# CVEs published 2018-02-26

30 CVEs were published on February 26, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2017-11632](https://cve.now/CVE-2017-11632.md): An issue was discovered on Wireless IP Camera 360 devices. (no CVSS)
- [CVE-2017-11633](https://cve.now/CVE-2017-11633.md): An issue was discovered on Wireless IP Camera 360 devices. (no CVSS)
- [CVE-2017-11634](https://cve.now/CVE-2017-11634.md): An issue was discovered on Wireless IP Camera 360 devices. (no CVSS)
- [CVE-2017-11635](https://cve.now/CVE-2017-11635.md): An issue was discovered on Wireless IP Camera 360 devices. (no CVSS)
- [CVE-2017-16229](https://cve.now/CVE-2017-16229.md): In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read\_from\_str function in sax\_buf.c when a craf (no CVSS, ox)
- [CVE-2017-16813](https://cve.now/CVE-2017-16813.md): A denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. (no CVSS)
- [CVE-2017-16814](https://cve.now/CVE-2017-16814.md): A Directory Traversal issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. (no CVSS)
- [CVE-2018-0908](https://cve.now/CVE-2018-0908.md): Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted at (no CVSS, Microsoft Identity Manager)
- [CVE-2018-7490](https://cve.now/CVE-2018-7490.md): uWSGI before 2.0.17 mishandles a DOCUMENT\_ROOT check during use of the --php-docroot option, allowing directory traversal. (no CVSS, uwsgi)
- [CVE-2018-7249](https://cve.now/CVE-2018-7249.md): An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as (no CVSS)
- [CVE-2018-7250](https://cve.now/CVE-2018-7250.md): An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as (no CVSS)
- [CVE-2018-7492](https://cve.now/CVE-2018-7492.md): A NULL pointer dereference was found in the net/rds/rdma.c \_\_rds\_rdma\_map() function in the Linux kernel before 4.14.7 allowing local attack (no CVSS)
- [CVE-2017-18195](https://cve.now/CVE-2017-18195.md): An issue was discovered in tools/conversations/view\_ajax.php in Concrete5 before 8.3.0. (no CVSS)
- [CVE-2018-7448](https://cve.now/CVE-2018-7448.md): Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to inject (no CVSS)
- [CVE-2018-7491](https://cve.now/CVE-2018-7491.md): In PrestaShop through 1.7.2.5, a UI-Redressing/Clickjacking vulnerability was found that might lead to state-changing impact in the context (no CVSS)
- [CVE-2018-5762](https://cve.now/CVE-2018-5762.md): The TLS implementation in the TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 58.1 before 58.160, 59.1 before 059.1a (no CVSS)
- [CVE-2018-7487](https://cve.now/CVE-2018-7487.md): There is a heap-based buffer overflow in the LoadPCX function of in\_pcx.cpp in sam2p 0.49.4. (no CVSS)
- [CVE-2018-7489](https://cve.now/CVE-2018-7489.md): FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because (no CVSS, com.fasterxml.jackson.core:jackson-databind)
- [CVE-2017-1774](https://cve.now/CVE-2017-1774.md): IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. (no CVSS, IBM Security Guardium Big Data Intelligence)
- [CVE-2017-18201](https://cve.now/CVE-2017-18201.md): An issue was discovered in GNU libcdio before 2.0.0. (no CVSS)
- [CVE-2018-1377](https://cve.now/CVE-2018-1377.md): IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores user credentials in plain in clear text which can be read by a local user. (no CVSS, IBM Security Guardium Big Data Intelligence)
- [CVE-2018-7485](https://cve.now/CVE-2018-7485.md): The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attacker (no CVSS)
- [CVE-2018-7486](https://cve.now/CVE-2018-7486.md): Blue River Mura CMS before v7.0.7029 supports inline function calls with an \[m\] tag and \[/m\] end tag, without proper restrictions on file ty (no CVSS)
- [CVE-2018-7463](https://cve.now/CVE-2018-7463.md): SQL injection vulnerability in files.php in the "files" component in ASANHAMAYESH CMS 3.4.6 allows a remote attacker to execute arbitrary SQ (no CVSS)
- [CVE-2017-9425](https://cve.now/CVE-2017-9425.md): The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action. (no CVSS)
- [CVE-2017-9426](https://cve.now/CVE-2017-9426.md): ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags a (no CVSS)
- [CVE-2017-18200](https://cve.now/CVE-2017-18200.md): The f2fs implementation in the Linux kernel before 4.14 mishandles reference counts associated with f2fs\_wait\_discard\_bios calls, which allo (no CVSS)
- [CVE-2018-7479](https://cve.now/CVE-2018-7479.md): YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php. (no CVSS)
- [CVE-2017-15696](https://cve.now/CVE-2017-15696.md): When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configur (no CVSS, Apache Software Foundation Apache Geode · org.apache.geode:…)
- [CVE-2018-7484](https://cve.now/CVE-2018-7484.md): An issue was discovered in PureVPN through 5.19.4.0 on Windows. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-02-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.