Archive

May 2018

Vulnerabilities first published in this month (UTC), newest first.

← April 2018 2018 / May June 2018 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 5.5

CVE-2018-3639 Public exploit EPSS 60%

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…

Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine

May 22, 2018
Medium 4.7

CVE-2018-1263 Public exploit

spring-integration-zip Arbitrary File Write

Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cp…

Pivotal Spring Integration Zip org.springframework.integration:spring-integration-zip Maven

May 15, 2018
Medium 5.3

CVE-2018-1313 Public exploit

Improper Access Control in Apache Derby

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Secur…

Apache Software Foundation Apache Derby org.apache.derby:derby derby Debian Ubuntu Maven

May 7, 2018