Archive

10 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /10 June 2018 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 4.2

CVE-2018-1115

postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() fun…

postgresql15 postgresql-10 postgresql14 postgresql Ubuntu Alpine

May 10, 2018
Medium 5.5

CVE-2018-1130

Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/d…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 10, 2018
Medium 6.5

CVE-2018-8915

Cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote au…

Synology Calendar

May 10, 2018
Medium 6.5

CVE-2018-8910

Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authe…

Synology Drive

May 10, 2018
Medium 6.1

CVE-2017-2601

Cross-site Scripting in Jenkins

Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353). Users with the permission to configure jobs were able to inject JavaScript into parameter names and descriptions.

org.jenkins-ci.main:jenkins-core Web / CMS Maven

May 10, 2018