CVEs published May 5, 2018
5 CVEs were published on May 5, 2018: 0 critical, 0 high.
- Published
- 5
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 5
- CVE-2018-10723Directus 6.4.9 has a hardcoded admin password for the Admin account because of an INSERT statement in api/schema.sql.
- CVE-2018-10757CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a login attempt.
- CVE-2018-10758The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles.
- CVE-2018-10752The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action.
- CVE-2018-10753Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial o