CVEs published May 10, 2018
49 CVEs were published on May 10, 2018: 0 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 49
- Critical
- 0
- High
- 1
- Medium
- 5
- Low
- 1
- Unrated
- 42
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Nvidia Android
- 4
- Huawei Technologies Co. HiRouter-CD20, WS5200
- 1
- Huawei Technologies Co. HUAWEI Mate 10, HUAWEI Mate 10 Pro
- 1
- Huawei Technologies Co. iBMC
- 1
- Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wirel…
- 1
- jenkins · org.jenkins-ci.main:jenkins-core
- 1
- kernel
- 1
- kernel vhost
- 1
- postgresql
- 1
- Synology Calendar
- 1
High 1
Medium, low and unrated 48
- CVE-2018-10982An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt…
- CVE-2018-10981An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in…
- CVE-2018-1118Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating…kernel vhost
- CVE-2018-3612Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System…
- CVE-2018-3649DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software…Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wirel…
- CVE-2018-1115postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow postgresql
- CVE-2018-10706An integer overflow in the transferMulti function of a smart contract implementation for Social Chain (SCA), an Ethereum ERC20 token…
- CVE-2018-10973An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows…
- CVE-2018-10974In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or…
- CVE-2018-10975In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or…
- CVE-2018-10976In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or…
- CVE-2018-10977In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or…
- CVE-2017-18267The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service…
- CVE-2018-10971An issue was discovered in Free Lossless Image Format (FLIF) 0.3.
- CVE-2018-10972An issue was discovered in Free Lossless Image Format (FLIF) 0.3.
- CVE-2017-18266The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the…
- CVE-2017-6289In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to…Nvidia Android
- CVE-2017-6293In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software…Nvidia Android
- CVE-2018-10655DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH).
- CVE-2018-10803Cross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 before 12.3.125…
- CVE-2018-6246In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software…Nvidia Android
- CVE-2018-6254In Android before the 2018-05-05 security patch level, NVIDIA Media Server contains an out-of-bounds read (due to improper input…Nvidia Android
- CVE-2018-7933Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10…Huawei Technologies Co. HiRouter-CD20, WS5200
- CVE-2018-7940Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have…Huawei Technologies Co. HUAWEI Mate 10, HUAWEI Mate 10 Pro
- CVE-2018-7941Huawei iBMC V200R002C60 have an authentication bypass vulnerability.Huawei Technologies Co. iBMC
Show all 48 entriesShow fewer entries
- CVE-2018-9849Pulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8.3R5 do not properly process nested XML…
- CVE-2018-1130Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in…kernel
- CVE-2018-8910Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to…Synology Drive
- CVE-2018-8915Cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users…Synology Calendar
- CVE-2018-10314Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via…
- CVE-2018-10942modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote…
- CVE-2018-8060HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver.
- CVE-2018-8061HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send IOCTL 0x85FE2608 to the device driver with the…
- CVE-2018-8824modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0…
- CVE-2018-9111Cross Site Scripting (XSS) exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Build 15 via the configuration of a user…
- CVE-2018-9112A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE…
- CVE-2018-10952In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or…
- CVE-2018-10953In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or…
- CVE-2018-10954In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or…
- CVE-2018-10955In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or…
- CVE-2018-10957CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password.
- CVE-2018-10958In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation for an…
- CVE-2018-10962An issue was discovered in Shanghai 2345 Security Guard 3.7.0.
- CVE-2018-10963The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service…
- CVE-2018-10949mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a…
- CVE-2018-10950mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information…
- CVE-2018-10951mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows zimbraSSLPrivateKey…
- CVE-2017-2601Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353).jenkins · org.jenkins-ci.main:jenkins-core