# CVEs published 2018-05-19

38 CVEs were published on May 19, 2018: 1 critical, 2 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2018-11239](https://cve.now/CVE-2018-11239.md): An integer overflow in the \_transfer function of a smart contract implementation for Hexagon (HXG), an Ethereum ERC20 token, allows attacker (no CVSS)
- [CVE-2017-11240](https://cve.now/CVE-2017-11240.md): Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier ha (no CVSS, Adobe Acrobat and Reader 2017.012.20098 and earlier version…)
- [CVE-2017-11250](https://cve.now/CVE-2017-11250.md): Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier ha (no CVSS, Adobe Acrobat and Reader 2017.012.20098 and earlier version…)
- [CVE-2017-11253](https://cve.now/CVE-2017-11253.md): Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier ha (no CVSS, Adobe Acrobat and Reader 2017.012.20098 and earlier version…)
- [CVE-2017-11306](https://cve.now/CVE-2017-11306.md): Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier ha (no CVSS, Adobe Acrobat and Reader 2017.012.20098 and earlier version…)
- [CVE-2017-11307](https://cve.now/CVE-2017-11307.md): Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier ha (no CVSS, Adobe Acrobat and Reader 2017.012.20098 and earlier version…)
- [CVE-2017-11308](https://cve.now/CVE-2017-11308.md): Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier ha (no CVSS, Adobe Acrobat and Reader 2017.012.20098 and earlier version…)
- [CVE-2018-4873](https://cve.now/CVE-2018-4873.md): Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. (no CVSS, Creative Cloud Desktop Application 4.4.1.298 and earlier ve…)
- [CVE-2018-4917](https://cve.now/CVE-2018-4917.md): Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable hea (no CVSS, Adobe Acrobat and Reader 2018.009.20050 and earlier version…)
- [CVE-2018-4918](https://cve.now/CVE-2018-4918.md): Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable out (no CVSS, Adobe Acrobat and Reader 2018.009.20050 and earlier version…)
- [CVE-2018-4919](https://cve.now/CVE-2018-4919.md): Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. (no CVSS, Adobe Flash Player 28.0.0.161 and earlier versions)
- [CVE-2018-4920](https://cve.now/CVE-2018-4920.md): Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability. (no CVSS, Adobe Flash Player 28.0.0.161 and earlier versions)
- [CVE-2018-4921](https://cve.now/CVE-2018-4921.md): Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. (no CVSS, Adobe Connect 9.7 and earlier)
- [CVE-2018-4923](https://cve.now/CVE-2018-4923.md): Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. (no CVSS, Adobe Connect 9.7 and earlier)
- [CVE-2018-4924](https://cve.now/CVE-2018-4924.md): Adobe Dreamweaver CC versions 18.0 and earlier have an OS Command Injection vulnerability. (no CVSS, Adobe Dreamweaver CC 18.0 and earlier versions)
- [CVE-2018-4925](https://cve.now/CVE-2018-4925.md): Adobe Digital Editions versions 4.5.7 and below have an exploitable Out-of-bounds read vulnerability. (no CVSS, Adobe Digital Editions 4.5.7 and below)
- [CVE-2018-4926](https://cve.now/CVE-2018-4926.md): Adobe Digital Editions versions 4.5.7 and below have an exploitable Stack Overflow vulnerability. (no CVSS, Adobe Digital Editions 4.5.7 and below)
- [CVE-2018-4927](https://cve.now/CVE-2018-4927.md): Adobe InDesign versions 13.0 and below have an exploitable Untrusted Search Path vulnerability. (no CVSS, InDesign 13.0 and below)
- [CVE-2018-4928](https://cve.now/CVE-2018-4928.md): Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. (no CVSS, InDesign 13.0 and below)
- [CVE-2018-4929](https://cve.now/CVE-2018-4929.md): Adobe Experience Manager versions 6.2 and earlier have an exploitable stored cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager AEM 6.2 and earlier)
- [CVE-2018-4930](https://cve.now/CVE-2018-4930.md): Adobe Experience Manager versions 6.3 and earlier have an exploitable Cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager AEM 6.3 and earlier)
- [CVE-2018-4931](https://cve.now/CVE-2018-4931.md): Adobe Experience Manager versions 6.1 and earlier have an exploitable stored cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager AEM 6.1 and earlier)
- [CVE-2018-4932](https://cve.now/CVE-2018-4932.md): Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability. (no CVSS, Adobe Flash Player 29.0.0.113 and earlier versions)
- [CVE-2018-4933](https://cve.now/CVE-2018-4933.md): Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. (no CVSS, Adobe Flash Player 29.0.0.113 and earlier versions)
- [CVE-2018-4934](https://cve.now/CVE-2018-4934.md): Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. (no CVSS, Adobe Flash Player 29.0.0.113 and earlier versions)
- [CVE-2018-4935](https://cve.now/CVE-2018-4935.md): Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. (no CVSS, Adobe Flash Player 29.0.0.113 and earlier versions)
- [CVE-2018-4936](https://cve.now/CVE-2018-4936.md): Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. (no CVSS, Adobe Flash Player 29.0.0.113 and earlier versions)
- [CVE-2018-4937](https://cve.now/CVE-2018-4937.md): Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. (no CVSS, Adobe Flash Player 29.0.0.113 and earlier versions)
- [CVE-2018-4938](https://cve.now/CVE-2018-4938.md): Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vu (CVSS 7.8, Adobe ColdFusion ColdFusion Update 5 and earlier versions,…)
- [CVE-2018-4939](https://cve.now/CVE-2018-4939.md): Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untruste (CVSS 9.8, KEV, Adobe ColdFusion ColdFusion Update 5 and earlier versions,…)
- [CVE-2018-4940](https://cve.now/CVE-2018-4940.md): Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulner (no CVSS, Adobe ColdFusion ColdFusion Update 5 and earlier versions,…)
- [CVE-2018-4941](https://cve.now/CVE-2018-4941.md): Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulner (no CVSS, Adobe ColdFusion ColdFusion Update 5 and earlier versions,…)
- [CVE-2018-4942](https://cve.now/CVE-2018-4942.md): Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity (CVSS 7.5, Adobe ColdFusion ColdFusion Update 5 and earlier versions,…)
- [CVE-2018-4943](https://cve.now/CVE-2018-4943.md): Adobe PhoneGap Push Plugin versions 1.8.0 and earlier have an exploitable Same-Origin Method Execution vulnerability. (no CVSS, Adobe PhoneGap Push Plugin 1.8.0 earlier versions)
- [CVE-2018-4944](https://cve.now/CVE-2018-4944.md): Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. (no CVSS, Adobe Flash Player 29.0.0.140 and earlier versions)
- [CVE-2018-4991](https://cve.now/CVE-2018-4991.md): Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. (no CVSS, Creative Cloud Desktop Application 4.4.1.298 and earlier ve…)
- [CVE-2018-4992](https://cve.now/CVE-2018-4992.md): Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. (no CVSS, Creative Cloud Desktop Application 4.4.1.298 and earlier ve…)
- [CVE-2018-4994](https://cve.now/CVE-2018-4994.md): Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. (no CVSS, Adobe Connect 9.7.5 and earlier)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-05-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.