CVEs published May 23, 2018
32 CVEs were published on May 23, 2018: 0 critical, 2 high.
- Published
- 32
- Critical
- 0
- High
- 2
- Medium
- 4
- Low
- 1
- Unrated
- 25
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Trend Micro Email Encryption Gateway
- 6
- [UNKNOWN] procps-ng, procps
- 4
- Apache Software Foundation Apache NiFi · org.apache.nifi:ni…
- 2
- [UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- 1
- [UNKNOWN] procps-ng
- 1
- Cloud Foundry Router
- 1
- Dahua Technologies XVR 5x04, XVR 5x08, XVR 5x16, XVR 7x16,…
- 1
- Micro Focus UCMDB · Micro Focus CMS Server
- 1
- Microsoft Office
- 1
- Trend Micro Endpoint Application Control
- 1
High 2
Medium, low and unrated 30
- CVE-2018-10428ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various ins
- CVE-2018-6495MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site ScriptingMicro Focus UCMDB · Micro Focus CMS Server
- CVE-2018-10648There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
- CVE-2018-10649There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3.
- CVE-2018-10650There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
- CVE-2018-10651There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
- CVE-2018-10652There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3.
- CVE-2018-10653There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
- CVE-2018-10654There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
- CVE-2018-10351A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable Trend Micro Email Encryption Gateway
- CVE-2018-10352A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable Trend Micro Email Encryption Gateway
- CVE-2018-10353A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sTrend Micro Email Encryption Gateway
- CVE-2018-10354A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execTrend Micro Email Encryption Gateway
- CVE-2018-10355An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vuTrend Micro Email Encryption Gateway
- CVE-2018-10356A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitraryTrend Micro Email Encryption Gateway
- CVE-2018-10357A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code Trend Micro Endpoint Application Control
- CVE-2018-11231In the Divido plugin for OpenCart, there is SQL injection.
- CVE-2018-8898A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B012" FWVer="3.10.0.24
- CVE-2017-9317Privilege escalation vulnerability found in some Dahua IP devices.Dahua Technologies XVR 5x04, XVR 5x08, XVR 5x16, XVR 7x16,…
- CVE-2018-1193Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers.Cloud Foundry Router
- CVE-2018-1123procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow.[UNKNOWN] procps-ng, procps
- CVE-2018-1125procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep.[UNKNOWN] procps-ng, procps
- CVE-2018-1309Apache NiFi External XML Entity issue in SplitXML processor.Apache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2018-1310Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability.Apache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2017-2598Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored sec[UNKNOWN] jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2018-1126procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues.[UNKNOWN] procps-ng, procps
- CVE-2018-11396ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (applicat
- CVE-2018-8176A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka Microsoft Office
- CVE-2018-11334Windscribe 1.81 creates a named pipe with a NULL DACL that allows Everyone users to gain privileges or cause a denial of service via \\.\pip
- CVE-2018-7295ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During