# CVEs published 2018-05-09

103 CVEs were published on May 9, 2018: 9 critical, 4 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2018-6020](https://cve.now/CVE-2018-6020.md): In Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is not verified when making certain POST… (no CVSS)
- [CVE-2018-6021](https://cve.now/CVE-2018-6021.md): Silex SD-320AN version 2.01 and prior and GE MobileLink(GEH-SD-320AN) version GEH-1.1 and prior have a system call parameter that is not… (no CVSS)
- [CVE-2018-8860](https://cve.now/CVE-2018-8860.md): In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network. (no CVSS, ICS-CERT VGo Robot)
- [CVE-2017-14474](https://cve.now/CVE-2017-14474.md): In the MMM::Agent::Helpers::\_execute function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1, a specially crafted MMM… (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14475](https://cve.now/CVE-2017-14475.md): In the MMM::Agent::Helpers::Network::add\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Linux), a… (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14476](https://cve.now/CVE-2017-14476.md): In the MMM::Agent::Helpers::Network::add\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Solaris), a… (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14477](https://cve.now/CVE-2017-14477.md): In the MMM::Agent::Helpers::Network::add\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for FreeBSD), a… (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14478](https://cve.now/CVE-2017-14478.md): In the MMM::Agent::Helpers::Network::clear\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Linux), a… (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14479](https://cve.now/CVE-2017-14479.md): In the MMM::Agent::Helpers::Network::clear\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Solaris), a… (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14480](https://cve.now/CVE-2017-14480.md): In the MMM::Agent::Helpers::Network::clear\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for FreeBSD), a… (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14481](https://cve.now/CVE-2017-14481.md): In the MMM::Agent::Helpers::Network::send\_arp function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Solaris), a… (CVSS 9.8, Talos MySql MMM)
- [CVE-2018-2415](https://cve.now/CVE-2018-2415.md): SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine… (CVSS 4.7, SAP SE SAP NetWeaver Application Server)
- [CVE-2018-2416](https://cve.now/CVE-2018-2416.md): SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source. (no CVSS, SAP Identity Management)
- [CVE-2018-2417](https://cve.now/CVE-2018-2417.md): Under certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an attacker to access information which would… (CVSS 5.3, SAP SE SAP Identity Management)
- [CVE-2018-2418](https://cve.now/CVE-2018-2418.md): SAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can be executed by the application. (CVSS 5.5, SAP SE SAP MaxDB ODBC driver)
- [CVE-2018-2419](https://cve.now/CVE-2018-2419.md): SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not… (CVSS 3.7, SAP SE SAP Enterprise Financial Services)
- [CVE-2018-2420](https://cve.now/CVE-2018-2420.md): SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files)… (CVSS 6.5, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2421](https://cve.now/CVE-2018-2421.md): SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from… (CVSS 5.3, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2422](https://cve.now/CVE-2018-2422.md): SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from… (CVSS 5.3, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2423](https://cve.now/CVE-2018-2423.md): SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to prevent legitimate users… (CVSS 5.3, SAP SE SAP Internet Graphics Server)
- [CVE-2017-5175](https://cve.now/CVE-2017-5175.md): Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicious DLL file within… (no CVSS, ICS-CERT Advantech WebAccess Versions 8.1 and prior.)
- [CVE-2018-0765](https://cve.now/CVE-2018-0765.md): A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of… (no CVSS, System.Security.Cryptography.Xml)
- [CVE-2018-0824](https://cve.now/CVE-2018-0824.md): A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Micros (CVSS 7.5, KEV)
- [CVE-2018-0854](https://cve.now/CVE-2018-0854.md): A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka… (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-0943](https://cve.now/CVE-2018-0943.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-0945](https://cve.now/CVE-2018-0945.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-0946](https://cve.now/CVE-2018-0946.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-0951](https://cve.now/CVE-2018-0951.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft Edge)
- [CVE-2018-0953](https://cve.now/CVE-2018-0953.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2018-0954](https://cve.now/CVE-2018-0954.md): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… (no CVSS, Microsoft Internet Explorer · Microsoft ChakraCore +2)
- [CVE-2018-0955](https://cve.now/CVE-2018-0955.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-0958](https://cve.now/CVE-2018-0958.md): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security… (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-0959](https://cve.now/CVE-2018-0959.md): A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated… (no CVSS, Microsoft Windows)
- [CVE-2018-0961](https://cve.now/CVE-2018-0961.md): A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka… (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-1021](https://cve.now/CVE-2018-1021.md): An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information… (no CVSS, Microsoft Edge)
- [CVE-2018-1022](https://cve.now/CVE-2018-1022.md): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… (no CVSS, Microsoft ChakraCore · Microsoft Internet Explorer +2)
- [CVE-2018-1025](https://cve.now/CVE-2018-1025.md): An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft… (no CVSS, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2018-1039](https://cve.now/CVE-2018-1039.md): A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework… (no CVSS, Microsoft .NET Framework)
- [CVE-2018-8112](https://cve.now/CVE-2018-8112.md): A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge… (no CVSS, Microsoft Edge)
- [CVE-2018-8114](https://cve.now/CVE-2018-8114.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-8119](https://cve.now/CVE-2018-8119.md): A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certificates over the… (no CVSS, Microsoft C# SDK · Microsoft C SDK +1)
- [CVE-2018-8120](https://cve.now/CVE-2018-8120.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k (CVSS 7.0, KEV, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8122](https://cve.now/CVE-2018-8122.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-8123](https://cve.now/CVE-2018-8123.md): An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information… (no CVSS, Microsoft Edge)
- [CVE-2018-8124](https://cve.now/CVE-2018-8124.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2018-8126](https://cve.now/CVE-2018-8126.md): A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI) policies, aka… (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-8127](https://cve.now/CVE-2018-8127.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel… (no CVSS, Microsoft Windows)
- [CVE-2018-8128](https://cve.now/CVE-2018-8128.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2018-8129](https://cve.now/CVE-2018-8129.md): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security… (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8130](https://cve.now/CVE-2018-8130.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft.ChakraCore)
- [CVE-2018-8132](https://cve.now/CVE-2018-8132.md): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security… (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8133](https://cve.now/CVE-2018-8133.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8134](https://cve.now/CVE-2018-8134.md): An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of… (no CVSS, Microsoft Windows Server 2012 R2 · Microsoft Windows RT +2)
- [CVE-2018-8136](https://cve.now/CVE-2018-8136.md): A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution… (no CVSS, Microsoft Windows)
- [CVE-2018-8137](https://cve.now/CVE-2018-8137.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8139](https://cve.now/CVE-2018-8139.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8141](https://cve.now/CVE-2018-8141.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel… (no CVSS, Microsoft Windows)
- [CVE-2018-8145](https://cve.now/CVE-2018-8145.md): An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an… (no CVSS, Microsoft ChakraCore · Microsoft Internet Explorer +2)
- [CVE-2018-8147](https://cve.now/CVE-2018-8147.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka… (no CVSS, Microsoft Office · Microsoft Excel)
- [CVE-2018-8148](https://cve.now/CVE-2018-8148.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka… (no CVSS, Microsoft Office · Microsoft Excel)
- [CVE-2018-8149](https://cve.now/CVE-2018-8149.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request… (no CVSS, Microsoft SharePoint Server · Microsoft SharePoint)
- [CVE-2018-8150](https://cve.now/CVE-2018-8150.md): A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly handle attachments… (no CVSS, Microsoft Office)
- [CVE-2018-8151](https://cve.now/CVE-2018-8151.md): An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange… (no CVSS, Microsoft Exchange Server)
- [CVE-2018-8152](https://cve.now/CVE-2018-8152.md): An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka… (no CVSS, Microsoft Exchange Server)
- [CVE-2018-8153](https://cve.now/CVE-2018-8153.md): A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka… (no CVSS, Microsoft Exchange Server)
- [CVE-2018-8154](https://cve.now/CVE-2018-8154.md): A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory… (no CVSS, Microsoft Exchange Server)
- [CVE-2018-8155](https://cve.now/CVE-2018-8155.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request… (no CVSS, Microsoft SharePoint)
- [CVE-2018-8156](https://cve.now/CVE-2018-8156.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request… (no CVSS, Microsoft SharePoint · Microsoft Project Server)
- [CVE-2018-8157](https://cve.now/CVE-2018-8157.md): A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory… (no CVSS, Microsoft Office)
- [CVE-2018-8158](https://cve.now/CVE-2018-8158.md): A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory… (no CVSS)
- [CVE-2018-8159](https://cve.now/CVE-2018-8159.md): An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka… (no CVSS, Microsoft Exchange Server)
- [CVE-2018-8160](https://cve.now/CVE-2018-8160.md): An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure… (no CVSS, Microsoft Word · Microsoft Office)
- [CVE-2018-8161](https://cve.now/CVE-2018-8161.md): A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory… (no CVSS, Microsoft Word · Microsoft Office +1)
- [CVE-2018-8162](https://cve.now/CVE-2018-8162.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka… (no CVSS, Microsoft Office · Microsoft Excel)
- [CVE-2018-8163](https://cve.now/CVE-2018-8163.md): An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel… (no CVSS)
- [CVE-2018-8164](https://cve.now/CVE-2018-8164.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2018-8165](https://cve.now/CVE-2018-8165.md): An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka… (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8166](https://cve.now/CVE-2018-8166.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2018-8167](https://cve.now/CVE-2018-8167.md): An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory… (no CVSS, Microsoft Windows)
- [CVE-2018-8168](https://cve.now/CVE-2018-8168.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request… (no CVSS, Microsoft SharePoint Server · Microsoft SharePoint)
- [CVE-2018-8170](https://cve.now/CVE-2018-8170.md): An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image… (no CVSS, Microsoft Windows)
- [CVE-2018-8173](https://cve.now/CVE-2018-8173.md): A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects in memory, aka… (no CVSS, Microsoft Infopath)
- [CVE-2018-8174](https://cve.now/CVE-2018-8174.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem (CVSS 7.5, KEV, Microsoft Windows)
- [CVE-2018-8177](https://cve.now/CVE-2018-8177.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… (no CVSS, Microsoft ChakraCore · Microsoft.ChakraCore)
- [CVE-2018-8178](https://cve.now/CVE-2018-8178.md): A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory… (no CVSS, Microsoft ChakraCore · Microsoft Internet Explorer +1)
- [CVE-2018-8179](https://cve.now/CVE-2018-8179.md): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory… (no CVSS, Microsoft Edge)
- [CVE-2018-8866](https://cve.now/CVE-2018-8866.md): In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection. (no CVSS, ICS-CERT VGo Robot)
- [CVE-2018-10770](https://cve.now/CVE-2018-10770.md): download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration (without a login) to discover the… (no CVSS)
- [CVE-2018-10828](https://cve.now/CVE-2018-10828.md): An issue was discovered in Alps Pointing-device Driver 10.1.101.207. (no CVSS)
- [CVE-2017-18265](https://cve.now/CVE-2017-18265.md): Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain… (no CVSS)
- [CVE-2018-10940](https://cve.now/CVE-2018-10940.md): The cdrom\_ioctl\_media\_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a… (no CVSS)
- [CVE-2018-1089](https://cve.now/CVE-2018-1089.md): 389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes… (CVSS 7.5, 389-ds-base)
- [CVE-2016-9335](https://cve.now/CVE-2016-9335.md): A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware… (no CVSS, Red Lion Controls Sixnet-Managed Industrial Switches · Auto…)
- [CVE-2018-8911](https://cve.now/CVE-2018-8911.md): Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated… (CVSS 6.5, Synology Note Station)
- [CVE-2018-8912](https://cve.now/CVE-2018-8912.md): Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remote authenticated… (CVSS 6.5, Synology Note Station)
- [CVE-2018-10682](https://cve.now/CVE-2018-10682.md): An issue was discovered in WildFly 10.1.2.Final. (CVSS 9.8)
- [CVE-2018-10683](https://cve.now/CVE-2018-10683.md): An issue was discovered in WildFly 10.1.2.Final. (no CVSS)
- [CVE-2018-10184](https://cve.now/CVE-2018-10184.md): An issue was discovered in HAProxy before 1.8.8. (no CVSS)
- [CVE-2018-10830](https://cve.now/CVE-2018-10830.md): In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or… (no CVSS)
- [CVE-2018-10831](https://cve.now/CVE-2018-10831.md): Z-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to spoof mining shares, as demonstrated by… (no CVSS)
- [CVE-2018-10827](https://cve.now/CVE-2018-10827.md): LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because… (no CVSS)
- [CVE-2018-10705](https://cve.now/CVE-2018-10705.md): The Owned smart contract implementation for Aurora DAO (AURA), an Ethereum ERC20 token, allows attackers to acquire contract ownership… (no CVSS)
- [CVE-2018-10817](https://cve.now/CVE-2018-10817.md): Severalnines ClusterControl before 1.6.0-4699 allows XSS. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2018-05-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.