CVEs published July 12, 2018
34 CVEs were published on July 12, 2018: 1 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 34
- Critical
- 1
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 32
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Apache Software Foundation Apache Spark · org.apache.spa… +1
- 1
- Apache Software Foundation Apache Spark · org.apache.spa… +2
- 1
- codiad/codiad
- 1
- F5 Networks BIG-IP APM client for Linux and Mac OSX
- 1
- mailman
- 1
- Micro Focus Fortify Software Security Center
- 1
- Qualcomm Snapdragon Automobile, Snapdragon Mobile
- 1
- qutebrowser cross-site request forgery flaw allows sites to…
- 1
- The Eclipse Foundation Eclipse Vert.x · io.vertx:vertx-web
- 1
Critical 1
High 1
Medium, low and unrated 32
- CVE-2018-14015The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application…
- CVE-2018-14016The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based…
- CVE-2018-14017The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service…
- CVE-2018-14012WolfSight CMS 3.2 allows SQL injection via the PATH_INFO to the default URI.
- CVE-2018-14014In waimai Super Cms 20150505, there is a CSRF vulnerability that can add an admin account via admin.php?m=Member&a=adminadd.
- CVE-2018-12979An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.
- CVE-2018-12980An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.
- CVE-2018-12981An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.
- CVE-2018-13441qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a…
- CVE-2018-13457qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local…
- CVE-2018-13458qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local…
- CVE-2018-13796An issue was discovered in GNU Mailman before 2.1.28.mailman
- CVE-2018-5529The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an…F5 Networks BIG-IP APM client for Linux and Mac OSX
- CVE-2017-14612"Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not verify X.509…
- CVE-2017-14709The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify…
- CVE-2017-14710The Shein Group Ltd.
- CVE-2018-14009Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.codiad/codiad
- CVE-2018-13836An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract.
- CVE-2018-14001An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH (SKT), an Ethereum token smart contract.
- CVE-2018-14002An integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an Ethereum token smart contract.
- CVE-2018-14003An integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an Ethereum token smart contract.
- CVE-2018-14004An integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin (GLB), an Ethereum token smart contract.
- CVE-2018-14005An integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an Ethereum token smart contract.
- CVE-2018-14006An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token (NGT), an Ethereum token smart contract.
- CVE-2017-18155While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD…Qualcomm Snapdragon Automobile, Snapdragon Mobile
Show all 32 entriesShow fewer entries
- CVE-2018-12540In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form…The Eclipse Foundation Eclipse Vert.x · io.vertx:vertx-web
- CVE-2018-1334In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to…Apache Software Foundation Apache Spark · org.apache.spa… +2
- CVE-2018-8024In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark…Apache Software Foundation Apache Spark · org.apache.spa… +1
- CVE-2018-13996Genann through 2018-07-08 has a stack-based buffer over-read in genann_train in genann.c.
- CVE-2018-13997Genann through 2018-07-08 has a SEGV in genann_run in genann.c.
- CVE-2018-13998ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.
- CVE-2018-13999Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator).