CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting....6.1 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after...5.9 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security...4.2 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL...3.7 Low
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes...4.3 Medium
- md4c project md4cmd4c before 0.2.5 has a heap-based buffer overflow because md_split_simple_pairing_mark...9.8 Critical
- sitemakin slacAn issue was discovered in SITEMAKIN SLAC (Site Login and Access Control) v1.0. The parameter ...9.8 Critical
- changuondyu advanced statistics project advanced statisticsAn issue was discovered in the ChangUonDyU Advanced Statistics plugin 1.0.2 for MyBB. changstats...6.1 Medium
- wuzhicmsWUZHI CMS 4.1.0 has SQL Injection via an api/sms_check.php?param= URI.9.8 Critical
- cscms project cscmsAn issue was discovered in CScms v4.1. A Cross-site request forgery (CSRF) vulnerability in...8.8 High
- nuuo nvrmini 2 firmwareupload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.9.8 Critical
- dtsearchA stack exhaustion vulnerability in the search function of dtSearch 7.90.8538.1 and prior allows...7.5 High
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp.9.8 Critical
- git-scm git, canonical ubuntu linux, debian linux +5 more +7 moreIn Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17...7.8 High
- dataiku data science studioThe REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information ...5.3 Medium
- myscada mypromySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of...5.3 Medium
- videolan vlc media playerThe vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1...8.8 High
- moderator log notes project log notesAn issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to...5.4 Medium
- membermouseBlind SQL injection in coupon_code in the MemberMouse plugin 2.2.8 and prior for WordPress allows...9.8 Critical
- gvectors wpforoThe wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum...9.8 Critical
- naukri clone script project clone scriptPHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a...8.8 High
- creatiwity witycmsStored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the ...4.8 Medium
- strongswan, canonical ubuntu linux, debian linux +1 more +3 morestrongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a...7.5 High
- flifAn issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long...6.5 Medium
- linux kernel, canonical ubuntu linux +1 moreThe compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows...7.8 High
- google chromeType confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker...8.8 High
- google chromeInsufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium...8.8 High
- google chromeA double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google...8.8 High
- google chromeInappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to...6.5 Medium
- machformAn issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a...9.8 Critical
- machformAn issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection...9.8 Critical
- machformAn issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored...5.3 Medium
- werewolf online project onlineThe Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token...7.5 High
- discount project discount, debian linux +1 moreThe islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to...5.5 Medium
- discount project discount, debian linux +1 moreThe isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers...5.5 Medium
- website seller script project seller scriptPHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.8.8 High
- publiccmsAn issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin...8.8 High
- sass-lang libsassA use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and...9.8 Critical
- lizard project lizard, lz5 +1 moreIn Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was renamed), there is an...7.8 High
- long range zip project range zip, debian linux +1 moreIn Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c,...6.5 Medium
- opencartOpenCart Path Traversal4.9 Medium
- opencartOpenCart Path Traversal8.0 High
- wuzhicmsAn issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a...8.8 High
- giflib project giflib, sam2p project sam2p +1 moreThe DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later...8.8 High
- phpmywindPHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or...6.1 Medium
gitlabDebiangitlab - regression updateNo score- giflib project giflib, sam2p project sam2p, canonical ubuntu linux +1 more +3 moreThe DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later...8.8 High
- kemptechnologies loadmaster operating systemA critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2...9.8 Critical
- Show moreLoading…