Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-06-04 | CVE-2016-10641 | Cryptographic Issues vulnerability in Node-Bsdiff-Android Project Node-Bsdiff-Android node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks. | 8.1 |
| 2018-06-04 | CVE-2016-10640 | Cryptographic Issues vulnerability in Geohey Node-Thulac node-thulac is a node binding for thulac. | 8.1 |
| 2018-06-04 | CVE-2016-10639 | Cryptographic Issues vulnerability in Redis-Srvr Project Redis-Srvr redis-srvr is a npm wrapper for redis-server. | 8.1 |
| 2018-06-04 | CVE-2016-10638 | Cryptographic Issues vulnerability in Js-Given Project Js-Given js-given is a JavaScript frontend to jgiven. | 8.1 |
| 2018-06-04 | CVE-2016-10637 | Cryptographic Issues vulnerability in Haxe Haxe-Dev haxe-dev is a cross-platform toolkit. | 8.1 |
| 2018-06-04 | CVE-2016-10636 | Cryptographic Issues vulnerability in Grunt-Ccompiler Project Grunt-Ccompiler grunt-ccompiler is a Closure Compiler Grunt Plugin. | 8.1 |
| 2018-06-04 | CVE-2018-11712 | Improper Certificate Validation vulnerability in Webkitgtk Webkitgtk+ 2.20.0/2.20.1 WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections. | 7.5 |
| 2018-06-04 | CVE-2018-10615 | Path Traversal vulnerability in GE MDS Pulsenet Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform. | 8.1 |
| 2018-06-04 | CVE-2018-10613 | XXE vulnerability in GE MDS Pulsenet Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior. | 7.5 |
| 2018-06-04 | CVE-2018-11710 | Out-of-bounds Write vulnerability in Openmpt Libopenmpt soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near address 0 in an out-of-memory situation. | 8.8 |