# CVEs published 2018-03-18

9 CVEs were published on March 18, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-8756](https://cve.now/CVE-2018-8756.md): Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP (no CVSS)
- [CVE-2018-8765](https://cve.now/CVE-2018-8765.md): In 2345 Security Guard 3.6, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have un (no CVSS)
- [CVE-2018-8766](https://cve.now/CVE-2018-8766.md): joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary File Upload issue in manager/editor/upload.php, related to manager/ad (no CVSS)
- [CVE-2018-8767](https://cve.now/CVE-2018-8767.md): joyplus-cms 1.6.0 has XSS in manager/admin\_ajax.php?action=save&tab={pre}vod\_type via the t\_name parameter. (no CVSS)
- [CVE-2018-8768](https://cve.now/CVE-2018-8768.md): In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. (no CVSS, notebook)
- [CVE-2018-8769](https://cve.now/CVE-2018-8769.md): elfutils 0.170 has a buffer over-read in the ebl\_dynamic\_tag\_name function of libebl/ebldynamictagname.c because SYMTAB\_SHNDX is unsupported (no CVSS)
- [CVE-2018-8770](https://cve.now/CVE-2018-8770.md): Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest. (no CVSS)
- [CVE-2017-18239](https://cve.now/CVE-2017-18239.md): A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in (no CVSS, com.jason-goodwin:authentikat-jwt\_2.12)
- [CVE-2018-8754](https://cve.now/CVE-2018-8754.md): The libevt\_record\_values\_read\_event() function in libevt\_record\_values.c in libevt before 2018-03-17 does not properly check for out-of-boun (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-03-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.