# CVEs published 2018-02-13 28 CVEs were published on February 13, 2018: 0 critical, 1 high. Days are UTC. - [CVE-2017-15699](https://cve.now/CVE-2017-15699.md): A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. (no CVSS, Apache Software Foundation Apache Qpid Dispatch Router) - [CVE-2018-5459](https://cve.now/CVE-2018-5459.md): An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. (no CVSS, WAGO PFC200 Series) - [CVE-2018-6910](https://cve.now/CVE-2018-6910.md): DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc\_archives\_functions (no CVSS) - [CVE-2017-15709](https://cve.now/CVE-2017-15709.md): When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel v (no CVSS, Apache Software Foundation Apache ActiveMQ · org.apache.… +1) - [CVE-2017-1711](https://cve.now/CVE-2017-1711.md): IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory (no CVSS, IBM Client Application Access · IBM Notes) - [CVE-2017-1714](https://cve.now/CVE-2017-1714.md): IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege. (no CVSS, IBM Client Application Access · IBM Notes) - [CVE-2017-1720](https://cve.now/CVE-2017-1720.md): IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared me (no CVSS, IBM Client Application Access · IBM Notes) - [CVE-2018-1383](https://cve.now/CVE-2018-1383.md): A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system, (no CVSS, IBM AIX) - [CVE-2018-6953](https://cve.now/CVE-2018-6953.md): In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which ha (no CVSS) - [CVE-2018-6954](https://cve.now/CVE-2018-6954.md): systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain owne (CVSS 7.8) - [CVE-2015-9252](https://cve.now/CVE-2015-9252.md): An issue was discovered in QPDF before 7.0.0. (no CVSS) - [CVE-2016-10713](https://cve.now/CVE-2016-10713.md): An issue was discovered in GNU patch before 2.7.6. (no CVSS) - [CVE-2017-18183](https://cve.now/CVE-2017-18183.md): An issue was discovered in QPDF before 7.0.0. (no CVSS) - [CVE-2017-18184](https://cve.now/CVE-2017-18184.md): An issue was discovered in QPDF before 7.0.0. (no CVSS) - [CVE-2017-18185](https://cve.now/CVE-2017-18185.md): An issue was discovered in QPDF before 7.0.0. (no CVSS) - [CVE-2017-18186](https://cve.now/CVE-2017-18186.md): An issue was discovered in QPDF before 7.0.0. (no CVSS) - [CVE-2018-6951](https://cve.now/CVE-2018-6951.md): An issue was discovered in GNU patch through 2.7.6. (no CVSS) - [CVE-2018-6952](https://cve.now/CVE-2018-6952.md): A double free exists in the another\_hunk function in pch.c in GNU patch through 2.7.6. (no CVSS) - [CVE-2018-6928](https://cve.now/CVE-2018-6928.md): PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term. (no CVSS) - [CVE-2018-6948](https://cve.now/CVE-2018-6948.md): In CCN-lite 2, the function ccnl\_prefix\_to\_str\_detailed can cause a buffer overflow, when writing a prefix to the buffer buf. (no CVSS) - [CVE-2018-0487](https://cve.now/CVE-2018-0487.md): ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service ( (no CVSS, ARM mbed TLS before 1.3.22, before 2.1.10, and before) - [CVE-2018-0488](https://cve.now/CVE-2018-0488.md): ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to (no CVSS, ARM mbed TLS before 1.3.22, before 2.1.10, and before) - [CVE-2018-6911](https://cve.now/CVE-2018-6911.md): The VBWinExec function in Node\\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a sing (no CVSS) - [CVE-2018-6292](https://cve.now/CVE-2018-6292.md): Remote Code Execution in Saperion Web Client version 7.5.2 83166. (no CVSS, Kofax Saperion Web Client) - [CVE-2018-6293](https://cve.now/CVE-2018-6293.md): Arbitrary File Read in Saperion Web Client version 7.5.2 83166. (no CVSS, Kofax Saperion Web Client) - [CVE-2018-1297](https://cve.now/CVE-2018-1297.md): When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. (no CVSS, Apache Software Foundation Apache JMeter · org.apache.jmete…) - [CVE-2018-6930](https://cve.now/CVE-2018-6930.md): A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remot (no CVSS) - [CVE-2018-6942](https://cve.now/CVE-2018-6942.md): An issue was discovered in FreeType 2 through 2.9. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-02-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.