Skip to content
OpenAdvisories

Archive

May 2018

Vulnerabilities first published in this month (UTC), newest first.

← April 2018 2018 / May June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High —
    CVE-2015-9238 Public exploit

    Insecure Comparison in secure-compare

    secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length.

    HackerOne secure-compare node module secure-compare npm
  • High —
    CVE-2016-10542 Public exploit

    DoS due to excessively large websocket message in ws

    ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws …

    HackerOne ws node module ws node-ws Debian Ubuntu npm
  • High 8.8
    CVE-2018-1133 Public exploit EPSS 31%

    Moodle calculated question type allows remote code execution by Question authors

    An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • High 7.3
    CVE-2018-1122 Public exploit

    procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unse…

    [UNKNOWN] procps-ng, procps procps procps Debian Ubuntu
  • High 7.3
    CVE-2018-1124 Public exploit

    procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec…

    [UNKNOWN] procps-ng procps procps Debian Ubuntu
  • High 7.5
    CVE-2018-1111 Public exploit EPSS 98%

    DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in…

    Red Hat Fedora dhcp dhcp
  • High 7.5
    CVE-2018-1259 Public exploit

    Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references

    Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying li…

    Pivotal Spring Data Commons org.springframework.data:spring-data-commons Maven
  • High 7.5
    CVE-2018-0946 Public exploit EPSS 51%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-0824 Exploited Public exploit EPSS 73%

    A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized…

    KEV Aug 5, 2024
  • High 7.5
    CVE-2018-8139 Public exploit EPSS 66%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8174 Exploited · Ransomware Public exploit EPSS 88%

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

    Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows
    KEV Feb 15, 2022
  • High 7.5
    CVE-2018-8145 Public exploit EPSS 67%

    ChakraCore information disclosure vulnerability

    An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vuln…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.0
    CVE-2018-8120 Exploited · Ransomware Public exploit EPSS 73%

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

    Microsoft Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows
    KEV Mar 15, 2022
  • High 7.5
    CVE-2018-8133 Public exploit EPSS 50%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet