# CVEs published 2018-03-07

24 CVEs were published on March 7, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-7752](https://cve.now/CVE-2018-7752.md): GPAC through 0.7.1 has a Buffer Overflow in the gf\_media\_avc\_read\_sps function in media\_tools/av\_parsers.c, a different vulnerability than C (no CVSS)
- [CVE-2018-7753](https://cve.now/CVE-2018-7753.md): An issue was discovered in Bleach 2.1.x before 2.1.3. (no CVSS, bleach)
- [CVE-2017-12174](https://cve.now/CVE-2017-12174.md): It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created (no CVSS, Red Hat HornetQ/Artemis · org.hornetq:hornetq-server +1)
- [CVE-2018-7675](https://cve.now/CVE-2018-7675.md): Potential Information Disclosure in Sentinel (CVSS 2.8, NetIQ Sentinel)
- [CVE-2017-15367](https://cve.now/CVE-2017-15367.md): Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database (no CVSS, bacula-web/bacula-web)
- [CVE-2018-7204](https://cve.now/CVE-2018-7204.md): inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/fi (no CVSS)
- [CVE-2018-7564](https://cve.now/CVE-2018-7564.md): Stored XSS exists on Polycom QDX 6000 devices. (no CVSS)
- [CVE-2018-7565](https://cve.now/CVE-2018-7565.md): CSRF exists on Polycom QDX 6000 devices. (no CVSS)
- [CVE-2018-5452](https://cve.now/CVE-2018-5452.md): A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWav (no CVSS, Emerson ControlWave Micro Process Automation Controller)
- [CVE-2018-7745](https://cve.now/CVE-2018-7745.md): An issue was discovered in Western Bridge Cobub Razor 0.7.2. (no CVSS)
- [CVE-2018-7746](https://cve.now/CVE-2018-7746.md): An issue was discovered in Western Bridge Cobub Razor 0.7.2. (no CVSS)
- [CVE-2014-5044](https://cve.now/CVE-2014-5044.md): Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran appli (no CVSS)
- [CVE-2014-8780](https://cve.now/CVE-2014-8780.md): Cross-site scripting (XSS) vulnerability in Jease 2.11 allows remote authenticated users to inject arbitrary web script or HTML via a conten (no CVSS)
- [CVE-2018-7473](https://cve.now/CVE-2018-7473.md): Open redirect vulnerability in the SO Connect SO WIFI hotspot web interface, prior to version 140, allows remote attackers to redirect users (no CVSS)
- [CVE-2018-1000116](https://cve.now/CVE-2018-1000116.md): NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution. (no CVSS)
- [CVE-2018-1000117](https://cve.now/CVE-2018-1000117.md): Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function (no CVSS)
- [CVE-2018-1000118](https://cve.now/CVE-2018-1000118.md): Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler that can result in (no CVSS, electron)
- [CVE-2018-1000119](https://cve.now/CVE-2018-1000119.md): Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can (no CVSS, rack-protection)
- [CVE-2018-1054](https://cve.now/CVE-2018-1054.md): An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4 (no CVSS, Red Hat 389-ds-base)
- [CVE-2018-7741](https://cve.now/CVE-2018-7741.md): Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI. (no CVSS)
- [CVE-2017-18221](https://cve.now/CVE-2017-18221.md): The \_\_munlock\_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service (NR\_MLOCK acc (no CVSS)
- [CVE-2018-7720](https://cve.now/CVE-2018-7720.md): A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting (no CVSS)
- [CVE-2018-7721](https://cve.now/CVE-2018-7721.md): Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles inp (no CVSS)
- [CVE-2018-7740](https://cve.now/CVE-2018-7740.md): The resv\_map\_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-03-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.