# CVEs published 2018-05-31 101 CVEs were published on May 31, 2018: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2018-6552](https://cve.now/CVE-2018-6552.md): Apport treats the container PID as the global PID when /proc/\/ is missing (no CVSS, Apport) - [CVE-2018-9186](https://cve.now/CVE-2018-9186.md): A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page a (no CVSS, Fortinet FortiAuthenticator) - [CVE-2018-10379](https://cve.now/CVE-2018-10379.md): An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before (no CVSS) - [CVE-2018-1496](https://cve.now/CVE-2018-1496.md): IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Content Navigator) - [CVE-2018-1532](https://cve.now/CVE-2018-1532.md): IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID (CVSS 4.3, IBM API Connect) - [CVE-2014-10064](https://cve.now/CVE-2014-10064.md): The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply ne (no CVSS, HackerOne qs node module · qs) - [CVE-2014-10065](https://cve.now/CVE-2014-10065.md): Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for (no CVSS, HackerOne remarkable node module · remarkable) - [CVE-2014-10066](https://cve.now/CVE-2014-10066.md): Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. (no CVSS, HackerOne fancy-server node module · fancy-server) - [CVE-2015-9236](https://cve.now/CVE-2015-9236.md): Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at w (no CVSS, HackerOne hapi node module · hapi) - [CVE-2015-9238](https://cve.now/CVE-2015-9238.md): secure-compare 3.0.0 and below do not actually compare two strings properly. (no CVSS, HackerOne secure-compare node module · secure-compare) - [CVE-2015-9239](https://cve.now/CVE-2015-9239.md): ansi2html is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in. (no CVSS, HackerOne ansi2html node module · ansi2html) - [CVE-2016-10518](https://cve.now/CVE-2016-10518.md): A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping (no CVSS, HackerOne ws node module · ws) - [CVE-2016-10519](https://cve.now/CVE-2016-10519.md): A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and (no CVSS, HackerOne bittorrent-dht node module · bittorrent-dht) - [CVE-2016-10520](https://cve.now/CVE-2016-10520.md): jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in. (no CVSS, HackerOne jadedown node module · jadedown) - [CVE-2016-10521](https://cve.now/CVE-2016-10521.md): jshamcrest is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in to the emailAddress v (no CVSS, HackerOne jshamcrest node module · jshamcrest) - [CVE-2016-10523](https://cve.now/CVE-2016-10523.md): MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible wit (no CVSS, HackerOne mqtt-packet node module · mqtt-packet) - [CVE-2016-10524](https://cve.now/CVE-2016-10524.md): i18n-node-angular is a module used to interact between i18n and angular without using additional resources. (no CVSS, HackerOne i18n-node-angular node module · i18n-node-angular) - [CVE-2016-10526](https://cve.now/CVE-2016-10526.md): A common setup to deploy to gh-pages on every commit via a CI system is to expose a github token to ENV and to use it directly in the auth p (no CVSS, HackerOne grunt-gh-pages node module · grunt-gh-pages) - [CVE-2016-10527](https://cve.now/CVE-2016-10527.md): The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable under certain conditions (no CVSS, HackerOne riot-compiler node module · riot-compiler) - [CVE-2016-10528](https://cve.now/CVE-2016-10528.md): restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. (no CVSS, HackerOne restafary node module · restafary) - [CVE-2016-10529](https://cve.now/CVE-2016-10529.md): Droppy versions \<3.5.0 does not perform any verification for cross-domain websocket requests. (no CVSS, HackerOne droppy node module · droppy) - [CVE-2016-10530](https://cve.now/CVE-2016-10530.md): The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. (no CVSS, HackerOne airbrake node module · airbrake) - [CVE-2016-10531](https://cve.now/CVE-2016-10531.md): marked is an application that is meant to parse and compile markdown. (no CVSS, HackerOne marked node module · marked) - [CVE-2016-10532](https://cve.now/CVE-2016-10532.md): console-io is a module that allows users to implement a web console in their application. (no CVSS, HackerOne console-io node module · console-io) - [CVE-2016-10533](https://cve.now/CVE-2016-10533.md): express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. (no CVSS, HackerOne express-restify-mongoose node module · express-re…) - [CVE-2016-10534](https://cve.now/CVE-2016-10534.md): electron-packager is a command line tool that packages Electron source code into \`.app\` and \`.exe\` packages. (no CVSS, HackerOne electron-packager node module · electron-packager) - [CVE-2016-10535](https://cve.now/CVE-2016-10535.md): csrf-lite is a cross-site request forgery protection library for framework-less node sites. (no CVSS, HackerOne csrf-lite node module · csrf-lite) - [CVE-2016-10536](https://cve.now/CVE-2016-10536.md): engine.io-client is the client for engine.io, the implementation of a transport-based cross-browser/cross-device bi-directional communicatio (no CVSS, HackerOne engine.io-client node module · engine.io-client) - [CVE-2016-10537](https://cve.now/CVE-2016-10537.md): backbone is a module that adds in structure to a JavaScript heavy application through key-value pairs and custom events connecting to your R (no CVSS, HackerOne backbone node module · backbone) - [CVE-2016-10538](https://cve.now/CVE-2016-10538.md): The package \`node-cli\` before 1.0.0 insecurely uses the lock\_file and log\_file. (no CVSS, HackerOne cli node module · cli) - [CVE-2016-10539](https://cve.now/CVE-2016-10539.md): negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. (no CVSS, HackerOne negotiator node module · negotiator) - [CVE-2016-10540](https://cve.now/CVE-2016-10540.md): Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript \`RegExp\` objects. (no CVSS, HackerOne minimatch node module · minimatch) - [CVE-2016-10541](https://cve.now/CVE-2016-10541.md): The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape "\>" and "\<" operator used for redirection in shell. (no CVSS, HackerOne shell-quote node module · shell-quote) - [CVE-2016-10542](https://cve.now/CVE-2016-10542.md): ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". (no CVSS, HackerOne ws node module · ws) - [CVE-2016-10543](https://cve.now/CVE-2016-10543.md): call is an HTTP router that is primarily used by the hapi framework. (no CVSS, HackerOne call node module · call) - [CVE-2016-10544](https://cve.now/CVE-2016-10544.md): uws is a WebSocket server library. (no CVSS, HackerOne uws node module · uws) - [CVE-2016-10546](https://cve.now/CVE-2016-10546.md): An arbitrary code injection vector was found in PouchDB 6.0.4 and lesser via the map/reduce functions used in PouchDB temporary views and de (no CVSS, HackerOne pouchdb node module · pouchdb) - [CVE-2016-10547](https://cve.now/CVE-2016-10547.md): Nunjucks is a full featured templating engine for JavaScript. (no CVSS, HackerOne nunjucks node module · nunjucks) - [CVE-2016-10548](https://cve.now/CVE-2016-10548.md): Arbitrary code execution is possible in reduce-css-calc node module \<=1.2.4 through crafted css. (no CVSS, HackerOne reduce-css-calc node module · reduce-css-calc) - [CVE-2016-10549](https://cve.now/CVE-2016-10549.md): Sails is an MVC style framework for building realtime web applications. (no CVSS, HackerOne sails node module · sails) - [CVE-2016-10550](https://cve.now/CVE-2016-10550.md): sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server i (no CVSS, HackerOne sequelize node module · sequelize) - [CVE-2016-10552](https://cve.now/CVE-2016-10552.md): igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol. (no CVSS, HackerOne igniteui node module · igniteui) - [CVE-2016-10553](https://cve.now/CVE-2016-10553.md): sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server i (no CVSS, HackerOne sequelize node module · sequelize) - [CVE-2016-10554](https://cve.now/CVE-2016-10554.md): sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server i (no CVSS, HackerOne sequelize node module · sequelize) - [CVE-2016-10555](https://cve.now/CVE-2016-10555.md): Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent t (no CVSS, HackerOne jwt-simple node module · jwt-simple) - [CVE-2016-10557](https://cve.now/CVE-2016-10557.md): appium-chromedriver is a Node.js wrapper around Chromedriver. (no CVSS, HackerOne appium-chromedriver node module · appium-chromedr…) - [CVE-2016-10560](https://cve.now/CVE-2016-10560.md): galenframework-cli is the node wrapper for the