# CVEs published 2018-05-28

11 CVEs were published on May 28, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-10732](https://cve.now/CVE-2018-10732.md): The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) be (no CVSS)
- [CVE-2018-11309](https://cve.now/CVE-2018-11309.md): Blind SQL injection in coupon\_code in the MemberMouse plugin 2.2.8 and prior for WordPress allows an unauthenticated attacker to dump the Wo (no CVSS)
- [CVE-2018-11430](https://cve.now/CVE-2018-11430.md): An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. (no CVSS)
- [CVE-2018-11516](https://cve.now/CVE-2018-11516.md): The vlc\_demux\_chained\_Delete function in input/demux\_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial (no CVSS)
- [CVE-2018-11517](https://cve.now/CVE-2018-11517.md): mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 87 (no CVSS)
- [CVE-2018-11514](https://cve.now/CVE-2018-11514.md): PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in edit\_resume\_det.php, as dem (no CVSS)
- [CVE-2018-11515](https://cve.now/CVE-2018-11515.md): The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter. (no CVSS)
- [CVE-2018-11508](https://cve.now/CVE-2018-11508.md): The compat\_get\_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from k (no CVSS)
- [CVE-2018-11512](https://cve.now/CVE-2018-11512.md): Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creat (no CVSS)
- [CVE-2018-11506](https://cve.now/CVE-2018-11506.md): The sr\_do\_ioctl function in drivers/scsi/sr\_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (sta (no CVSS)
- [CVE-2018-11507](https://cve.now/CVE-2018-11507.md): An issue was discovered in Free Lossless Image Format (FLIF) 0.3. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-05-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.