CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- windscribeThe VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a...7.8 High
- monstraMonstra CMS 3.0.4 has a Session Management Issue in the Users tab. A password change at users/1...8.0 High
- monstraMonstra CMS 3.0.4 has a Session Management Issue in the Administrations Tab. A password change at...8.0 High
- monstraMonstra CMS 3.0.4 has XSS in the registration Form (i.e., the login parameter to users...6.1 Medium
- monstraMonstra CMS 3.0.4 has Reflected XSS during Login (i.e., the login parameter to admin/index.php).6.1 Medium
- getcockpit cockpitCockpit 0.5.5 has XSS via a collection, form, or region.5.4 Medium
- delta electronics automation tpeditor, deltaww tpeditor +1 moreIn Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file...9.8 Critical
- acoustic technology, inc. (ati systems) ati emergency mass notification systems, atisystem alert4000 firmware, hpss16 firmware +2 more +4 moreIn ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices...3.1 Low
- acoustic technology, inc. (ati systems) emergency mass notification systems, atisystem alert4000 firmware, hpss16 firmware +2 more +4 moreIn ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices...3.1 Low
- fortinet fortiosAn Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5...5.3 Medium
- trend micro smart protection server (standalone), trendmicro smart protection server +1 moreA vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow an...7.5 High
- trend micro maximum security, trendmicro antivirus\+, internet security +1 more +3 moreA Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security ...7.0 High
- trend micro maximum security, trendmicro antivirus\+, internet security +1 more +3 moreAn Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security ...7.8 High
- trend micro maximum security, trendmicro antivirus\+, internet security +1 more +3 moreAn Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security ...5.5 Medium
- trend micro maximum security, trendmicro antivirus\+, internet security +1 more +3 moreA buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer)...7.8 High
- trend micro maximum security, trendmicro antivirus\+, internet security +1 more +3 moreA buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer)...7.8 High
- trend micro smart protection server (standalone), trendmicro smart protection server +1 moreA SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server ...8.8 High
- osisoft pi coresightPI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to...8.8 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could...8.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could...8.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1, under specific...7.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1 is vulnerable to...8.4 High
- ibm storwize v7000 unified (2073), storwize unified v7000 software +1 moreThe IBM Storwize V7000 Unified management Web interface 1.6 exposes internal cluster details to...5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is...7.8 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1...5.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1...5.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1...5.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1...5.5 Medium
- iscripts eswapiScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.8.8 High
- ibm urbancode deployIBM UrbanCode Deploy 6.1 and 6.2 could allow an authenticated privileged user to obtain highly...4.9 Medium
- mcafee virusscan enterprise, mcafee, llc virusscan enterprise (vse) +1 morePrivilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges6.8 Medium
- mcafee data loss prevention (dlp) endpoint, data loss prevention endpoint +1 moreSB10233 - Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 - Application Protections Bypass vulnerability5.8 Medium
- discount project discount, debian linux +1 moreThe __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote...5.5 Medium
- mcafee network security management (nsm), network security manager +1 moreSB10192 - Network Security Management (NSM) - Cross-Site Scripting (XSS) vulnerability3.5 Low
- easyservice billing project billingA CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php)...8.8 High
- easyservice billing project billingA SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService...9.8 Critical
- easyservice billing project billingThe parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing...6.1 Medium
- easyservice billing project billingA CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3...8.8 High
- moodleMoodle Portfolio script allows instantiation of class chosen by user8.1 High
- moodleMoodle Cross-site Scripting4.3 Medium
- moodleMoodle Portfolio forum caller class allows a user to download any file6.5 Medium
- moodleMoodle Improper Privilege Management6.5 Medium
- moodleMoodle calculated question type allows remote code execution by Question authors8.8 High
- haproxy, canonical ubuntu linux +1 moreIncorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0...5.9 Medium
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in...8.8 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability...8.8 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability...8.8 High
- foxitsoftware phantompdf, reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxitsoftware phantompdf, reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxitsoftware phantompdf, reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- Show moreLoading…