CVEs published May 19, 2018
38 CVEs were published on May 19, 2018: 1 critical, 2 high. 1 is now in CISA KEV.
- Published
- 38
- Critical
- 1
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 35
- Now in CISA KEV
- 1
- Fix available
- 0
Most affected products
- Adobe Acrobat and Reader 2017.012.20098 and earlier version…
- 6
- Adobe Flash Player 29.0.0.113 and earlier versions
- 6
- Adobe ColdFusion ColdFusion Update 5 and earlier versions,…
- 5
- Creative Cloud Desktop Application 4.4.1.298 and earlier ve…
- 3
- Adobe Acrobat and Reader 2018.009.20050 and earlier version…
- 2
- Adobe Connect 9.7 and earlier
- 2
- Adobe Digital Editions 4.5.7 and below
- 2
- Adobe Flash Player 28.0.0.161 and earlier versions
- 2
- InDesign 13.0 and below
- 2
- Adobe Connect 9.7.5 and earlier
- 1
Critical 1
High 2
- CVE-2018-4938Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vuAdobe ColdFusion ColdFusion Update 5 and earlier versions,…
- CVE-2018-4942Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Adobe ColdFusion ColdFusion Update 5 and earlier versions,…
Medium, low and unrated 35
- CVE-2018-11239An integer overflow in the _transfer function of a smart contract implementation for Hexagon (HXG), an Ethereum ERC20 token, allows attacker
- CVE-2017-11240Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier haAdobe Acrobat and Reader 2017.012.20098 and earlier version…
- CVE-2017-11250Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier haAdobe Acrobat and Reader 2017.012.20098 and earlier version…
- CVE-2017-11253Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier haAdobe Acrobat and Reader 2017.012.20098 and earlier version…
- CVE-2017-11306Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier haAdobe Acrobat and Reader 2017.012.20098 and earlier version…
- CVE-2017-11307Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier haAdobe Acrobat and Reader 2017.012.20098 and earlier version…
- CVE-2017-11308Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier haAdobe Acrobat and Reader 2017.012.20098 and earlier version…
- CVE-2018-4873Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability.Creative Cloud Desktop Application 4.4.1.298 and earlier ve…
- CVE-2018-4917Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heaAdobe Acrobat and Reader 2018.009.20050 and earlier version…
- CVE-2018-4918Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable outAdobe Acrobat and Reader 2018.009.20050 and earlier version…
- CVE-2018-4919Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability.Adobe Flash Player 28.0.0.161 and earlier versions
- CVE-2018-4920Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability.Adobe Flash Player 28.0.0.161 and earlier versions
- CVE-2018-4921Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability.Adobe Connect 9.7 and earlier
- CVE-2018-4923Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection.Adobe Connect 9.7 and earlier
- CVE-2018-4924Adobe Dreamweaver CC versions 18.0 and earlier have an OS Command Injection vulnerability.Adobe Dreamweaver CC 18.0 and earlier versions
- CVE-2018-4925Adobe Digital Editions versions 4.5.7 and below have an exploitable Out-of-bounds read vulnerability.Adobe Digital Editions 4.5.7 and below
- CVE-2018-4926Adobe Digital Editions versions 4.5.7 and below have an exploitable Stack Overflow vulnerability.Adobe Digital Editions 4.5.7 and below
- CVE-2018-4927Adobe InDesign versions 13.0 and below have an exploitable Untrusted Search Path vulnerability.InDesign 13.0 and below
- CVE-2018-4928Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability.InDesign 13.0 and below
- CVE-2018-4929Adobe Experience Manager versions 6.2 and earlier have an exploitable stored cross-site scripting vulnerability.Adobe Experience Manager AEM 6.2 and earlier
- CVE-2018-4930Adobe Experience Manager versions 6.3 and earlier have an exploitable Cross-site scripting vulnerability.Adobe Experience Manager AEM 6.3 and earlier
- CVE-2018-4931Adobe Experience Manager versions 6.1 and earlier have an exploitable stored cross-site scripting vulnerability.Adobe Experience Manager AEM 6.1 and earlier
- CVE-2018-4932Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability.Adobe Flash Player 29.0.0.113 and earlier versions
- CVE-2018-4933Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability.Adobe Flash Player 29.0.0.113 and earlier versions
- CVE-2018-4934Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability.Adobe Flash Player 29.0.0.113 and earlier versions
- CVE-2018-4935Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability.Adobe Flash Player 29.0.0.113 and earlier versions
- CVE-2018-4936Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability.Adobe Flash Player 29.0.0.113 and earlier versions
- CVE-2018-4937Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability.Adobe Flash Player 29.0.0.113 and earlier versions
- CVE-2018-4940Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerAdobe ColdFusion ColdFusion Update 5 and earlier versions,…
- CVE-2018-4941Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerAdobe ColdFusion ColdFusion Update 5 and earlier versions,…
- CVE-2018-4943Adobe PhoneGap Push Plugin versions 1.8.0 and earlier have an exploitable Same-Origin Method Execution vulnerability.Adobe PhoneGap Push Plugin 1.8.0 earlier versions
- CVE-2018-4944Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability.Adobe Flash Player 29.0.0.140 and earlier versions
- CVE-2018-4991Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability.Creative Cloud Desktop Application 4.4.1.298 and earlier ve…
- CVE-2018-4992Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability.Creative Cloud Desktop Application 4.4.1.298 and earlier ve…
- CVE-2018-4994Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability.Adobe Connect 9.7.5 and earlier