Skip to content
OpenAdvisories

Archive

May 2018

Vulnerabilities first published in this month (UTC), newest first.

← April 2018 2018 / May June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

129 results · Clear filters · Feed

  • High 7.5
    CVE-2018-8145 Public exploit EPSS 67%

    ChakraCore information disclosure vulnerability

    An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vuln…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.0
    CVE-2018-8120 Exploited · Ransomware Public exploit EPSS 73%

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

    Microsoft Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows
    KEV Mar 15, 2022
  • High 7.5
    CVE-2018-8133 Public exploit EPSS 50%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8177 EPSS 11%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-0…

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2018-1089

    389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters need…

    389-ds-base 389-ds-base Debian Ubuntu
  • High 7.5
    CVE-2018-1000168 EPSS 11%

    nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC f…

    nodejs nghttp2 nghttp2 Debian Ubuntu Alpine
  • High 8.1
    CVE-2018-1256

    Issuer validation regression in Spring Cloud SSO Connector

    Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to the SSO service. In PCF deployments with multiple SSO service plans, a remote attacker can authenticate to unbound reso…

    Pivotal Spring Cloud SSO Connector io.pivotal.spring.cloud:spring-cloud-sso-connector Maven
  • High 7.4
    CVE-2013-2233

    Ansible fails to cache SSH host keys

    Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.

    ansible ansible ansible Debian Ubuntu PyPI
  • High 7.5
    CVE-2018-10657

    Matrix Synapse DoS

    Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federation_base.py and handlers/message.py, as exploited in the wild in April 2018.

    matrix-synapse matrix-synapse Ubuntu PyPI