Skip to content
OpenAdvisories

Archive

31 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /31 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High —
    CVE-2015-9238 Public exploit

    Insecure Comparison in secure-compare

    secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length.

    HackerOne secure-compare node module secure-compare npm
  • Unscored —
    CVE-2018-11631 Public exploit

    Rondaful M1 Wristband Smart Band 1 devices allow remote attackers to send an arbitrary number of call or SMS notificati…

  • High —
    CVE-2016-10542 Public exploit

    DoS due to excessively large websocket message in ws

    ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws …

    HackerOne ws node module ws node-ws Debian Ubuntu npm
  • Critical —
    CVE-2016-10555 Public exploit

    Forgeable Public/Private Tokens in jwt-simple

    Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent to the server. If the server is expecting RSA but is sent HMAC-SHA with RSA's public key, the server will think the publ…

    HackerOne jwt-simple node module jwt-simple npm
  • Critical 9.8
    CVE-2018-11138 Exploited · Ransomware Public exploit Scanner template EPSS 92%

    The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible b…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2018-11220 Public exploit EPSS 15%

    Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function.