# CVEs published 2018-02-05 40 CVEs were published on February 5, 2018: 0 critical, 0 high. Days are UTC. - [CVE-2018-6609](https://cve.now/CVE-2018-6609.md): SQL Injection exists in the JSP Tickets 1.1 component for Joomla! via the ticketcode parameter in a ticketlist edit action, or the id parame (no CVSS) - [CVE-2018-6610](https://cve.now/CVE-2018-6610.md): Information Leakage exists in the jLike 1.0 component for Joomla! via a task=getUserByCommentId request. (no CVSS) - [CVE-2018-6651](https://cve.now/CVE-2018-6651.md): In the uncurl\_ws\_accept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation (a (no CVSS) - [CVE-2018-6582](https://cve.now/CVE-2018-6582.md): SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, (no CVSS) - [CVE-2018-6604](https://cve.now/CVE-2018-6604.md): SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request. (no CVSS) - [CVE-2018-6605](https://cve.now/CVE-2018-6605.md): SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, (no CVSS) - [CVE-2018-5442](https://cve.now/CVE-2018-5442.md): A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. (no CVSS, Fuji Electric V-Server VPR) - [CVE-2018-6624](https://cve.now/CVE-2018-6624.md): OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific scree (no CVSS) - [CVE-2018-6625](https://cve.now/CVE-2018-6625.md): In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly h (no CVSS) - [CVE-2018-6626](https://cve.now/CVE-2018-6626.md): In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO (no CVSS) - [CVE-2018-6627](https://cve.now/CVE-2018-6627.md): In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly h (no CVSS) - [CVE-2018-6628](https://cve.now/CVE-2018-6628.md): In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO (no CVSS) - [CVE-2018-6629](https://cve.now/CVE-2018-6629.md): In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO (no CVSS) - [CVE-2018-6630](https://cve.now/CVE-2018-6630.md): In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO (no CVSS) - [CVE-2018-6631](https://cve.now/CVE-2018-6631.md): In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110009.sys) allows local users to cause a denial of service (BSO (no CVSS) - [CVE-2018-6632](https://cve.now/CVE-2018-6632.md): In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO (no CVSS) - [CVE-2018-6633](https://cve.now/CVE-2018-6633.md): In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO (no CVSS) - [CVE-2018-6635](https://cve.now/CVE-2018-6635.md): System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote attackers to byp (no CVSS) - [CVE-2015-1416](https://cve.now/CVE-2015-1416.md): Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU p (no CVSS) - [CVE-2015-1418](https://cve.now/CVE-2015-1418.md): The do\_ed\_script function in pch.c in GNU patch through 2.7.6, and patch in FreeBSD 10.1 before 10.1-RELEASE-p17, 10.2 before 10.2-BETA2-p3, (no CVSS) - [CVE-2015-4179](https://cve.now/CVE-2015-4179.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Codestyling Localization plugin 1.99.30 and earlier for Wordpress. (no CVSS) - [CVE-2015-4412](https://cve.now/CVE-2015-4412.md): BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial (no CVSS, bson) - [CVE-2015-4461](https://cve.now/CVE-2015-4461.md): Absolute path traversal vulnerability in eFront CMS 3.6.15.4 and earlier allows remote Professor users to obtain sensitive information via a (no CVSS) - [CVE-2015-5674](https://cve.now/CVE-2015-5674.md): The routed daemon in FreeBSD 9.3 before 9.3-RELEASE-p22, 10.2-RC2 before 10.2-RC2-p1, 10.2-RC1 before 10.2-RC1-p2, 10.2 before 10.2-BETA2-p3 (no CVSS) - [CVE-2017-9414](https://cve.now/CVE-2017-9414.md): Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the (no CVSS) - [CVE-2018-6461](https://cve.now/CVE-2018-6461.md): March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in th (no CVSS) - [CVE-2018-5787](https://cve.now/CVE-2018-5787.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-5788](https://cve.now/CVE-2018-5788.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-5789](https://cve.now/CVE-2018-5789.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-5790](https://cve.now/CVE-2018-5790.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-5791](https://cve.now/CVE-2018-5791.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-5792](https://cve.now/CVE-2018-5792.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-5793](https://cve.now/CVE-2018-5793.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-5794](https://cve.now/CVE-2018-5794.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-5795](https://cve.now/CVE-2018-5795.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-5796](https://cve.now/CVE-2018-5796.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-5797](https://cve.now/CVE-2018-5797.md): An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. (no CVSS) - [CVE-2018-6621](https://cve.now/CVE-2018-6621.md): The decode\_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of arra (no CVSS) - [CVE-2017-15536](https://cve.now/CVE-2017-15536.md): An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. (no CVSS) - [CVE-2018-6188](https://cve.now/CVE-2018-6188.md): django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1.11.9, allows remote attackers to obtain potentiall (no CVSS, django) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-02-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.