CVEs published in May 2018
6 tracked CVEs from 2 vendors had their first vendor advisory published in May 2018: 2 in CISA KEV. Newest first.
- Added
CVE-2018-8014Unrated
The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins
Apache · 1 advisory - Added
CVE-2018-8174UnratedCISA KEV
Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
MS Server · 1 advisory - Added
CVE-2018-8166Unrated
MS Server · 1 advisory - Added
CVE-2018-8164Unrated
MS Server · 1 advisory - Added
CVE-2018-8124Unrated
MS Server · 1 advisory - Added
CVE-2018-8120UnratedCISA KEV
Microsoft Win32k Privilege Escalation Vulnerability
MS Server · 1 advisory