CVEs published May 16, 2018
28 CVEs were published on May 16, 2018: 0 critical, 0 high.
- Published
- 28
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Apache Software Foundation Apache Tomcat · org.apache.tomca…
- 1
- Atlassian Jira
- 1
- Siemens AG SIMATIC S7-400 (incl. F) CPU hardware
- 1
- The Squid Software Foundation Squid
- 1
Medium, low and unrated 28
- CVE-2018-1172This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-2018031The Squid Software Foundation Squid
- CVE-2017-17688The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration,
- CVE-2017-17689The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration,
- CVE-2018-11212An issue was discovered in libjpeg 9a and 9d.
- CVE-2018-11213An issue was discovered in libjpeg 9a.
- CVE-2018-11214An issue was discovered in libjpeg 9a.
- CVE-2018-4850A vulnerability has been identified in SIMATIC S7-400 (incl.Siemens AG SIMATIC S7-400 (incl. F) CPU hardware
- CVE-2018-8014The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.8Apache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2018-11202A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library.
- CVE-2018-11203A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library.
- CVE-2018-11204A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library.
- CVE-2018-11205A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library.
- CVE-2018-11207A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library.
- CVE-2018-11208An issue was discovered in Z-BlogPHP 2.0.0.
- CVE-2018-11209An issue was discovered in Z-BlogPHP 2.0.0.
- CVE-2018-11210TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so.
- CVE-2018-10240SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token that can be included in requests to the app
- CVE-2018-10241A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated user to crash the application (with a NULL
- CVE-2018-10759PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbit
- CVE-2018-10760Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbi
- CVE-2018-10123p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100.
- CVE-2018-10735A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter.
- CVE-2018-10736A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter.
- CVE-2018-10737A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter.
- CVE-2018-10738A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php chbKey1 parameter.
- CVE-2018-10810chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.
- CVE-2018-5231The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before vAtlassian Jira
- CVE-2018-11206An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library.