CVEs published May 26, 2018
17 CVEs were published on May 26, 2018: 0 critical, 0 high.
- Published
- 17
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- opencart/opencart
- 2
Medium, low and unrated 17
- CVE-2018-11505The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat output.
- CVE-2018-6409An issue was discovered in Appnitro MachForm before 4.2.3.
- CVE-2018-6410An issue was discovered in Appnitro MachForm before 4.2.3.
- CVE-2018-6411An issue was discovered in Appnitro MachForm before 4.2.3.
- CVE-2018-11500An issue was discovered in PublicCMS V4.0.20180210.
- CVE-2018-11501PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.
- CVE-2018-11503The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based b
- CVE-2018-11504The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffe
- CVE-2018-11494The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that aopencart/opencart
- CVE-2018-11495OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?rouopencart/opencart
- CVE-2018-11496In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c, because decompress_file in lrzip.c lacks certain
- CVE-2018-11498In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was renamed), there is an unchecked buffer size during a memcpy in the Li
- CVE-2018-11499A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged
- CVE-2018-11489The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-bas
- CVE-2018-11493An issue was discovered in WUZHI CMS 4.1.0.
- CVE-2018-11487PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php.
- CVE-2018-11490The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-bas