CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- citrix xenmobile serverThere is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8...9.8 Critical
- citrix xenmobile serverThere is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3.7.5 High
- citrix xenmobile serverThere are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7...6.1 Medium
- citrix xenmobile serverThere is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2...7.8 High
- citrix xenmobile serverThere is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3.6.1 Medium
- citrix xenmobile serverThere are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2...9.8 Critical
- dlink dsl-3782 firmwareA flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 ...9.8 Critical
- dividoIn the Divido plugin for OpenCart, there is SQL injection. Attackers can use SQL injection to get...8.1 High
- trend micro endpoint application controlA directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a...8.8 High
- trend micro email encryption gatewayA SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5...8.8 High
- trend micro email encryption gatewayAn authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow...7.0 High
- trend micro email encryption gatewayA command injection remote command execution vulnerability in Trend Micro Email Encryption...8.8 High
- trend micro email encryption gatewayA SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5...6.5 Medium
- trend micro email encryption gatewayA vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to...8.8 High
- trend micro email encryption gatewayA vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to...8.8 High
- cloudfoundry routing-release, cloud foundry router, cloudfoundry cf-deployment +2 moreCloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially…5.3 Medium
- dahua technologies xvr 5x04, xvr 5x08, xvr 5x16, xvr 7x16, ipc-hdbw4xxx, ipc-hdbw5xxx, dahuasecurity ipc-hdbw4xxx firmware, ipc-hdbw5xxx firmware +4 more +6 morePrivilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low...8.8 High
- apache nifiApache NiFi JMS Deserialization issue7.5 High
- apache nifiImproper Restriction of XML External Entity Reference in Apache NiFi9.8 Critical
- microsoft office, office for mac +1 moreA remote code execution vulnerability exists in Microsoft PowerPoint software when the software...8.8 High
- gnome epiphanyephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote...7.5 High
- [unknown] jenkinsInadequate Encryption Strength in Jenkins4.3 Medium
- square-enix final fantasy xivffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by...8.1 High
- windscribeWindscribe 1.81 creates a named pipe with a NULL DACL that allows Everyone users to gain...7.8 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...3.1 Low
- apache batik, canonical ubuntu linux, debian linux +18 more +20 moreDeserialization of Untrusted Data in Apache Batik9.8 Critical
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through by user submitting an embedded form. This...6.5 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +8 more +10 moreUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....4.3 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreCrafted message headers can cause a Thunderbird process to hang on receiving the message. This...4.3 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was...7.5 High
- wiresharkIn Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash....7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was...7.5 High
- wiresharkIn Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet...7.5 High
- wiresharkIn Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors...7.5 High
- dolibarr, oracle data integrator +1 moreDolibarr SQL Injection vulnerability9.8 Critical
- dolibarrDolibarr Cross-site scripting (XSS) vulnerability6.1 Medium
- dolibarrDolibarr SQL injection vulnerability9.8 Critical
- dolibarrDolibarr arbitrary commands execution8.0 High
- hp network automation, network operations management ultimate +1 moreMFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities8.7 High
- hp network automation, network operations management ultimate +1 moreMFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities4.7 Medium
- radare radare2The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap...5.5 Medium
- radare radare2The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of...5.5 Medium
- radare radare2The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service ...5.5 Medium
- radare radare2The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of...5.5 Medium
- Show moreLoading…