İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2018: sömürülen ve yeni ciddi CVE kayıtları

93 kayıt · 7 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2017-17020
    39İzleyin

    On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and DCS-5020L devices with

    YüksekCVSS 8,8Kavram kanıtıEPSS %14

    dlink · dcs-5009 firmware1 May 2018

  • CVE-2018-10583
    60Bu hafta

    An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate

    YüksekCVSS 7,5SilahlaştırılmışEPSS %78

    libreoffice · libreoffice1 May 2018

  • CVE-2016-10036
    47Planlayın

    Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbit

    KritikCVSS 9,8Kavram kanıtıEPSS %25

    jfrog · artifactory1 May 2018

  • CVE-2018-8115
    44Planlayın

    A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to properly validate input w

    YüksekCVSS 8,6Kavram kanıtıEPSS %34

    microsoft · windows host compute service shim2 May 2018

  • CVE-2018-0258
    53Planlayın

    A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary f

    KritikCVSS 9,8İstismar yokEPSS %47

    cisco · prime data center network manager2 May 2018

  • CVE-2018-10718
    49Planlayın

    Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute a

    KritikCVSS 10,0Kavram kanıtıEPSS %31

    activision · call of duty modern warfare 23 May 2018

  • CVE-2018-10561
    97Hemen

    An issue was discovered on Dasan GPON home routers.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %92

    dasannetworks · gpon router firmware3 May 2018

  • CVE-2018-10562
    99Hemen

    An issue was discovered on Dasan GPON home routers.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    dasannetworks · gpon router firmware3 May 2018

  • CVE-2018-0494
    31İzleyin

    GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation

    OrtaCVSS 6,5Kavram kanıtıEPSS %16

    gnu · wget6 May 2018

  • CVE-2018-1247
    33İzleyin

    RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability.

    YüksekCVSS 7,1Kavram kanıtıEPSS %15

    rsa · authentication manager8 May 2018

  • CVE-2018-1000168
    33İzleyin

    nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that ca

    YüksekCVSS 7,5İstismar yokEPSS %10

    nghttp2 · nghttp28 May 2018

  • CVE-2018-8897
    40Planlayın

    A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the

    YüksekCVSS 7,8SilahlaştırılmışEPSS %18

    debian · debian linux8 May 2018

  • CVE-2015-1503
    47Planlayın

    Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) ..

    YüksekCVSS 7,5Kavram kanıtıEPSS %57

    icewarp · mail server8 May 2018

  • CVE-2018-0824
    87Hemen

    A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Micros

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %73

    microsoft · windows 10 15079 May 2018

  • CVE-2018-0943
    35İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge9 May 2018

  • CVE-2018-0945
    35İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge9 May 2018

  • CVE-2018-0946
    45Planlayın

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin

    YüksekCVSS 7,5Kavram kanıtıEPSS %51

    microsoft · edge9 May 2018

  • CVE-2018-0951
    35İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge9 May 2018

  • CVE-2018-0953
    50Planlayın

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin

    YüksekCVSS 7,5Kavram kanıtıEPSS %66

    microsoft · edge9 May 2018

  • CVE-2018-0954
    35İzleyin

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge9 May 2018

  • CVE-2018-0955
    35İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · internet explorer9 May 2018

  • CVE-2018-1022
    35İzleyin

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge9 May 2018

  • CVE-2018-8114
    35İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · internet explorer9 May 2018

  • CVE-2018-8120
    80Hemen

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k

    YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %73

    microsoft · windows 79 May 2018

  • CVE-2018-8122
    35İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · internet explorer9 May 2018

  • CVE-2018-8128
    35İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge9 May 2018

  • CVE-2018-8130
    35İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge9 May 2018

  • CVE-2018-8133
    45Planlayın

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5Kavram kanıtıEPSS %50

    microsoft · edge9 May 2018

  • CVE-2018-8136
    38İzleyin

    A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution Vulnerabi

    YüksekCVSS 7,8İstismar yokEPSS %23

    microsoft · windows 109 May 2018

  • CVE-2018-8137
    35İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge9 May 2018

  • CVE-2018-8139
    50Planlayın

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin

    YüksekCVSS 7,5Kavram kanıtıEPSS %66

    microsoft · edge9 May 2018

  • CVE-2018-8145
    50Planlayın

    An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker

    YüksekCVSS 7,5Kavram kanıtıEPSS %66

    microsoft · chakracore9 May 2018

  • CVE-2018-8147
    38İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %24

    microsoft · excel9 May 2018

  • CVE-2018-8148
    38İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %24

    microsoft · excel9 May 2018

  • CVE-2018-8154
    46Planlayın

    A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, ak

    KritikCVSS 9,8İstismar yokEPSS %23

    microsoft · exchange server9 May 2018

  • CVE-2018-8157
    38İzleyin

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %24

    microsoft · office9 May 2018

  • CVE-2018-8158
    38İzleyin

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %24

    microsoft · office9 May 2018

  • CVE-2018-8161
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %21

    microsoft · office9 May 2018

  • CVE-2018-8162
    38İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %24

    microsoft · excel9 May 2018

  • CVE-2018-8163
    26İzleyin

    An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In

    OrtaCVSS 5,5İstismar yokEPSS %12

    microsoft · excel9 May 2018

  • CVE-2018-8173
    37İzleyin

    A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects in memory, aka "Micros

