CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- radare radare2The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of...5.5 Medium
- radare radare2The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause a denial of...5.5 Medium
- radare radare2The wasm_dis() function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact...7.8 High
- radare radare2The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause a denial of...5.5 Medium
- radare radare2The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a denial of service ...5.5 Medium
- radare radare2The _inst__lds() function in radare2 2.5.0 allows remote attackers to cause a denial of service ...5.5 Medium
- micro focus hp service manager software, microfocus service manager +1 moreMFSBGN03807 rev.1 - HP Service Manager Software, Multiple Vulnerabilities6.4 Medium
- ckeditor 5-linkCross-Site Scripting in @ckeditor/ckeditor5-link6.1 Medium
- cloudera hueOpen redirect vulnerability in Cloudera HUE before 3.10.0 allows remote attackers to redirect...6.1 Medium
- iscripts eswapiScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter.9.8 Critical
- iscripts eswapiScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter.9.8 Critical
- [unknown] hawtiohawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker...7.6 High
- [unknown] jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins4.3 Medium
- jboss jbossas, redhat jboss enterprise application platform +1 moreJboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in...7.0 High
- skycaijiSkyCaiji 1.2 allows CSRF to add an Administrator user.8.8 High
- joomla joomla\!In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS...6.1 Medium
- pbootcmsAn issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important...9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances (a redirect...4.7 Medium
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the...4.3 Medium
- joomla joomla\!Joomla! XSS Vulnerability4.8 Medium
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill...9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as...5.9 Medium
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to modify...8.8 High
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR...7.5 High
- joomla joomla\!An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows...6.5 Medium
- vmware fusion, workstation +1 moreVMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial...5.5 Medium
- vmware fusionVMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a...7.8 High
- ibm storediqIBM StoredIQ 7.6 could allow an authenticated attacker to bypass certain security restrictions....5.4 Medium
- cppcmsAn issue was discovered in CppCMS before 1.2.1. There is a denial of service in the JSON parser...7.5 High
- loginizerinit.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored...6.1 Medium
- ethercartel ether cartelThe DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game,...7.5 High
- wizardmac readstatsas/readstat_sas7bcat_read.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop.7.5 High
- wizardmac readstatsav_parse_machine_integer_info_record in spss/readstat_sav_read.c in libreadstat.a in ReadStat 0...7.5 High
- pdfgenjpeg_size in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read.7.5 High
- asustor as6202t firmwareAn insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0...4.3 Medium
- asustor as6202t firmwareAn unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows...8.8 High
- asustor as6202t firmwareA path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers...6.5 Medium
- asustor soundsgoodA persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood...5.4 Medium
- asustor as6202t firmwareA path traversal vulnerability in fileExplorer.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows...4.3 Medium
- asustor as6202t firmwareDirectory traversal in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to...7.2 High
- asustor as6202t firmwareAn unrestricted file upload vulnerability in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3...7.2 High
- frappe erpnextAn XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment.6.1 Medium
- [unknown] jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins4.2 Medium
- arm cortex-a, intel atom c, atom e +197 more +199 moreSystems with microprocessors utilizing speculative execution and that perform speculative reads...5.6 Medium
- debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 morelinux-4.9 - security update5.5 Medium
- pluck-cms pluckAn issue was discovered in Pluck before 4.7.6. Remote PHP code execution is possible because the...9.8 Critical
- pluck-cms pluckAn issue was discovered in Pluck before 4.7.6. There is authenticated stored XSS because the...4.8 Medium
- microfocus client, micro focus client for open enterprise server +1 moreClient for OES Elevation of Privilege via Buffer Overflow7.8 High
- apache zookeeper, debian linux, oracle goldengate stream analytics +2 moreMissing Authorization in Apache ZooKeeper7.5 High
- apache solrThere is a XML external entity expansion (XXE) vulnerability in Apache Solr config files5.5 Medium
- Show moreLoading…