# CVEs published 2018-02-18

11 CVEs were published on February 18, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-6024](https://cve.now/CVE-2018-6024.md): SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter. (no CVSS)
- [CVE-2018-7212](https://cve.now/CVE-2018-7212.md): An issue was discovered in rack-protection/lib/rack/protection/path\_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. (no CVSS, sinatra)
- [CVE-2018-7216](https://cve.now/CVE-2018-7216.md): Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenti (no CVSS)
- [CVE-2018-7217](https://cve.now/CVE-2018-7217.md): In Bravo Tejari Procurement Portal, uploaded files are not properly validated by the application either on the client or the server side. (no CVSS)
- [CVE-2018-7208](https://cve.now/CVE-2018-7208.md): In the coff\_pointerize\_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2. (no CVSS)
- [CVE-2018-7209](https://cve.now/CVE-2018-7209.md): An issue was discovered in iDashboards 9.6b. (no CVSS)
- [CVE-2018-7210](https://cve.now/CVE-2018-7210.md): An issue was discovered in iDashboards 9.6b. (no CVSS)
- [CVE-2018-7211](https://cve.now/CVE-2018-7211.md): An issue was discovered in iDashboards 9.6b. (no CVSS)
- [CVE-2018-7197](https://cve.now/CVE-2018-7197.md): An issue was discovered in Pluck through 4.7.4. (no CVSS)
- [CVE-2018-7198](https://cve.now/CVE-2018-7198.md): October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page. (no CVSS, rainlab/blog-plugin)
- [CVE-2018-7206](https://cve.now/CVE-2018-7206.md): An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. (no CVSS, oauthenticator)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-02-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.