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · infopath9 May 2018

  • CVE-2018-8174
    86Hemen

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %88

    microsoft · windows 10 16079 May 2018

  • CVE-2018-8177
    33İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge9 May 2018

  • CVE-2018-8178
    35İzleyin

    A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corr

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge9 May 2018

  • CVE-2018-8179
    34İzleyin

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · edge9 May 2018

  • CVE-2018-10942
    43Planlayın

    modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attacke

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    prestashop · prestashop9 May 2018

  • CVE-2018-10655
    36İzleyin

    DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH).

    YüksekCVSS 7,8Kavram kanıtıEPSS %15

    devicelock · plug and play auditor10 May 2018

  • CVE-2018-1260
    42Planlayın

    Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versio

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    pivotal software · spring security oauth11 May 2018

  • CVE-2018-6361
    35İzleyin

    Easy Hosting Control Panel (EHCP) v0.37.12.b has XSS via the op parameter, as demonstrated by adding a backdoor FTP account.

    OrtaCVSS 6,1İstismar yokEPSS %37

    ehcp · easy hosting control panel11 May 2018

  • CVE-2018-5230
    35İzleyin

    The issue collector in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4

    OrtaCVSS 6,1Kavram kanıtıEPSS %37

    atlassian · jira14 May 2018

  • CVE-2017-12128
    42Planlayın

    An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317.

    YüksekCVSS 7,5İstismar yokEPSS %40

    moxa · edr-810 firmware14 May 2018

  • CVE-2018-11094
    49Planlayın

    An issue was discovered on Intelbras NCLOUD 300 1.0 devices.

    KritikCVSS 9,8Kavram kanıtıEPSS %33

    intelbras · ncloud 300 firmware15 May 2018

  • CVE-2018-10123
    38İzleyin

    p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100.

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    intenogroup · iopsys firmware16 May 2018

  • CVE-2018-10735
    41Planlayın

    A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter.

    YüksekCVSS 7,2Kavram kanıtıEPSS %42

    nagios · nagios xi16 May 2018

  • CVE-2018-10736
    41Planlayın

    A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter.

    YüksekCVSS 7,2Kavram kanıtıEPSS %42

    nagios · nagios xi16 May 2018

  • CVE-2018-10737
    41Planlayın

    A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter.

    YüksekCVSS 7,2Kavram kanıtıEPSS %42

    nagios · nagios xi16 May 2018

  • CVE-2018-10738
    41Planlayın

    A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php chbKey1 parameter.

    YüksekCVSS 7,2Kavram kanıtıEPSS %42

    nagios · nagios xi16 May 2018

  • CVE-2018-8014
    45Planlayın

    The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.8

    KritikCVSS 9,8İstismar yokEPSS %21

    apache · tomcat16 May 2018

  • CVE-2018-9948
    60Bu hafta

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935.

    OrtaCVSS 6,5SilahlaştırılmışEPSS %63

    foxitsoftware · foxit reader17 May 2018

  • CVE-2018-9958
    60Bu hafta

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %62

    foxitsoftware · foxit reader17 May 2018

  • CVE-2018-1111
    59Planlayın

    DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager i

    YüksekCVSS 7,5SilahlaştırılmışEPSS %97

    fedoraproject · fedora17 May 2018

  • CVE-2018-11130
    38İzleyin

    The header::add_FORMAT_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-

    YüksekCVSS 7,8İstismar yokEPSS %22

    vcftools project · vcftools17 May 2018

  • CVE-2018-9250
    44Planlayın

    interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlist

    YüksekCVSS 8,8İstismar yokEPSS %31

    open-emr · openemr18 May 2018

  • CVE-2018-4917
    44Planlayın

    Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable hea

    KritikCVSS 9,8İstismar yokEPSS %17

    adobe · acrobat 201719 May 2018

  • CVE-2018-4918
    43Planlayın

    Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable out

    KritikCVSS 9,8İstismar yokEPSS %11

    adobe · acrobat19 May 2018

  • CVE-2018-4924
    43Planlayın

    Adobe Dreamweaver CC versions 18.0 and earlier have an OS Command Injection vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %14

    adobe · dreamweaver19 May 2018

  • CVE-2018-4934
    32İzleyin

    Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability.

