CVEs published May 30, 2018
30 CVEs were published on May 30, 2018: 0 critical, 0 high.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 30
- CVE-2018-11567Prior to 2018-04-27, the reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill.
- CVE-2018-11568Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated b
- CVE-2015-7610Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x befor
- CVE-2018-10196NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows r
- CVE-2018-10939Zimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7.11.Patch4 has Persistent XSS via a contact
- CVE-2018-11476An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices.
- CVE-2018-11477An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices.
- CVE-2018-11478An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices.
- CVE-2018-11481TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSO
- CVE-2018-11482/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0
- CVE-2018-11565Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already ta
- CVE-2018-7534In Stealth Authorization Server before 3.3.017.0 in Unisys Stealth Solution, an encryption key may be left in memory.
- CVE-2018-10995SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).
- CVE-2018-11518A vulnerability allows a phreaking attack on HCL legacy IVR systems that do not use VoIP.
- CVE-2018-11562An issue was discovered in MISP 2.4.91.
- CVE-2018-11432The mobi_parse_mobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-
- CVE-2018-11433The mobi_get_kf8boundary_seqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buf
- CVE-2018-11434The buffer_fill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-r
- CVE-2018-11435The mobi_decompress_huffman_internal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read
- CVE-2018-11436The buffer_addraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read)
- CVE-2018-11437The mobi_reconstruct_parts function in parse_rawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access vio
- CVE-2018-11438The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer
- CVE-2018-11439The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap
- CVE-2018-11233In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathn
- CVE-2018-11235In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can
- CVE-2018-11555tificc in Little CMS 2.9 has an out-of-bounds write in the PrecalculatedXFORM function in cmsxform.c in liblcms2.a via a crafted TIFF file.
- CVE-2018-11556tificc in Little CMS 2.9 has an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a via a crafte
- CVE-2018-11557YIBAN Easy class education platform 2.0 has XSS via the articlelist.php k parameter.
- CVE-2018-11558DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_first_name parameter.
- CVE-2018-11559DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_last_name parameter.