# CVEs published 2018-03-05

51 CVEs were published on March 5, 2018: 0 critical, 1 high. Days are UTC.

- [CVE-2018-7712](https://cve.now/CVE-2018-7712.md): The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of servi (CVSS 7.5)
- [CVE-2018-7713](https://cve.now/CVE-2018-7713.md): The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2018-7714](https://cve.now/CVE-2018-7714.md): The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2018-7715](https://cve.now/CVE-2018-7715.md): PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool. (no CVSS)
- [CVE-2018-7716](https://cve.now/CVE-2018-7716.md): PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool. (no CVSS)
- [CVE-2018-7717](https://cve.now/CVE-2018-7717.md): The htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery Extended (SIGE) extension 3.2.3 for Joomla! has (no CVSS)
- [CVE-2017-18219](https://cve.now/CVE-2017-18219.md): An issue was discovered in GraphicsMagick 1.3.26. (no CVSS)
- [CVE-2017-18220](https://cve.now/CVE-2017-18220.md): The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service (no CVSS)
- [CVE-2018-7711](https://cve.now/CVE-2018-7711.md): HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation uti (no CVSS, simplesamlphp/saml2)
- [CVE-2017-18217](https://cve.now/CVE-2017-18217.md): An issue was discovered in InvoicePlane before 1.5.5. (no CVSS)
- [CVE-2017-18218](https://cve.now/CVE-2017-18218.md): In drivers/net/ethernet/hisilicon/hns/hns\_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free (no CVSS)
- [CVE-2018-7493](https://cve.now/CVE-2018-7493.md): CactusVPN through 6.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. (no CVSS)
- [CVE-2017-17131](https://cve.now/CVE-2017-17131.md): Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V6 (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE50; TE60; VP9…)
- [CVE-2017-17132](https://cve.now/CVE-2017-17132.md): Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log information. (no CVSS, Huawei Technologies Co. VP9660)
- [CVE-2017-17133](https://cve.now/CVE-2017-17133.md): Huawei VP9660 V500R002C10 has a null pointer reference vulnerability in license module due to insufficient verification. (no CVSS, Huawei Technologies Co. VP9660)
- [CVE-2017-17134](https://cve.now/CVE-2017-17134.md): XML parser in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60)
- [CVE-2017-17135](https://cve.now/CVE-2017-17135.md): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500 (no CVSS, Huawei Technologies Co. DP300; IPS Module; NGFW Module; NIP…)
- [CVE-2017-17136](https://cve.now/CVE-2017-17136.md): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500 (no CVSS, Huawei Technologies Co. DP300; IPS Module; NGFW Module; NIP…)
- [CVE-2017-17137](https://cve.now/CVE-2017-17137.md): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500 (no CVSS, Huawei Technologies Co. DP300; IPS Module; NGFW Module; NIP…)
- [CVE-2017-17138](https://cve.now/CVE-2017-17138.md): PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30 (no CVSS, Huawei Technologies Co. DP300; IPS Module; NGFW Module; NIP…)
- [CVE-2017-17139](https://cve.now/CVE-2017-17139.md): Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.33 (no CVSS, Huawei Technologies Co. Mate 9; Mate 9 Pro)
- [CVE-2017-17140](https://cve.now/CVE-2017-17140.md): Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an inform (no CVSS, Huawei Technologies Co. Enjoy 5s; Y6 Pro)
- [CVE-2017-17141](https://cve.now/CVE-2017-17141.md): Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 (no CVSS, Huawei Technologies Co. S12700; S1700; S2700; S3700; S5700;…)
- [CVE-2017-17142](https://cve.now/CVE-2017-17142.md): SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R (no CVSS, Huawei Technologies Co. DP300; RP200; RSE6500; TE30; TE40;…)
