# CVEs published 2018-02-25

6 CVEs were published on February 25, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-7480](https://cve.now/CVE-2018-7480.md): The blkcg\_init\_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service (double (no CVSS)
- [CVE-2018-7476](https://cve.now/CVE-2018-7476.md): controllers/admin/Linkage.php in dayrui FineCms 5.3.0 has Cross Site Scripting (XSS) via the id or lid parameter in a c=linkage,m=import req (no CVSS)
- [CVE-2018-7466](https://cve.now/CVE-2018-7466.md): install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging control over DB LOGIN (no CVSS)
- [CVE-2018-7470](https://cve.now/CVE-2018-7470.md): An issue was discovered in ImageMagick 7.0.7-22 Q16. (no CVSS)
- [CVE-2018-7471](https://cve.now/CVE-2018-7471.md): KingView 7.5SP1 has an integer overflow during stgopenstorage API read operations. (no CVSS)
- [CVE-2018-7472](https://cve.now/CVE-2018-7472.md): INVT Studio 1.2 allows remote attackers to cause a denial of service during import operations. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-02-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.