CVEs published May 4, 2018
35 CVEs were published on May 4, 2018: 2 critical, 0 high. 2 are now in CISA KEV.
- Published
- 35
- Critical
- 2
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 2
- Fix available
- 1
Most affected products
- ICS-CERT Delta Electronics WPLSoft
- 3
- Philips Brilliance CT Scanners
- 3
- Lantech IDS
- 2
- Medtronic 2090 CareLink Programmer · Medtronic 29901 Encore…
- 2
- Schneider Electric Triconex Tricon
- 2
- ansible
- 1
- IBM WebSphere Application Server
- 1
- Lenovo Group Lenovo System Update
- 1
- Lenovo Group Some Lenovo Flex System and Lenovo System x pr…
- 1
Critical 2
Medium, low and unrated 33
- CVE-2018-9154There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial
- CVE-2011-0704389 Directory Server 1.2.7.5, when built with mozldap, allows remote attackers to cause a denial of service (replica crash) by sending an em
- CVE-2012-5628gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service
- CVE-2013-2233Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.ansible
- CVE-2017-15043A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X,
- CVE-2018-10229A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript
- CVE-2018-10251A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X,
- CVE-2018-7494WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be readICS-CERT Delta Electronics WPLSoft
- CVE-2018-7507WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where a value larger than the buffer can be read ICS-CERT Delta Electronics WPLSoft
- CVE-2018-7509WPLSoft in Delta Electronics versions 2.45.0 and prior writes data from a file outside the bounds of the intended buffer space, which could ICS-CERT Delta Electronics WPLSoft
- CVE-2018-10740Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code (contained in the webkeywords parameter) into the cmscon
- CVE-2018-10746An issue was discovered on D-Link DSL-3782 EU 1.01 devices.
- CVE-2018-10747An issue was discovered on D-Link DSL-3782 EU 1.01 devices.
- CVE-2018-10748An issue was discovered on D-Link DSL-3782 EU 1.01 devices.
- CVE-2018-10749An issue was discovered on D-Link DSL-3782 EU 1.01 devices.
- CVE-2018-10750An issue was discovered on D-Link DSL-3782 EU 1.01 devices.
- CVE-2018-5446Medtronic 2090 Carelink Programmer Storing Passwords in a Recoverable FormatMedtronic 2090 CareLink Programmer · Medtronic 29901 Encore…
- CVE-2018-5448Medtronic 2090 Carelink Programmer Relative Path TraversalMedtronic 2090 CareLink Programmer · Medtronic 29901 Encore…
- CVE-2018-10739An issue was discovered in Shanghai 2345 Security Guard 3.7.0.
- CVE-2018-7522In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixedSchneider Electric Triconex Tricon
- CVE-2018-8853Philips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft Windows operating system.Philips Brilliance CT Scanners
- CVE-2018-8857Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.Philips Brilliance CT Scanners
- CVE-2018-8861Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 andPhilips Brilliance CT Scanners
- CVE-2018-8865In Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been identified which may allow remote code execution.Lantech IDS
- CVE-2018-8869In Lantech IDS 2102 2.0 and prior, nearly all input fields allow for arbitrary input on the device.Lantech IDS
- CVE-2018-8872In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within theSchneider Electric Triconex Tricon
- CVE-2017-3775Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate sigLenovo Group Some Lenovo Flex System and Lenovo System x pr…
- CVE-2018-10733There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0.
- CVE-2018-9063MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerabiLenovo Group Lenovo System Update
- CVE-2018-10726A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action.
- CVE-2017-1743IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper hanIBM WebSphere Application Server
- CVE-2018-10641D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext.
- CVE-2018-10722In Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges because users have Modify access to the %PROG