CVEs published May 24, 2018
55 CVEs were published on May 24, 2018: 1 critical, 0 high.
- Published
- 55
- Critical
- 1
- High
- 0
- Medium
- 2
- Low
- 0
- Unrated
- 52
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Huawei Technologies Co. 1288H V5; 2288H
- 3
- Becton, Dickinson and Company Kiestra and InoqulA systems
- 2
- Apache Software Foundation Apache Batik · org.apache.xmlgra…
- 1
- Fortinet FortiOS
- 1
- Huawei Technologies Co. 1288H V5; 2288H V5; 2488 V5; CH121…
- 1
- Huawei Technologies Co. Berlin-L21HN; Prague-AL00A; Prague-…
- 1
- Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- 1
- ICS-CERT ABB SREA-01 and SREA-50
- 1
- ICS-CERT BeaconMedæs TotalAlert Scroll Medical A…
- 1
- NetApp OnCommand Unified Manager for Linux
- 1
Critical 1
Medium, low and unrated 54
- CVE-2013-3018The AXIS webapp in deploy-tomcat/axis in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 and 7.2.0 through 7.2.1.4 allows
- CVE-2013-3023IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 and 7.2.0 through 7.2.1.4 might allow remote attackers to obtain sensitive
- CVE-2013-3024IBM WebSphere Application Server (WAS) 8.5 through 8.5.0.2 on UNIX allows local users to gain privileges by leveraging improper process init
- CVE-2018-5674This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF b
- CVE-2018-5675This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF b
- CVE-2018-5676This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF b
- CVE-2018-5677This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF b
- CVE-2018-5678This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF b
- CVE-2018-5679This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF b
- CVE-2018-5680This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF b
- CVE-2018-7406An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1.
- CVE-2018-7407An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1.
- CVE-2017-14187A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below veFortinet FortiOS
- CVE-2017-9664In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker ICS-CERT ABB SREA-01 and SREA-50
- CVE-2018-11416jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial
- CVE-2018-11418An issue was discovered in JerryScript 1.0.
- CVE-2018-11419An issue was discovered in JerryScript 1.0.
- CVE-2018-7518In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, an attacker with network access to the intICS-CERT BeaconMedæs TotalAlert Scroll Medical A…
- CVE-2018-7526In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, by accessing a specific uniform resource l
- CVE-2018-11415SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs.
- CVE-2018-11412In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrusted length value in ce
- CVE-2018-11413An issue was discovered in BearAdmin 0.5.
- CVE-2018-11414An issue was discovered in BearAdmin 0.5.
- CVE-2018-10593A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access tBecton, Dickinson and Company Kiestra and InoqulA systems
- CVE-2018-10595A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Becton, Dickinson and Company Kiestra and InoqulA systems
- CVE-2018-11332Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab under configurations in ClipperCMS 1.3.3 al
- CVE-2018-8013In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the claApache Software Foundation Apache Batik · org.apache.xmlgra…
- CVE-2017-17158Some Huawei smart phones with the versions before Berlin-L21HNC185B381; the versions before Prague-AL00AC00B223; the versions before Prague-Huawei Technologies Co. Berlin-L21HN; Prague-AL00A; Prague-…
- CVE-2017-17315Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V6Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2018-5485NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a vulnerability which could lead to a privilege escNetApp OnCommand Unified Manager for Windows
- CVE-2018-5487NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation (JMX RMNetApp OnCommand Unified Manager for Linux
- CVE-2018-7902Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability.Huawei Technologies Co. 1288H V5; 2288H
- CVE-2018-7903Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability.Huawei Technologies Co. 1288H V5; 2288H
- CVE-2018-7904Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability.Huawei Technologies Co. 1288H V5; 2288H
- CVE-2018-7942The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability.Huawei Technologies Co. 1288H V5; 2288H V5; 2488 V5; CH121…
- CVE-2017-9421Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf
- CVE-2018-1000036In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) vi
- CVE-2018-1000037In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service (assert
- CVE-2018-1000038In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf-cmap.c could allow an attacker to e
- CVE-2018-1000039In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code,
- CVE-2018-1000040In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of
- CVE-2018-1000155OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID (DataPath
- CVE-2018-1000199The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibl
- CVE-2018-1000300curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and
- CVE-2018-9920Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a modified hostname in an https://*/Identity/STS/F
- CVE-2018-11411The transferFrom function of a smart contract implementation for DimonCoin (FUD), an Ethereum ERC20 token, allows attackers to steal assets
- CVE-2018-11403DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.
- CVE-2018-11404DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.
- CVE-2018-11405Kliqqi 2.0.2 has CSRF in admin/admin_users.php.
- CVE-2018-11410An issue was discovered in Liblouis 3.5.0.
- CVE-2018-11399SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive inform
- CVE-2018-11400In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker
- CVE-2018-11401In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximate attacker does not cause a no
- CVE-2018-11402SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN.