# CVEs published 2018-05-09

103 CVEs were published on May 9, 2018: 9 critical, 4 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2018-6020](https://cve.now/CVE-2018-6020.md): In Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is not verified when making certain POST requ (no CVSS)
- [CVE-2018-6021](https://cve.now/CVE-2018-6021.md): Silex SD-320AN version 2.01 and prior and GE MobileLink(GEH-SD-320AN) version GEH-1.1 and prior have a system call parameter that is not pro (no CVSS)
- [CVE-2018-8860](https://cve.now/CVE-2018-8860.md): In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network. (no CVSS, ICS-CERT VGo Robot)
- [CVE-2017-14474](https://cve.now/CVE-2017-14474.md): In the MMM::Agent::Helpers::\_execute function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1, a specially crafted MMM prot (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14475](https://cve.now/CVE-2017-14475.md): In the MMM::Agent::Helpers::Network::add\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Linux), a special (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14476](https://cve.now/CVE-2017-14476.md): In the MMM::Agent::Helpers::Network::add\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Solaris), a speci (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14477](https://cve.now/CVE-2017-14477.md): In the MMM::Agent::Helpers::Network::add\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for FreeBSD), a speci (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14478](https://cve.now/CVE-2017-14478.md): In the MMM::Agent::Helpers::Network::clear\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Linux), a speci (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14479](https://cve.now/CVE-2017-14479.md): In the MMM::Agent::Helpers::Network::clear\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Solaris), a spe (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14480](https://cve.now/CVE-2017-14480.md): In the MMM::Agent::Helpers::Network::clear\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for FreeBSD), a spe (CVSS 9.8, Talos MySql MMM)
- [CVE-2017-14481](https://cve.now/CVE-2017-14481.md): In the MMM::Agent::Helpers::Network::send\_arp function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Solaris), a spe (CVSS 9.8, Talos MySql MMM)
- [CVE-2018-2415](https://cve.now/CVE-2018-2415.md): SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine Ser (CVSS 4.7, SAP SE SAP NetWeaver Application Server)
- [CVE-2018-2416](https://cve.now/CVE-2018-2416.md): SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source. (no CVSS, SAP Identity Management)
- [CVE-2018-2417](https://cve.now/CVE-2018-2417.md): Under certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an attacker to access information which would otherw (CVSS 5.3, SAP SE SAP Identity Management)
- [CVE-2018-2418](https://cve.now/CVE-2018-2418.md): SAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can be executed by the application. (CVSS 5.5, SAP SE SAP MaxDB ODBC driver)
- [CVE-2018-2419](https://cve.now/CVE-2018-2419.md): SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perf (CVSS 3.7, SAP SE SAP Enterprise Financial Services)
- [CVE-2018-2420](https://cve.now/CVE-2018-2420.md): SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without (CVSS 6.5, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2421](https://cve.now/CVE-2018-2421.md): SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessi (CVSS 5.3, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2422](https://cve.now/CVE-2018-2422.md): SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessi (CVSS 5.3, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2423](https://cve.now/CVE-2018-2423.md): SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to prevent legitimate users fr (CVSS 5.3, SAP SE SAP Internet Graphics Server)
- [CVE-2017-5175](https://cve.now/CVE-2017-5175.md): Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicious DLL file within th (no CVSS, ICS-CERT Advantech WebAccess Versions 8.1 and prior.)
- [CVE-2018-0765](https://cve.now/CVE-2018-0765.md): A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service (no CVSS, System.Security.Cryptography.Xml)
- [CVE-2018-0824](https://cve.now/CVE-2018-0824.md): A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Micros (CVSS 7.5, KEV)
- [CVE-2018-0854](https://cve.now/CVE-2018-0854.md): A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka "Windows (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-0943](https://cve.now/CVE-2018-0943.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-0945](https://cve.now/CVE-2018-0945.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-0946](https://cve.now/CVE-2018-0946.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-0951](https://cve.now/CVE-2018-0951.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin (no CVSS, Microsoft Edge)
- [CVE-2018-0953](https://cve.now/CVE-2018-0953.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2018-0954](https://cve.now/CVE-2018-0954.md): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting (no CVSS, Microsoft Internet Explorer · Microsoft ChakraCore +2)
- [CVE-2018-0955](https://cve.now/CVE-2018-0955.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-0958](https://cve.now/CVE-2018-0958.md): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-0959](https://cve.now/CVE-2018-0959.md): A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us (no CVSS, Microsoft Windows)
- [CVE-2018-0961](https://cve.now/CVE-2018-0961.md): A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka "Hyper-V (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-1021](https://cve.now/CVE-2018-1021.md): An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Dis (no CVSS, Microsoft Edge)
- [CVE-2018-1022](https://cve.now/CVE-2018-1022.md): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting (no CVSS, Microsoft ChakraCore · Microsoft Internet Explorer +2)
- [CVE-2018-1025](https://cve.now/CVE-2018-1025.md): An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft Browser (no CVSS, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2018-1039](https://cve.now/CVE-2018-1039.md): A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework D (no CVSS, Microsoft .NET Framework)
- [CVE-2018-8112](https://cve.now/CVE-2018-8112.md): A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Sec (no CVSS, Microsoft Edge)
- [CVE-2018-8114](https://cve.now/CVE-2018-8114.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-8119](https://cve.now/CVE-2018-8119.md): A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certificates over the AMQ (no CVSS, Microsoft C# SDK · Microsoft C SDK +1)
- [CVE-2018-8120](https://cve.now/CVE-2018-8120.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k (CVSS 7.0, KEV, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8122](https://cve.now/CVE-2018-8122.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-8123](https://cve.now/CVE-2018-8123.md): An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Dis (no CVSS, Microsoft Edge)
- [CVE-2018-8124](https://cve.now/CVE-2018-8124.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k (no CVSS, Microsoft Windows)
- [CVE-2018-8126](https://cve.now/CVE-2018-8126.md): A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI) policies, aka "Inter (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-8127](https://cve.now/CVE-2018-8127.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2018-8128](https://cve.now/CVE-2018-8128.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2018-8129](https://cve.now/CVE-2018-8129.md): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8130](https://cve.now/CVE-2018-8130.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C (no CVSS, Microsoft.ChakraCore)
- [CVE-2018-8132](https://cve.now/CVE-2018-8132.md): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8133](https://cve.now/CVE-2018-8133.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8134](https://cve.now/CVE-2018-8134.md): An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privil (no CVSS, Microsoft Windows Server 2012 R2 · Microsoft Windows RT +2)
- [CVE-2018-8136](https://cve.now/CVE-2018-8136.md): A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution Vulnerabi (no CVSS, Microsoft Windows)
- [CVE-2018-8137](https://cve.now/CVE-2018-8137.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8139](https://cve.now/CVE-2018-8139.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8141](https://cve.now/CVE-2018-8141.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2018-8145](https://cve.now/CVE-2018-8145.md): An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker (no CVSS, Microsoft ChakraCore · Microsoft Internet Explorer +2)
- [CVE-2018-8147](https://cve.now/CVE-2018-8147.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " (no CVSS, Microsoft Office · Microsoft Excel)
- [CVE-2018-8148](https://cve.now/CVE-2018-8148.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " (no CVSS, Microsoft Office · Microsoft Excel)
- [CVE-2018-8149](https://cve.now/CVE-2018-8149.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t (no CVSS, Microsoft SharePoint Server · Microsoft SharePoint)
- [CVE-2018-8150](https://cve.now/CVE-2018-8150.md): A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly handle attachments, aka (no CVSS, Microsoft Office)
- [CVE-2018-8151](https://cve.now/CVE-2018-8151.md): An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory (no CVSS, Microsoft Exchange Server)
- [CVE-2018-8152](https://cve.now/CVE-2018-8152.md): An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka " (no CVSS, Microsoft Exchange Server)
- [CVE-2018-8153](https://cve.now/CVE-2018-8153.md): A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Micro (no CVSS, Microsoft Exchange Server)
- [CVE-2018-8154](https://cve.now/CVE-2018-8154.md): A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, ak (no CVSS, Microsoft Exchange Server)
- [CVE-2018-8155](https://cve.now/CVE-2018-8155.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t (no CVSS, Microsoft SharePoint)
- [CVE-2018-8156](https://cve.now/CVE-2018-8156.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t (no CVSS, Microsoft SharePoint · Microsoft Project Server)
- [CVE-2018-8157](https://cve.now/CVE-2018-8157.md): A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka (no CVSS, Microsoft Office)
- [CVE-2018-8158](https://cve.now/CVE-2018-8158.md): A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka (no CVSS)
- [CVE-2018-8159](https://cve.now/CVE-2018-8159.md): An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka " (no CVSS, Microsoft Exchange Server)
- [CVE-2018-8160](https://cve.now/CVE-2018-8160.md): An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerabil (no CVSS, Microsoft Word · Microsoft Office)
- [CVE-2018-8161](https://cve.now/CVE-2018-8161.md): A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka (no CVSS, Microsoft Word · Microsoft Office +1)
- [CVE-2018-8162](https://cve.now/CVE-2018-8162.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " (no CVSS, Microsoft Office · Microsoft Excel)
- [CVE-2018-8163](https://cve.now/CVE-2018-8163.md): An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In (no CVSS)
- [CVE-2018-8164](https://cve.now/CVE-2018-8164.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k (no CVSS, Microsoft Windows)
- [CVE-2018-8165](https://cve.now/CVE-2018-8165.md): An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8166](https://cve.now/CVE-2018-8166.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k (no CVSS, Microsoft Windows)
- [CVE-2018-8167](https://cve.now/CVE-2018-8167.md): An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, a (no CVSS, Microsoft Windows)
- [CVE-2018-8168](https://cve.now/CVE-2018-8168.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t (no CVSS, Microsoft SharePoint Server · Microsoft SharePoint)
- [CVE-2018-8170](https://cve.now/CVE-2018-8170.md): An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevat (no CVSS, Microsoft Windows)
- [CVE-2018-8173](https://cve.now/CVE-2018-8173.md): A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects in memory, aka "Micros (no CVSS, Microsoft Infopath)
- [CVE-2018-8174](https://cve.now/CVE-2018-8174.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem (CVSS 7.5, KEV, Microsoft Windows)
- [CVE-2018-8177](https://cve.now/CVE-2018-8177.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C (no CVSS, Microsoft ChakraCore · Microsoft.ChakraCore)
- [CVE-2018-8178](https://cve.now/CVE-2018-8178.md): A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corr (no CVSS, Microsoft ChakraCore · Microsoft Internet Explorer +1)
- [CVE-2018-8179](https://cve.now/CVE-2018-8179.md): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio (no CVSS, Microsoft Edge)
- [CVE-2018-8866](https://cve.now/CVE-2018-8866.md): In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection. (no CVSS, ICS-CERT VGo Robot)
- [CVE-2018-10770](https://cve.now/CVE-2018-10770.md): download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration (without a login) to discover the p (no CVSS)
- [CVE-2018-10828](https://cve.now/CVE-2018-10828.md): An issue was discovered in Alps Pointing-device Driver 10.1.101.207. (no CVSS)
- [CVE-2017-18265](https://cve.now/CVE-2017-18265.md): Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain v (no CVSS)
- [CVE-2018-10940](https://cve.now/CVE-2018-10940.md): The cdrom\_ioctl\_media\_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect (no CVSS)
- [CVE-2018-1089](https://cve.now/CVE-2018-1089.md): 389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly (CVSS 7.5, 389-ds-base)
- [CVE-2016-9335](https://cve.now/CVE-2016-9335.md): A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version (no CVSS, Red Lion Controls Sixnet-Managed Industrial Switches · Auto…)
- [CVE-2018-8911](https://cve.now/CVE-2018-8911.md): Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users (CVSS 6.5, Synology Note Station)
- [CVE-2018-8912](https://cve.now/CVE-2018-8912.md): Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remote authenticated use (CVSS 6.5, Synology Note Station)
- [CVE-2018-10682](https://cve.now/CVE-2018-10682.md): An issue was discovered in WildFly 10.1.2.Final. (CVSS 9.8)
- [CVE-2018-10683](https://cve.now/CVE-2018-10683.md): An issue was discovered in WildFly 10.1.2.Final. (no CVSS)
- [CVE-2018-10184](https://cve.now/CVE-2018-10184.md): An issue was discovered in HAProxy before 1.8.8. (no CVSS)
- [CVE-2018-10830](https://cve.now/CVE-2018-10830.md): In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possib (no CVSS)
- [CVE-2018-10831](https://cve.now/CVE-2018-10831.md): Z-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to spoof mining shares, as demonstrated by provid (no CVSS)
- [CVE-2018-10827](https://cve.now/CVE-2018-10827.md): LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because public\_h (no CVSS)
- [CVE-2018-10705](https://cve.now/CVE-2018-10705.md): The Owned smart contract implementation for Aurora DAO (AURA), an Ethereum ERC20 token, allows attackers to acquire contract ownership becau (no CVSS)
- [CVE-2018-10817](https://cve.now/CVE-2018-10817.md): Severalnines ClusterControl before 1.6.0-4699 allows XSS. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-05-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.