# CVEs published 2018-05-18 31 CVEs were published on May 18, 2018: 0 critical, 0 high. Days are UTC. - [CVE-2018-1147](https://cve.now/CVE-2018-1147.md): In Nessus before 7.1.0, a XSS vulnerability exists due to improper input validation. (no CVSS, Tenable Nessus) - [CVE-2018-1148](https://cve.now/CVE-2018-1148.md): In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application. (no CVSS, Tenable Nessus) - [CVE-2018-6562](https://cve.now/CVE-2018-6562.md): totemomail Encryption Gateway before 6.0\_b567 allows remote attackers to obtain sensitive information about user sessions and encryption key (no CVSS) - [CVE-2018-8867](https://cve.now/CVE-2018-8867.md): In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems (no CVSS, ICS-CERT GE PACSystems RX3i CPE305/310) - [CVE-2017-18271](https://cve.now/CVE-2017-18271.md): In ImageMagick 7.0.7-16 Q16 x86\_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, whic (no CVSS) - [CVE-2017-18272](https://cve.now/CVE-2017-18272.md): In ImageMagick 7.0.7-16 Q16 x86\_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause (no CVSS) - [CVE-2017-18273](https://cve.now/CVE-2017-18273.md): In ImageMagick 7.0.7-16 Q16 x86\_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which (no CVSS) - [CVE-2018-11251](https://cve.now/CVE-2018-11251.md): In ImageMagick 7.0.7-23 Q16 x86\_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attacker (no CVSS) - [CVE-2018-11254](https://cve.now/CVE-2018-11254.md): An issue was discovered in PoDoFo 0.9.5. (no CVSS) - [CVE-2018-11255](https://cve.now/CVE-2018-11255.md): An issue was discovered in PoDoFo 0.9.5. (no CVSS) - [CVE-2018-11256](https://cve.now/CVE-2018-11256.md): An issue was discovered in PoDoFo 0.9.5. (no CVSS) - [CVE-2018-1000400](https://cve.now/CVE-2018-1000400.md): Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabi (no CVSS) - [CVE-2018-11245](https://cve.now/CVE-2018-11245.md): app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes. (no CVSS) - [CVE-2018-11248](https://cve.now/CVE-2018-11248.md): util/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. (no CVSS) - [CVE-2018-11243](https://cve.now/CVE-2018-11243.md): PackLinuxElf64::unpack in p\_lx\_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (double free), limit the ability of (no CVSS) - [CVE-2018-11244](https://cve.now/CVE-2018-11244.md): The BBE theme before 1.53 for WordPress allows a direct launch of an HTML editor. (no CVSS) - [CVE-2018-8015](https://cve.now/CVE-2018-8015.md): In Apache ORC 1.0.0 to 1.4.3 a malformed ORC file can trigger an endlessly recursive function call in the C++ or Java parser. (no CVSS, Apache Software Foundation Apache ORC · org.apache.orc:orc) - [CVE-2017-18269](https://cve.now/CVE-2017-18269.md): An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or (no CVSS) - [CVE-2017-18270](https://cve.now/CVE-2017-18270.md): In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwanted defaults or caus (no CVSS) - [CVE-2018-11236](https://cve.now/CVE-2018-11236.md): stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpa (no CVSS) - [CVE-2018-11237](https://cve.now/CVE-2018-11237.md): An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond (no CVSS) - [CVE-2018-5256](https://cve.now/CVE-2018-5256.md): CoreOS Tectonic 1.7.x before 1.7.9-tectonic.4 and 1.8.x before 1.8.4-tectonic.3 mounts a direct proxy to the kubernetes cluster at /api/kube (no CVSS) - [CVE-2018-10967](https://cve.now/CVE-2018-10967.md): On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands that (no CVSS) - [CVE-2018-10968](https://cve.now/CVE-2018-10968.md): On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unauthorized access to vul (no CVSS) - [CVE-2018-9250](https://cve.now/CVE-2018-9250.md): interface\\super\\edit\_list.php in OpenEMR before v5\_0\_1\_1 allows remote authenticated users to execute arbitrary SQL commands via the newlist (no CVSS) - [CVE-2017-9635](https://cve.now/CVE-2017-9635.md): Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. (no CVSS, Schneider Electric SE Ampla MES) - [CVE-2017-9637](https://cve.now/CVE-2017-9637.md): Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. (no CVSS, Schneider Electric SE Ampla MES) - [CVE-2018-10306](https://cve.now/CVE-2018-10306.md): Services/Form/classes/class.ilDateDurationInputGUI.php and Services/Form/classes/class.ilDateTimeInputGUI.php in ILIAS 5.1.x through 5.3.x b (no CVSS) - [CVE-2018-10307](https://cve.now/CVE-2018-10307.md): error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception. (no CVSS) - [CVE-2018-8849](https://cve.now/CVE-2018-8849.md): Medtronic N'Vision Clinician Programmer Missing Encryption of Sensitive Data (CVSS 4.6, Medtronic N'Vision Clinician Programmer · Medtronic 8870 N’…) - [CVE-2018-11232](https://cve.now/CVE-2018-11232.md): The etm\_setup\_aux function in drivers/hwtracing/coresight/coresight-etm-perf.c in the Linux kernel before 4.10.2 allows attackers to cause a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-05-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.