# CVEs published 2018-04-23

27 CVEs were published on April 23, 2018: 0 critical, 4 high. Days are UTC.

- [CVE-2018-10303](https://cve.now/CVE-2018-10303.md): A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID… (no CVSS)
- [CVE-2017-7893](https://cve.now/CVE-2017-7893.md): In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master. (no CVSS, salt)
- [CVE-2016-9599](https://cve.now/CVE-2016-9599.md): puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the… (CVSS 7.1, puppet-tripleo)
- [CVE-2016-9601](https://cve.now/CVE-2016-9601.md): ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript… (CVSS 5.3, ghostscript)
- [CVE-2018-6491](https://cve.now/CVE-2018-6491.md): MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability (CVSS 8.1, Micro Focus Universal CMDB)
- [CVE-2018-1106](https://cve.now/CVE-2018-1106.md): An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install… (no CVSS, Red Hat PackageKit)
- [CVE-2016-9594](https://cve.now/CVE-2016-9594.md): curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. (CVSS 6.5, curl)
- [CVE-2018-10302](https://cve.now/CVE-2018-10302.md): A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID… (no CVSS)
- [CVE-2018-8781](https://cve.now/CVE-2018-8781.md): The udl\_fb\_mmap function in drivers/gpu/drm/udl/udl\_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an… (no CVSS, Check Point Software Technologies Linux Kernel)
- [CVE-2016-9586](https://cve.now/CVE-2016-9586.md): curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the… (CVSS 5.9, redhat curl)
- [CVE-2017-17833](https://cve.now/CVE-2017-17833.md): OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a… (no CVSS)
- [CVE-2018-10300](https://cve.now/CVE-2018-10300.md): Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to… (no CVSS)
- [CVE-2018-10301](https://cve.now/CVE-2018-10301.md): Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote… (no CVSS)
- [CVE-2018-8880](https://cve.now/CVE-2018-8880.md): Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP… (no CVSS)
- [CVE-2018-9921](https://cve.now/CVE-2018-9921.md): In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the… (no CVSS)
- [CVE-2018-4847](https://cve.now/CVE-2018-4847.md): A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions \< V1.4). (no CVSS, Siemens AG SIMATIC WinCC OA Operator iOS App)
- [CVE-2017-14458](https://cve.now/CVE-2017-14458.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 8.3.2.25013. (CVSS 8.8, Talos Foxit)
- [CVE-2018-3850](https://cve.now/CVE-2018-3850.md): An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. (CVSS 8.8, Talos Foxit)
- [CVE-2017-13073](https://cve.now/CVE-2017-13073.md): Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could… (no CVSS, QNAP Photo Station)
- [CVE-2018-10233](https://cve.now/CVE-2018-10233.md): The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. (no CVSS)
- [CVE-2018-10234](https://cve.now/CVE-2018-10234.md): Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion… (no CVSS)
- [CVE-2017-1473](https://cve.now/CVE-2017-1473.md): IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms… (no CVSS, IBM Security Access Manager)
- [CVE-2017-1486](https://cve.now/CVE-2017-1486.md): IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. (no CVSS, IBM Cognos Business Intelligence)
- [CVE-2017-1701](https://cve.now/CVE-2017-1701.md): IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption… (no CVSS, IBM Rational Team Concert)
- [CVE-2017-1764](https://cve.now/CVE-2017-1764.md): IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials… (no CVSS, IBM Cognos Business Intelligence)
- [CVE-2017-1786](https://cve.now/CVE-2017-1786.md): IBM WebSphere MQ 8.0 through 8.0.0.8 and 9.0 through 9.0.4 under special circumstances could allow an authenticated user to consume all… (no CVSS, IBM MQ)
- [CVE-2018-10299](https://cve.now/CVE-2018-10299.md): An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), the Ethereum ERC20… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2018-04-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.