CVEs published May 10, 2018
49 CVEs were published on May 10, 2018: 0 critical, 1 high.
- Published
- 49
- Critical
- 0
- High
- 1
- Medium
- 5
- Low
- 1
- Unrated
- 42
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Nvidia Android
- 4
- Huawei Technologies Co. HiRouter-CD20, WS5200
- 1
- Huawei Technologies Co. HUAWEI Mate 10, HUAWEI Mate 10 Pro
- 1
- Huawei Technologies Co. iBMC
- 1
- Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wirel…
- 1
- jenkins · org.jenkins-ci.main:jenkins-core
- 1
- kernel
- 1
- kernel vhost
- 1
- postgresql
- 1
- Synology Calendar
- 1
High 1
Medium, low and unrated 48
- CVE-2018-10982An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt numb
- CVE-2018-10981An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situat
- CVE-2018-1118Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating sykernel vhost
- CVE-2018-3612Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Ma
- CVE-2018-3649DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software inIntel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wirel…
- CVE-2018-1115postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow postgresql
- CVE-2018-10706An integer overflow in the transferMulti function of a smart contract implementation for Social Chain (SCA), an Ethereum ERC20 token, allows
- CVE-2018-10973An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attacker
- CVE-2018-10974In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possib
- CVE-2018-10975In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possib
- CVE-2018-10976In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possib
- CVE-2018-10977In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possib
- CVE-2017-18267The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infi
- CVE-2018-10971An issue was discovered in Free Lossless Image Format (FLIF) 0.3.
- CVE-2018-10972An issue was discovered in Free Lossless Image Format (FLIF) 0.3.
- CVE-2017-18266The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWS
- CVE-2017-6289In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusuNvidia Android
- CVE-2017-6293In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes Nvidia Android
- CVE-2018-10655DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH).
- CVE-2018-10803Cross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 before 12.3.125 (b
- CVE-2018-6246In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software rNvidia Android
- CVE-2018-6254In Android before the 2018-05-05 security patch level, NVIDIA Media Server contains an out-of-bounds read (due to improper input validation)Nvidia Android
- CVE-2018-7933Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.Huawei Technologies Co. HiRouter-CD20, WS5200
- CVE-2018-7940Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have anHuawei Technologies Co. HUAWEI Mate 10, HUAWEI Mate 10 Pro
- CVE-2018-7941Huawei iBMC V200R002C60 have an authentication bypass vulnerability.Huawei Technologies Co. iBMC
- CVE-2018-9849Pulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8.3R5 do not properly process nested XML entiti
- CVE-2018-1130Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in that kernel
- CVE-2018-8910Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to injSynology Drive
- CVE-2018-8915Cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to Synology Calendar
- CVE-2018-10314Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a
- CVE-2018-10942modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attacke
- CVE-2018-8060HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver.
- CVE-2018-8061HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send IOCTL 0x85FE2608 to the device driver with the HWiNFO3
- CVE-2018-8824modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 thro
- CVE-2018-9111Cross Site Scripting (XSS) exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Build 15 via the configuration of a user acco
- CVE-2018-9112A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Bui
- CVE-2018-10952In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possib
- CVE-2018-10953In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possib
- CVE-2018-10954In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possib
- CVE-2018-10955In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possib
- CVE-2018-10957CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password.
- CVE-2018-10958In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk
- CVE-2018-10962An issue was discovered in Shanghai 2345 Security Guard 3.7.0.
- CVE-2018-10963The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assert
- CVE-2018-10949mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a Discre
- CVE-2018-10950mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure
- CVE-2018-10951mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows zimbraSSLPrivateKey r
- CVE-2017-2601Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353).jenkins · org.jenkins-ci.main:jenkins-core