CVEs published May 15, 2018
37 CVEs were published on May 15, 2018: 0 critical, 3 high.
- Published
- 37
- Critical
- 0
- High
- 3
- Medium
- 5
- Low
- 2
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- Advantech WebAccess
- 11
- [UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- 8
- Cloud Foundry CloudFoundry UAA · org.cloudfoundry.identity:…
- 1
- Intel Graphics Driver
- 1
- Intel Online Connect Access
- 1
- Intel System Configuration Utilities
- 1
- kernel KVM
- 1
- Pivotal Spring Integration Zip · org.springframework.integr…
- 1
- Red Hat infinispan · org.infinispan:infinispan-core
- 1
- Talos Open Fire User Import Export Plugin
- 1
High 3
- CVE-2017-2608Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserialization of various types i[UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2017-2815An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0.Talos Open Fire User Import Export Plugin
- CVE-2018-1087kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in thekernel KVM
Medium, low and unrated 34
- CVE-2017-2613jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins.[UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2018-10589In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2018-10590In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2018-10591In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2018-7495In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2018-7497In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2018-7499In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2018-7501In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2018-7503In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2018-7505In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2018-8841In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2018-8845In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioAdvantech WebAccess
- CVE-2017-2602jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master securit[UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2017-2603Jenkins before versions 2.44, 2.32.2 is vulnerable to a user data leak in disconnected agents' config.xml API.[UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2017-2604In Jenkins before versions 2.44, 2.32.2 low privilege users were able to act on administrative monitors due to them not being consistently p[UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2017-2610jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in search suggestions due to improperly escaping user[UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2017-2600In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API.[UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2017-2612In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392), resulting in futu[UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2018-1262Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones Cloud Foundry CloudFoundry UAA · org.cloudfoundry.identity:…
- CVE-2018-1263Addresses partial fix in CVE-2018-1261.Pivotal Spring Integration Zip · org.springframework.integr…
- CVE-2018-11094An issue was discovered on Intelbras NCLOUD 300 1.0 devices.
- CVE-2018-11126dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.
- CVE-2018-11127e107 2.1.7 has CSRF resulting in arbitrary user deletion.
- CVE-2018-11105There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for WordPress via the "name" (aka wplc_name) and "emai
- CVE-2018-3611Bounds check vulnerability in User Mode Driver in Intel Graphics Driver 15.40.x.4 and 21.20.x.x allows unprivileged user to cause a denial oIntel Graphics Driver
- CVE-2018-3634Parameter corruption in NDIS filter driver in Intel Online Connect Access 1.9.22.0 allows an attacker to cause a denial of service via localIntel Online Connect Access
- CVE-2018-3661Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash tIntel System Configuration Utilities
- CVE-2018-1131Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations.Red Hat infinispan · org.infinispan:infinispan-core
- CVE-2018-10825Mimo Baby 2 devices do not use authentication or encryption for the Bluetooth Low Energy (BLE) communication from a Turtle to a Lilypad, whi
- CVE-2018-11102An issue was discovered in Libav 12.3.
- CVE-2018-11097An issue was discovered in cloudwu/cstring through 2016-11-09.
- CVE-2018-11098An issue was discovered in Frog CMS 0.9.5.
- CVE-2018-11100The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than
- CVE-2018-11095The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the