Galen Framework. (no CVSS, HackerOne galenframework-cli node module · galenframework-c…) - [CVE-2016-10561](https://cve.now/CVE-2016-10561.md): Bitty is a development web server tool that functions similar to \`python -m SimpleHTTPServer\`. (no CVSS, HackerOne bitty node module · bitty) - [CVE-2016-10562](https://cve.now/CVE-2016-10562.md): iedriver is an NPM wrapper for Selenium IEDriver. (no CVSS, HackerOne iedriver node module · iedriver) - [CVE-2016-10563](https://cve.now/CVE-2016-10563.md): During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. (no CVSS, HackerOne go-ipfs-dep node module · go-ipfs-dep) - [CVE-2016-10564](https://cve.now/CVE-2016-10564.md): apk-parser is a tool to extract Android Manifest info from an APK file. (no CVSS, HackerOne apk-parser node module · apk-parser) - [CVE-2016-10565](https://cve.now/CVE-2016-10565.md): operadriver is a Opera Driver for Selenium. (no CVSS, HackerOne operadriver node module · operadriver) - [CVE-2016-10569](https://cve.now/CVE-2016-10569.md): embedza is a module to create HTML snippets/embeds from URLs using info from oEmbed, Open Graph, meta tags. (no CVSS, HackerOne embedza node module · embedza) - [CVE-2016-10571](https://cve.now/CVE-2016-10571.md): bkjs-wand is imagemagick wand support for node.js and backendjs bkjs-wand versions lower than 0.3.2 download binary resources over HTTP, whi (no CVSS, HackerOne bkjs-wand node module · bkjs-wand) - [CVE-2016-10572](https://cve.now/CVE-2016-10572.md): mongodb-instance before 0.0.3 installs mongodb locally. (no CVSS, HackerOne mongodb-instance node module · mongodb-instance) - [CVE-2018-11631](https://cve.now/CVE-2018-11631.md): Rondaful M1 Wristband Smart Band 1 devices allow remote attackers to send an arbitrary number of call or SMS notifications via crafted Bluet (no CVSS) - [CVE-2018-11632](https://cve.now/CVE-2018-11632.md): An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber plugin 1.0.8 for WordPress. (no CVSS) - [CVE-2018-11633](https://cve.now/CVE-2018-11633.md): An issue was discovered in the MULTIDOTS Woo Checkout for Digital Goods plugin 2.1 for WordPress. (no CVSS) - [CVE-2018-11627](https://cve.now/CVE-2018-11627.md): Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception. (no CVSS, sinatra) - [CVE-2018-11132](https://cve.now/CVE-2018-11132.md): In order to perform actions that require higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue tha (no CVSS) - [CVE-2018-11133](https://cve.now/CVE-2018-11133.md): The 'fmt' parameter of the '/common/run\_cross\_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to (no CVSS) - [CVE-2018-11134](https://cve.now/CVE-2018-11134.md): In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue ma (no CVSS) - [CVE-2018-11135](https://cve.now/CVE-2018-11135.md): The script '/adminui/error\_details.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP obje (no CVSS) - [CVE-2018-11136](https://cve.now/CVE-2018-11136.md): The 'orgID' parameter received by the '/common/download\_agent\_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is (no CVSS) - [CVE-2018-11137](https://cve.now/CVE-2018-11137.md): The 'checksum' parameter of the '/common/download\_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused (no CVSS) - [CVE-2018-11138](https://cve.now/CVE-2018-11138.md): The '/common/download\_agent\_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and (CVSS 9.8, KEV) - [CVE-2018-11139](https://cve.now/CVE-2018-11139.md): The '/common/ajax\_email\_connection\_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated (no CVSS) - [CVE-2018-11140](https://cve.now/CVE-2018-11140.md): The 'reportID' parameter received by the '/common/run\_report.php' script in the Quest KACE System Management Appliance 8.0.318 is not saniti (no CVSS) - [CVE-2018-11141](https://cve.now/CVE-2018-11141.md): The 'IMAGES\_JSON' and 'attachments\_to\_remove\[\]' parameters of the '/adminui/advisory.php' script in the Quest KACE System Management Virtual (no CVSS) - [CVE-2018-11142](https://cve.now/CVE-2018-11142.md): The 'systemui/settings\_network.php' and 'systemui/settings\_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are a (no CVSS) - [CVE-2018-11626](https://cve.now/CVE-2018-11626.md): SELA (aka SimplE Lossless Audio) v0.1.2-alpha has a stack-based buffer overflow in the core/apev2.c