CVEs published February 18, 2018
11 CVEs were published on February 18, 2018: 0 critical, 0 high.
- Published
- 11
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- oauthenticator
- 1
- rainlab/blog-plugin
- 1
- sinatra
- 1
Medium, low and unrated 11
- CVE-2018-6024SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.
- CVE-2018-7212An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows.sinatra
- CVE-2018-7216Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenti
- CVE-2018-7217In Bravo Tejari Procurement Portal, uploaded files are not properly validated by the application either on the client or the server side.
- CVE-2018-7208In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.
- CVE-2018-7209An issue was discovered in iDashboards 9.6b.
- CVE-2018-7210An issue was discovered in iDashboards 9.6b.
- CVE-2018-7211An issue was discovered in iDashboards 9.6b.
- CVE-2018-7197An issue was discovered in Pluck through 4.7.4.
- CVE-2018-7198October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.rainlab/blog-plugin
- CVE-2018-7206An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3.oauthenticator