- [CVE-2017-17143](https://cve.now/CVE-2017-17143.md): SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R (no CVSS, Huawei Technologies Co. DP300; RP200; RSE6500; TE30; TE40;…)
- [CVE-2017-17144](https://cve.now/CVE-2017-17144.md): Backup feature of SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R0 (no CVSS, Huawei Technologies Co. DP300; RP200; RSE6500; TE30; TE40;…)
- [CVE-2017-8164](https://cve.now/CVE-2017-8164.md): Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; E (no CVSS, Huawei Technologies Co. EVA-AL10; EVA-CL00; EVA-DL00; EVA-L…)
- [CVE-2017-8165](https://cve.now/CVE-2017-8165.md): Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2018-7698](https://cve.now/CVE-2018-7698.md): An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. (no CVSS)
- [CVE-2017-16922](https://cve.now/CVE-2017-16922.md): In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and ret (no CVSS)
- [CVE-2017-17428](https://cve.now/CVE-2017-17428.md): Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leve (no CVSS)
- [CVE-2017-18215](https://cve.now/CVE-2017-18215.md): xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code exe (no CVSS)
- [CVE-2017-18216](https://cve.now/CVE-2017-18216.md): In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and B (no CVSS)
- [CVE-2018-5255](https://cve.now/CVE-2018-5255.md): The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service (agent restart (no CVSS)
- [CVE-2017-7633](https://cve.now/CVE-2017-7633.md): QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. (no CVSS, QNAP Qfinder Pro)
- [CVE-2018-5449](https://cve.now/CVE-2018-5449.md): A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. (no CVSS, Moxa OnCell G3100-HSPA Series)
- [CVE-2018-5453](https://cve.now/CVE-2018-5453.md): An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and (no CVSS, Moxa OnCell G3100-HSPA Series)
- [CVE-2018-5455](https://cve.now/CVE-2018-5455.md): A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 1606 (no CVSS, Moxa OnCell G3100-HSPA Series)
- [CVE-2017-7427](https://cve.now/CVE-2017-7427.md): iManager - Multiple Reflected Cross-Site Scripting attacks (CVSS 5.4, NetIQ Identity Manager)
- [CVE-2017-7437](https://cve.now/CVE-2017-7437.md): Cross site scripting attacks against NetIQ Privileged Account Manager (CVSS 4.6, NetIQ Privileged Account Manager)
- [CVE-2018-0490](https://cve.now/CVE-2018-0490.md): An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. (no CVSS, Tor)
- [CVE-2018-0491](https://cve.now/CVE-2018-0491.md): A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. (no CVSS, Tor)
- [CVE-2018-1000115](https://cve.now/CVE-2018-1000115.md): Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP (no CVSS)
- [CVE-2018-1316](https://cve.now/CVE-2018-1316.md): The ODE process deployment web service was sensible to deployment messages with forged names. (no CVSS, Apache Software Foundation Apache ODE · org.apache.ode:ode)
- [CVE-2018-7644](https://cve.now/CVE-2018-7644.md): The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allow (no CVSS, simplesamlphp/saml2)
- [CVE-2018-7663](https://cve.now/CVE-2018-7663.md): An issue was discovered in resources/views/layouts/app.blade.php in Voten.co before 2017-08-25. (no CVSS)
- [CVE-2018-7664](https://cve.now/CVE-2018-7664.md): An issue was discovered in ClipBucket before 4.0.0 Release 4902. (no CVSS)
- [CVE-2018-7665](https://cve.now/CVE-2018-7665.md): An issue was discovered in ClipBucket before 4.0.0 Release 4902. (no CVSS)
- [CVE-2018-7666](https://cve.now/CVE-2018-7666.md): An issue was discovered in ClipBucket before 4.0.0 Release 4902. (no CVSS)
- [CVE-2018-7667](https://cve.now/CVE-2018-7667.md): Adminer through 4.3.1 has SSRF via the server parameter. (no CVSS, vrana/adminer)
- [CVE-2018-7668](https://cve.now/CVE-2018-7668.md): TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-03-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.