init\_apev2\_keys function. (no CVSS) - [CVE-2018-11590](https://cve.now/CVE-2018-11590.md): Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflo (no CVSS) - [CVE-2018-11591](https://cve.now/CVE-2018-11591.md): Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via a NULL pointer der (no CVSS) - [CVE-2018-11592](https://cve.now/CVE-2018-11592.md): Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via an Out-of-bounds R (no CVSS) - [CVE-2018-11593](https://cve.now/CVE-2018-11593.md): Espruino before 1.99 allows attackers to cause a denial of service (application crash) and potential Information Disclosure with a user craf (no CVSS) - [CVE-2018-11594](https://cve.now/CVE-2018-11594.md): Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow (no CVSS) - [CVE-2018-11595](https://cve.now/CVE-2018-11595.md): Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Escalation of Privileges with a user (no CVSS) - [CVE-2018-11596](https://cve.now/CVE-2018-11596.md): Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow (no CVSS) - [CVE-2018-11597](https://cve.now/CVE-2018-11597.md): Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow (no CVSS) - [CVE-2018-11598](https://cve.now/CVE-2018-11598.md): Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user craf (no CVSS) - [CVE-2018-11624](https://cve.now/CVE-2018-11624.md): In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file. (no CVSS) - [CVE-2018-11625](https://cve.now/CVE-2018-11625.md): In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted (no CVSS) - [CVE-2018-11220](https://cve.now/CVE-2018-11220.md): Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function. (no CVSS) - [CVE-2018-11036](https://cve.now/CVE-2018-11036.md): Ruckus SmartZone (formerly Virtual SmartCell Gateway or vSCG) 3.5.0, 3.5.1, 3.6.0, and 3.6.1 (Essentials and High Scale) on vSZ, SZ-100, SZ- (no CVSS) - [CVE-2018-9311](https://cve.now/CVE-2018-9311.md): The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a r (no CVSS) - [CVE-2018-9312](https://cve.now/CVE-2018-9312.md): The Head Unit HU\_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produ (no CVSS) - [CVE-2018-9313](https://cve.now/CVE-2018-9313.md): The Head Unit HU\_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produ (no CVSS) - [CVE-2018-9314](https://cve.now/CVE-2018-9314.md): The Head Unit HU\_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produ (no CVSS) - [CVE-2018-9318](https://cve.now/CVE-2018-9318.md): The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a r (no CVSS) - [CVE-2018-9320](https://cve.now/CVE-2018-9320.md): The Head Unit HU\_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produ (no CVSS) - [CVE-2018-9322](https://cve.now/CVE-2018-9322.md): The Head Unit HU\_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produ (no CVSS) - [CVE-2018-11583](https://cve.now/CVE-2018-11583.md): SeaCMS 6.61 has stored XSS in admin\_collect.php via the siteurl parameter. (no CVSS) - [CVE-2018-11579](https://cve.now/CVE-2018-11579.md): class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Se (no CVSS) - [CVE-2018-11580](https://cve.now/CVE-2018-11580.md): An issue was discovered in mass-pages-posts-creator.php in the MULTIDOTS Mass Pages/Posts Creator plugin 1.2.2 for WordPress. (no CVSS) - [CVE-2018-11571](https://cve.now/CVE-2018-11571.md): ClipperCMS 1.3.3 allows Session Fixation. (no CVSS) - [CVE-2018-11572](https://cve.now/CVE-2018-11572.md): ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules -\> Manage modules -\> edit" action to the manager/ URI. (no CVSS) - [CVE-2018-11575](https://cve.now/CVE-2018-11575.md): ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg. (no CVSS) - [CVE-2018-11576](https://cve.now/CVE-2018-11576.md): ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor. (no CVSS) - [CVE-2018-11577](https://cve.now/CVE-2018-11577.md): Liblouis 3.5.0 has a Segmentation fault in lou\_logPrint in logging.c. (no CVSS) - [CVE-2018-11578](https://cve.now/CVE-2018-11578.md): GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault. (no CVSS) - [CVE-2018-5388](https://cve.now/CVE-2018-5388.md): In stroke\_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exha (no CVSS, strongSwan) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-05-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.