    OrtaCVSS 6,5Kavram kanıtıEPSS %19

    adobe · flash player desktop runtime19 May 2018

  • CVE-2018-4935
    43Planlayın

    Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability.

    YüksekCVSS 8,8Kavram kanıtıEPSS %25

    adobe · flash player desktop runtime19 May 2018

  • CVE-2018-4936
    33İzleyin

    Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability.

    OrtaCVSS 6,5Kavram kanıtıEPSS %24

    adobe · flash player desktop runtime19 May 2018

  • CVE-2018-4937
    43Planlayın

    Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability.

    YüksekCVSS 8,8Kavram kanıtıEPSS %25

    adobe · flash player desktop runtime19 May 2018

  • CVE-2018-4939
    88Hemen

    Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untruste

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %61

    adobe · coldfusion19 May 2018

  • CVE-2018-11311
    41Planlayın

    A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FT

    KritikCVSS 9,1Kavram kanıtıEPSS %15

    myscada · mypro20 May 2018

  • CVE-2018-3639
    40Planlayın

    Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior mem

    OrtaCVSS 5,5Kavram kanıtıEPSS %60

    intel · atom c22 May 2018

  • CVE-2018-10094
    60Bu hafta

    SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer

    KritikCVSS 9,8SilahlaştırılmışEPSS %69

    dolibarr · dolibarr22 May 2018

  • CVE-2018-10095
    50Planlayın

    Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the for

    OrtaCVSS 6,1Kavram kanıtıEPSS %86

    dolibarr · dolibarr22 May 2018

  • CVE-2018-8176
    42Planlayın

    A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka

    YüksekCVSS 8,8İstismar yokEPSS %23

    microsoft · office for mac23 May 2018

  • CVE-2018-10354
    39İzleyin

    A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to exec

    YüksekCVSS 8,8İstismar yokEPSS %12

    trendmicro · email encryption gateway23 May 2018

  • CVE-2018-10357
    54Planlayın

    A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code

    YüksekCVSS 8,8İstismar yokEPSS %64

    trendmicro · endpoint application control23 May 2018

  • CVE-2018-8898
    43Planlayın

    A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B012" FWVer="3.10.0.24

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    dlink · dsl-3782 firmware23 May 2018

  • CVE-2018-8013
    45Planlayın

    In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the cla

    KritikCVSS 9,8İstismar yokEPSS %18

    apache · batik24 May 2018

  • CVE-2018-11412
    28İzleyin

    In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrusted length value in ce

    OrtaCVSS 5,9Kavram kanıtıEPSS %15

    linux · linux kernel24 May 2018

  • CVE-2018-1133
    44Planlayın

    An issue was discovered in Moodle 3.x.

    YüksekCVSS 8,8Kavram kanıtıEPSS %31

    moodle · moodle25 May 2018

  • CVE-2018-10350
    39İzleyin

    A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to

    YüksekCVSS 8,8İstismar yokEPSS %14

    trendmicro · smart protection server25 May 2018

  • CVE-2018-11479
    40Planlayın

    The VPN component in Windscribe 1.81 uses the OpenVPN client for connections.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %9

    windscribe · windscribe25 May 2018

  • CVE-2018-6409
    25İzleyin

    An issue was discovered in Appnitro MachForm before 4.2.3.

    OrtaCVSS 5,3Kavram kanıtıEPSS %14

    machform · machform26 May 2018

  • CVE-2018-1235
    52Planlayın

    Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    emc · recoverpoint29 May 2018

  • CVE-2018-10466
    44Planlayın

    Zoho ManageEngine ADAudit Plus before 5.0.0 build 5100 allows blind SQL Injection.

    KritikCVSS 9,8İstismar yokEPSS %16

    zohocorp · manageengine adaudit plus29 May 2018

  • CVE-2018-11235
    45Planlayın

    In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can

    YüksekCVSS 7,8Kavram kanıtıEPSS %48

    debian · debian linux30 May 2018

  • CVE-2018-11220
    40Planlayın

    Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function.

    YüksekCVSS 8,8Kavram kanıtıEPSS %15

    bitmain · antminer d3 firmware31 May 2018

  • CVE-2018-11132
    40Planlayın

    In order to perform actions that require higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue tha

    YüksekCVSS 8,8İstismar yokEPSS %18

    quest · kace system management appliance31 May 2018

  • CVE-2018-11138
    97Hemen

    The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %91

    quest · kace system management appliance31 May 2018

  • CVE-2018-11139
    48Planlayın

    The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated

    YüksekCVSS 8,8İstismar yokEPSS %42

    quest · kace system management appliance31 May 2018

  • CVE-2016-10542
    60Bu hafta

    ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455".

    YüksekCVSS 7,5SilahlaştırılmışEPSS %7

    ws project · ws31 May 2018