Archive
May 2018
Vulnerabilities first published in this month (UTC), newest first.
1,164 results · Feed
-
High 7.0
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Mar 15, 2022 -
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —CVE-2018-8134 Public exploit
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…
-
Unscored —CVE-2018-8148 EPSS 24%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft…
-
Unscored —CVE-2018-8128 EPSS 16%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —CVE-2018-8178 EPSS 15%
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsof…
-
Unscored —CVE-2018-8114 EPSS 16%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handl…
-
Unscored —CVE-2018-8161 EPSS 21%
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle ob…
-
Unscored —
A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, ak…
-
Unscored —CVE-2018-8122 EPSS 16%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handl…
-
Unscored —
An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information …
-
Unscored —CVE-2018-8162 EPSS 24%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
High 7.5CVE-2018-8177 EPSS 11%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-0…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —CVE-2018-8163 EPSS 13%
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles…
-
Unscored —
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web…
-
Unscored —
A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI)…
-
Unscored —
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Wi…
-
Unscored —
A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly han…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Wi…
-
Unscored —
Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicio…
-
Unscored —CVE-2018-10828 Public exploit
An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and wr…
-
Unscored —
download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration (without a log…
-
Unscored —
The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attacker…
-
Unscored —
Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompati…
-
High 7.5
389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters need…
-
Unscored —
Simple Taxonomy Revision module enables revisions for taxonomy terms for Drupal 8. The security team is marking this mo…
-
Medium 6.5
Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows rem…
-
Medium 6.5
Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote…
-
Unscored —
A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches run…
-
Critical 9.8
An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on T…
-
Unscored —
An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm referen…
-
Unscored —
An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the max_frame_size se…