CVEs published May 21, 2018
13 CVEs were published on May 21, 2018: 0 critical, 1 high.
- Published
- 13
- Critical
- 0
- High
- 1
- Medium
- 3
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- [UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- 1
- [UNKNOWN] undertow · org.jboss.eap:wildfly-undertow
- 1
- Apache Software Foundation Apache Solr · org.apache.solr:so…
- 1
- Apache Software Foundation Apache ZooKeeper · org.apache.zo…
- 1
- kernel drivers
- 1
- Micro Focus Client for Open Enterprise Server
- 1
- Microsoft Windows Server · Microsoft Windows
- 1
High 1
Medium, low and unrated 12
- CVE-2017-2607jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting vulnerability in console notes (SECURITY-382).[UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2018-1108kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data.kernel drivers
- CVE-2018-11330An issue was discovered in Pluck before 4.7.6.
- CVE-2018-11331An issue was discovered in Pluck before 4.7.6.
- CVE-2018-8010This vulnerability in Apache Solr 6.0.0 to 6.6.3, 7.0.0 to 7.3.0 relates to an XML external entity expansion (XXE) in Solr config files (solApache Software Foundation Apache Solr · org.apache.solr:so…
- CVE-2018-8012No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha throuApache Software Foundation Apache ZooKeeper · org.apache.zo…
- CVE-2018-1067In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulner[UNKNOWN] undertow · org.jboss.eap:wildfly-undertow
- CVE-2018-7268MagniComp SysInfo before 10-H81, as shipped with BMC BladeLogic Automation and other products, contains an information exposure vulnerabilit
- CVE-2018-11092An issue was discovered in the Admin Notes plugin 1.1 for MyBB.
- CVE-2018-11096Horse Market Sell & Rent Portal Script 1.5.7 has a CSRF vulnerability through which an attacker can change all of the target's account infor
- CVE-2018-11320In Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target do not have sensitive values obfuscated in t
- CVE-2018-8142A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass VulnerabiMicrosoft Windows Server · Microsoft Windows