# CVEs published 2018-10-09

58 CVEs were published on October 9, 2018: 1 critical, 1 high. Days are UTC.

- [CVE-2018-18201](https://cve.now/CVE-2018-18201.md): qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account. (no CVSS)
- [CVE-2018-11796](https://cve.now/CVE-2018-11796.md): In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing. (no CVSS, Apache Software Foundation Apache Tika · org.apache.tika:ti…)
- [CVE-2018-17866](https://cve.now/CVE-2018-17866.md): Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile &… (no CVSS)
- [CVE-2018-17958](https://cve.now/CVE-2018-17958.md): Qemu has a Buffer Overflow in rtl8139\_do\_receive in hw/net/rtl8139.c because an incorrect integer data type is used. (CVSS 7.5)
- [CVE-2018-17962](https://cve.now/CVE-2018-17962.md): Qemu has a Buffer Overflow in pcnet\_receive in hw/net/pcnet.c because an incorrect integer data type is used. (no CVSS)
- [CVE-2018-17963](https://cve.now/CVE-2018-17963.md): qemu\_deliver\_packet\_iov in net/net.c in Qemu accepts packet sizes greater than INT\_MAX, which allows attackers to cause a denial of… (no CVSS)
- [CVE-2018-18198](https://cve.now/CVE-2018-18198.md): The $opener\_input\_field variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to… (no CVSS)
- [CVE-2018-18199](https://cve.now/CVE-2018-18199.md): Mediamanager in REDAXO before 5.6.4 has XSS. (no CVSS)
- [CVE-2018-18200](https://cve.now/CVE-2018-18200.md): There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4. (no CVSS)
- [CVE-2018-7631](https://cve.now/CVE-2018-7631.md): Buffer Overflow in httpd in EpiCentro E\_7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a… (no CVSS)
- [CVE-2018-7632](https://cve.now/CVE-2018-7632.md): Buffer Overflow in httpd in EpiCentro E\_7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET… (no CVSS)
- [CVE-2018-7633](https://cve.now/CVE-2018-7633.md): Code injection in the /ui/login form Language parameter in Epicentro E\_7.3.2+ allows attackers to execute JavaScript code by making a user… (no CVSS)
- [CVE-2018-10610](https://cve.now/CVE-2018-10610.md): An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially… (no CVSS, WECON Technology Co. LeviStudioU)
- [CVE-2018-10614](https://cve.now/CVE-2018-10614.md): An XXE vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project… (no CVSS, WECON Technology Co. LeviStudioU)
- [CVE-2018-17855](https://cve.now/CVE-2018-17855.md): An issue was discovered in Joomla! before 3.8.13. (no CVSS)
- [CVE-2018-17856](https://cve.now/CVE-2018-17856.md): An issue was discovered in Joomla! before 3.8.13. (no CVSS, joomla/framework)
- [CVE-2018-17857](https://cve.now/CVE-2018-17857.md): An issue was discovered in Joomla! before 3.8.13. (no CVSS)
- [CVE-2018-17858](https://cve.now/CVE-2018-17858.md): An issue was discovered in Joomla! before 3.8.13. (no CVSS)
- [CVE-2018-17859](https://cve.now/CVE-2018-17859.md): An issue was discovered in Joomla! before 3.8.13. (no CVSS)
- [CVE-2018-18086](https://cve.now/CVE-2018-18086.md): EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users. (no CVSS)
- [CVE-2018-18087](https://cve.now/CVE-2018-18087.md): The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privilege can inject arbitrary web… (no CVSS)
- [CVE-2018-18088](https://cve.now/CVE-2018-18088.md): OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c (no CVSS)
- [CVE-2018-18190](https://cve.now/CVE-2018-18190.md): An issue was discovered in GoPro gpmf-parser before 1.2.1. (no CVSS)
- [CVE-2018-18191](https://cve.now/CVE-2018-18191.md): Cross-site request forgery (CSRF) vulnerability in /admin.php?c=member&m=edit&uid=1 in dayrui FineCms 5.4 allows remote attackers to… (no CVSS)
- [CVE-2018-18192](https://cve.now/CVE-2018-18192.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-18193](https://cve.now/CVE-2018-18193.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-18194](https://cve.now/CVE-2018-18194.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-18195](https://cve.now/CVE-2018-18195.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-18196](https://cve.now/CVE-2018-18196.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-18197](https://cve.now/CVE-2018-18197.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-6977](https://cve.now/CVE-2018-6977.md): VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an… (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2018-18082](https://cve.now/CVE-2018-18082.md): XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI. (no CVSS)
- [CVE-2018-18083](https://cve.now/CVE-2018-18083.md): An issue was discovered in DuomiCMS 3.0. (no CVSS)
- [CVE-2018-18084](https://cve.now/CVE-2018-18084.md): An issue was discovered in DuomiCMS 3.0. (no CVSS)
- [CVE-2018-14649](https://cve.now/CVE-2018-14649.md): It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. (CVSS 9.8, \[UNKNOWN\] ceph-iscsi-cli)
- [CVE-2018-18075](https://cve.now/CVE-2018-18075.md): WikidForum 2.20 has SQL Injection via the rpc.php parent\_post\_id or num\_records parameter, or the index.php?action=search select\_sort… (no CVSS)
- [CVE-2018-14080](https://cve.now/CVE-2018-14080.md): An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. (no CVSS)
- [CVE-2018-14081](https://cve.now/CVE-2018-14081.md): An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. (no CVSS)
- [CVE-2018-15542](https://cve.now/CVE-2018-15542.md): An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. (no CVSS)
- [CVE-2018-15543](https://cve.now/CVE-2018-15543.md): An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. (no CVSS)
- [CVE-2018-18029](https://cve.now/CVE-2018-18029.md): Navigate CMS has Stored XSS via the navigate.php Title field in an edit action. (no CVSS)
- [CVE-2018-18074](https://cve.now/CVE-2018-18074.md): The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname… (no CVSS, requests)
- [CVE-2018-7928](https://cve.now/CVE-2018-7928.md): There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before… (no CVSS, Huawei Technologies Co. MyCloud)
- [CVE-2018-12474](https://cve.now/CVE-2018-12474.md): Crafted service parameters allows to induce unexpected behaviour in obs-service-tar\_scm (CVSS 5.4, openSUSE Open Build Service)
- [CVE-2018-12477](https://cve.now/CVE-2018-12477.md): obs-service-refresh\_patches can be tricked into deleting '..' or other unrelated directories (CVSS 3.5, openSUSE Open Build Service)
- [CVE-2018-12478](https://cve.now/CVE-2018-12478.md): obs-service-replace\_using\_package\_version allows to specify arbitrary input files (CVSS 4.8, openSUSE Open Build Service)
- [CVE-2018-12479](https://cve.now/CVE-2018-12479.md): Request controller allows to create requests with arbitrary request IDs (CVSS 6.5, openSUSE Open Build Service)
- [CVE-2018-2466](https://cve.now/CVE-2018-2466.md): In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled… (no CVSS, SAP Data Services)
- [CVE-2018-2467](https://cve.now/CVE-2018-2467.md): In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web… (no CVSS, SAP BusinessObjects BI Platform Servers)
- [CVE-2018-2468](https://cve.now/CVE-2018-2468.md): Under certain conditions the backup server in SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to access… (no CVSS, SAP Adaptive Server Enterprise)
- [CVE-2018-2469](https://cve.now/CVE-2018-2469.md): Under certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to access information which… (no CVSS, SAP Adaptive Server Enterprise)
- [CVE-2018-2470](https://cve.now/CVE-2018-2470.md): In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently… (no CVSS, SAP NetWeaver Application Server for ABAP)
- [CVE-2018-2471](https://cve.now/CVE-2018-2471.md): Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which… (no CVSS, SAP BusinessObjects Business Intelligence Platform)
- [CVE-2018-2472](https://cve.now/CVE-2018-2472.md): SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client) does not sufficiently encode… (no CVSS, SAP BusinessObjects Business Intelligence Platform)
- [CVE-2018-2474](https://cve.now/CVE-2018-2474.md): SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send… (no CVSS, SAP Fiori 1.0 for SAP ERP HCM)
- [CVE-2018-2475](https://cve.now/CVE-2018-2475.md): Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster. (no CVSS, SAP project “Gardener”)
- [CVE-2018-18070](https://cve.now/CVE-2018-18070.md): An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. (no CVSS)
- [CVE-2018-18071](https://cve.now/CVE-2018-18071.md): An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2018-10-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.