CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- ws project ws, hackerone ws node module +1 moreRemote Memory Disclosure in ws7.5 High
- ansi2html project ansi2html, hackerone ansi2html node module +1 moreRegular Expression Denial of Service in ansi2html7.5 High
- secure-compare project secure-compare, hackerone secure-compare node module +1 moreInsecure Comparison in secure-compare5.3 Medium
- hapijs hapi, hackerone hapi node module +1 moreIncorrect handling of CORS preflight request headers in hapi5.3 Medium
- fancy-server project fancy-server, hackerone fancy-server node module +1 moreDirectory Traversal in fancy-server7.5 High
- remarkable project remarkable, hackerone remarkable node module +1 moreContent Injection in remarkable6.1 Medium
- qs project qs, hackerone qs node module +1 moreDenial-of-Service Extended Event Loop Blocking in qs7.5 High
- sinatrarb sinatra, redhat cloudforms +1 moreSinatra Cross-site Scripting vulnerability6.1 Medium
kernel-bigmemSUSE,kernel-defaultSUSE,kernel-docsSUSE +7 more +9 moreSecurity update for the Linux KernelNo score- simple lossless audio project lossless audioSELA (aka SimplE Lossless Audio) v0.1.2-alpha has a stack-based buffer overflow in the core/apev2...7.5 High
- quest kace system management applianceThe 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest...5.5 Medium
- quest kace system management applianceThe 'IMAGES_JSON' and 'attachments_to_remove[]' parameters of the '/adminui/advisory.php' script...9.8 Critical
- quest kace system management applianceThe 'reportID' parameter received by the '/common/run_report.php' script in the Quest KACE System...9.8 Critical
- quest kace system management applianceThe '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance...8.8 High
- quest kace system management applianceThe '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8...9.8 Critical
- quest kace system management applianceThe 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System...6.5 Medium
- quest kace system management applianceThe 'orgID' parameter received by the '/common/download_agent_installer.php' script in the Quest...9.8 Critical
- quest kace system management applianceThe script '/adminui/error_details.php' in the Quest KACE System Management Appliance 8.0.318...8.8 High
- quest kace system management applianceIn order to perform actions that requires higher privileges, the Quest KACE System Management...8.8 High
- quest kace system management applianceThe 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System...6.1 Medium
- quest kace system management applianceIn order to perform actions that require higher privileges, the Quest KACE System Management...8.8 High
- imagemagickIn ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause...8.8 High
- espruinoEspruino before 1.99 allows attackers to cause a denial of service (application crash) and a...7.1 High
- espruinoEspruino before 1.99 allows attackers to cause a denial of service (application crash) with a...5.5 Medium
- espruinoEspruino before 1.99 allows attackers to cause a denial of service (application crash) with a...5.5 Medium
- espruinoEspruino before 1.99 allows attackers to cause a denial of service (application crash) and a...7.8 High
- espruinoEspruino before 1.99 allows attackers to cause a denial of service (application crash) with a...5.5 Medium
- espruinoEspruino before 1.99 allows attackers to cause a denial of service (application crash) and...7.1 High
- espruinoEspruino before 1.98 allows attackers to cause a denial of service (application crash) with a...5.5 Medium
- espruinoEspruino before 1.98 allows attackers to cause a denial of service (application crash) with a...5.5 Medium
- espruinoEspruino before 1.99 allows attackers to cause a denial of service (application crash) with a...5.5 Medium
- bitmain antminer d3 firmware, antminer l3\+ firmware, antminer s9 firmware +2 moreBitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore...8.8 High
- bmw head unit hu nbt firmwareThe Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,...7.8 High
- bmw head unit hu nbt firmwareThe Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,...7.8 High
- bmw telematics control unit firmwareThe Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW...9.8 Critical
- bmw head unit hu nbt firmwareThe Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,...6.8 Medium
- bmw head unit hu nbt firmwareThe Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,...5.3 Medium
- bmw head unit hu nbt firmwareThe Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,...7.8 High
- bmw telematics control unit firmwareThe Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW...9.8 Critical
- ruckuswireless scg-200 firmware, sz-100 firmware, sz-300 firmware +1 more +3 moreRuckus SmartZone (formerly Virtual SmartCell Gateway or vSCG) 3.5.0, 3.5.1, 3.6.0, and 3.6.1 ...9.1 Critical
- seacmsSeaCMS 6.61 has stored XSS in admin_collect.php via the siteurl parameter.6.1 Medium
- multidots mass pages\/posts creatorAn issue was discovered in mass-pages-posts-creator.php in the MULTIDOTS Mass Pages/Posts Creator...5.4 Medium
- multidots woocommerce category banner managementclass-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1...5.3 Medium
- strongswan, canonical ubuntu linux, debian linux +2 moreIn stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a...8.8 High
- miniupnp project ngiflibGifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault.6.5 Medium
- miniupnp project ngiflibngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor.9.8 Critical
- miniupnp project ngiflibngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg.9.8 Critical
- clippercmsClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules -> Manage modules -> edit"...5.4 Medium
- clippercmsClipperCMS 1.3.3 allows Session Fixation.8.8 High
- Show moreLoading…