# CVEs published 2018-02-14

38 CVEs were published on February 14, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2017-18188](https://cve.now/CVE-2017-18188.md): OpenRC opentmpfiles through 0.1.3, when the fs.protected\_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary (no CVSS)
- [CVE-2017-6229](https://cve.now/CVE-2017-6229.md): Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0. (no CVSS, Brocade Communications Systems Ruckus Networks Unleashed AP…)
- [CVE-2017-6230](https://cve.now/CVE-2017-6230.md): Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain auth (no CVSS, Brocade Communications Systems Ruckus Networks Solo APs and…)
- [CVE-2018-7039](https://cve.now/CVE-2018-7039.md): CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because (no CVSS)
- [CVE-2017-18187](https://cve.now/CVE-2017-18187.md): In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl\_parse\_client\_psk (no CVSS)
- [CVE-2018-7034](https://cve.now/CVE-2018-7034.md): TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZED\_GROUP=1 value, (no CVSS)
- [CVE-2017-1499](https://cve.now/CVE-2017-1499.md): IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow the attacker to execute (no CVSS, IBM Maximo Asset Management)
- [CVE-2017-1682](https://cve.now/CVE-2017-1682.md): IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Connections)
- [CVE-2018-7032](https://cve.now/CVE-2018-7032.md): webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a Mi (no CVSS)
- [CVE-2018-1287](https://cve.now/CVE-2018-1287.md): In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. (no CVSS, Apache Software Foundation Apache JMeter · org.apache.jmete…)
- [CVE-2018-2364](https://cve.now/CVE-2018-2364.md): SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resul (no CVSS, SAP SE SAP CRM WebClient UI · SAP SE S4FND)
- [CVE-2018-2369](https://cve.now/CVE-2018-2369.md): Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would otherwise be restricted. (no CVSS, SAP SE SAP HANA)
- [CVE-2018-2370](https://cve.now/CVE-2018-2370.md): Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, fr (no CVSS, SAP SE SAP BI Launchpad)
- [CVE-2018-2371](https://cve.now/CVE-2018-2371.md): The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controlled inputs, which res (no CVSS, SAP SE SAP NetWeaver Java Web Application)
- [CVE-2018-2372](https://cve.now/CVE-2018-2372.md): A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentiali (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2018-2373](https://cve.now/CVE-2018-2373.md): Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statements (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2018-2374](https://cve.now/CVE-2018-2374.md): In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sens (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2018-2375](https://cve.now/CVE-2018-2375.md): In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve appl (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2018-2376](https://cve.now/CVE-2018-2376.md): In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve appl (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2018-2377](https://cve.now/CVE-2018-2377.md): In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized use (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2018-2378](https://cve.now/CVE-2018-2378.md): In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2018-2379](https://cve.now/CVE-2018-2379.md): In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2018-2381](https://cve.now/CVE-2018-2381.md): SAP ERP Financials Information System (SAP\_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP\_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, (no CVSS, SAP SE SAP ERP Financials Information System)
- [CVE-2018-2382](https://cve.now/CVE-2018-2382.md): A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to store graphics in a co (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2383](https://cve.now/CVE-2018-2383.md): Reflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53. (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2384](https://cve.now/CVE-2018-2384.md): Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2385](https://cve.now/CVE-2018-2385.md): Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing the SAP Internet Grap (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2386](https://cve.now/CVE-2018-2386.md): Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from accessing the SAP Int (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2387](https://cve.now/CVE-2018-2387.md): A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to obtain information on (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2388](https://cve.now/CVE-2018-2388.md): Stored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53. (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2389](https://cve.now/CVE-2018-2389.md): Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hidin (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2390](https://cve.now/CVE-2018-2390.md): Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, (no CVSS)
- [CVE-2018-2391](https://cve.now/CVE-2018-2391.md): Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, (no CVSS)
- [CVE-2018-2392](https://cve.now/CVE-2018-2392.md): Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropria (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2393](https://cve.now/CVE-2018-2393.md): Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropria (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2394](https://cve.now/CVE-2018-2394.md): Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2395](https://cve.now/CVE-2018-2395.md): Under certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, ov (no CVSS, SAP SE SAP Internet Graphics Server)
- [CVE-2018-2396](https://cve.now/CVE-2018-2396.md): Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, (no CVSS, SAP SE SAP Internet Graphics Server)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.