2 moreImproper Neutralization of CRLF Sequences in HTTP Headers in Undertow5.4 Medium
- magnicomp sysinfoMagniComp SysInfo before 10-H81, as shipped with BMC BladeLogic Automation and other products,...5.5 Medium
- octopus serverIn Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target...9.8 Critical
- horse market sell \& rent portal project market sell \& rent portalHorse Market Sell & Rent Portal Script 1.5.7 has a CSRF vulnerability through which an attacker...6.5 Medium
- admin notes project notesAn issue was discovered in the Admin Notes plugin 1.1 for MyBB. CSRF allows an attacker to...6.5 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka...5.3 Medium
- myscada myproA hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO...9.1 Critical
- syntastic project syntastic, debian linux +1 moreSyntastic (aka vim-syntastic) through 3.9.0 does not properly handle searches for configuration...7.5 High
- makemytripAn issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally...6.5 Medium
- radiothermostat ct50 firmware, ct80 firmware +1 moreThe Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows...6.5 Medium
- hexagontoken hexagonAn integer overflow in the _transfer function of a smart contract implementation for Hexagon (HXG...7.5 High
- adobe connectAdobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability....7.5 High
- adobe creative cloudAdobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable...7.8 High
- adobe creative cloudAdobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable...9.8 Critical
- adobe push notificationsAdobe PhoneGap Push Plugin versions 1.8.0 and earlier have an exploitable Same-Origin Method...8.8 High
- adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...7.5 High
- adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...6.1 Medium
- adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...6.1 Medium
- adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...9.8 Critical
- adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...7.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow...6.5 Medium
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read...6.5 Medium
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read...6.5 Medium
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free...8.8 High
- adobe experience managerAdobe Experience Manager versions 6.1 and earlier have an exploitable stored cross-site scripting...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.3 and earlier have an exploitable Cross-site scripting...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.2 and earlier have an exploitable stored cross-site scripting...6.1 Medium
- adobe indesignAdobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability....7.8 High
- adobe indesignAdobe InDesign versions 13.0 and below have an exploitable Untrusted Search Path vulnerability....7.8 High
- adobe digital editionsAdobe Digital Editions versions 4.5.7 and below have an exploitable Stack Overflow vulnerability....5.5 Medium
- adobe digital editionsAdobe Digital Editions versions 4.5.7 and below have an exploitable Out-of-bounds read...7.5 High
- adobe dreamweaverAdobe Dreamweaver CC versions 18.0 and earlier have an OS Command Injection vulnerability....9.8 Critical
- adobe connectAdobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful...9.1 Critical
- adobe connectAdobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload...6.1 Medium
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAdobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015...9.8 Critical
- adobe acrobat 2017, acrobat dc, acrobat reader 2017 +1 more +3 moreAdobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015...9.8 Critical
- adobe creative cloudAdobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable...7.8 High
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAdobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015...9.8 Critical
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAdobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015...9.8 Critical
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAdobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015...9.8 Critical
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAdobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015...9.8 Critical
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAdobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015...9.8 Critical
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAdobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015...9.8 Critical
- tenable nessus, tenable, inc. tenable nessus +1 moreIn Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the...6.5 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreIn Nessus before 7.1.0, a XSS vulnerability exists due to improper input validation. A remote...5.4 Medium
firefoxUbuntufirefox regressionNo score- ge pacsystems cpu320 firmware, pacsystems cru320 firmware, pacsystems rsti-ep cpe 100 firmware +6 more +8 moreIn GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i...7.5 High
- totemo totemomail encryption gatewaytotemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive...7.5 High
- Show moreLoading…