CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- foxitsoftware phantompdf, reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxitsoftware phantompdf, reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxitsoftware phantompdf, reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxitsoftware phantompdf, reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 8.5 through 8.5.0.2 on UNIX allows local users to gain...7.8 High
- ibm tivoli application dependency discovery managerIBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 and 7.2.0 through 7.2.1.4 might...8.1 High
- ibm tivoli application dependency discovery managerThe AXIS webapp in deploy-tomcat/axis in IBM Tivoli Application Dependency Discovery Manager ...5.3 Medium
- beaconmedaes scroll medical air systems firmwareIn TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23,...7.5 High
- beaconmedaes scroll medical air systems firmware, ics-cert beaconmedæs totalalert scroll medical air systems web application +1 moreIn TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23,...9.8 Critical
- jerryscriptAn issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the...9.8 Critical
- jerryscriptAn issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the...9.8 Critical
- jpegoptim project jpegoptimjpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which...8.8 High
- ics-cert abb srea-01 and srea-50, abb srea-01 firmware, srea-50 firmware +2 moreIn ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A:...9.8 Critical
- fortinet fortiosA local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to...6.2 Medium
- sap internet transaction serverSAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via...6.1 Medium
- bearadmin project bearadminAn issue was discovered in BearAdmin 0.5. There is admin/admin_log/index.html?user_id= SQL...8.8 High
- bearadmin project bearadminAn issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via ...6.5 Medium
- [unknown] pdnspdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool...7.0 High
- clippercmsStored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab...4.8 Medium
- bd reada, database manager, performa +1 more +3 moreA vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a...6.3 Medium
- bd performa, database manager, reada +1 more +3 moreA vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and...5.6 Medium
- huawei 1288h v5 firmware, 2288h v5 firmware, 2488 v5 firmware +5 more +7 moreThe iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an...7.5 High
- huawei 1288h v5 firmware, 2288h v5 firmware, huawei technologies co., ltd. 1288h v5; 2288h v5 +2 moreHuawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An...8.8 High
- huawei 1288h v5 firmware, 2288h v5 firmware, huawei technologies co., ltd. 1288h v5; 2288h v5 +2 moreHuawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An...8.8 High
- huawei 1288h v5 firmware, 2288h v5 firmware, huawei technologies co., ltd. 1288h v5; 2288h v5 +2 moreHuawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An...8.8 High
- netapp oncommand unified manager for linux, oncommand unified manager +1 moreNetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management...9.8 Critical
- netapp oncommand unified manager for windows, oncommand unified manager +1 moreNetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a...7.8 High
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 moreHuawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40...5.3 Medium
- huawei berlin-l21hn firmware, prague-al00a firmware, prague-al00b firmware +5 more +7 moreSome Huawei smart phones with the versions before Berlin-L21HNC185B381; the versions before...4.6 Medium
- k2 smartformsServer side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a...6.5 Medium
- opennetworking openflowOpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization...9.8 Critical
- artifex mupdf, debian linux +1 moreIn MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could...5.5 Medium
- artifex mupdfIn MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an...7.8 High
- artifex mupdfIn MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf...7.8 High
- artifex mupdf, debian linux +1 moreIn MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to...5.5 Medium
- artifex mupdf, debian linux +1 moreIn MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a...5.5 Medium
- accellion kiteworksAuthentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote...6.5 Medium
- dimoncoinThe transferFrom function of a smart contract implementation for DimonCoin (FUD), an Ethereum...7.5 High
- kliqqi cmsKliqqi 2.0.2 has CSRF in admin/admin_users.php.8.8 High
- domainmodDomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.6.1 Medium
- domainmodDomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.5.4 Medium
- simplisafe u9k-kp1000 firmwareSimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate...6.6 Medium
- simplisafe u9k-bs1000 firmwareIn SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a...4.6 Medium
- simplisafe u9k-bs1000 firmwareIn SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a...4.6 Medium
- simplisafe u9k-es1000 firmware, u9k-kr1 firmware, u9k-ms1000 firmware +1 more +3 moreSimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate...4.3 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a...5.9 Medium
- liblouis, canonical ubuntu linux +1 moreAn issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in...9.8 Critical
- iliasILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in...6.1 Medium
- micro focus ucmdb, ucmdb browser, microfocus universal cmdb +3 more +5 moreMFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting6.3 Medium
- citrix xenmobile serverThere is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8...8.1 High
- Show moreLoading…