# CVEs published 2018-03-25 35 CVEs were published on March 25, 2018: 0 critical, 0 high. Days are UTC. - [CVE-2018-9018](https://cve.now/CVE-2018-9018.md): In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. (no CVSS) - [CVE-2018-8817](https://cve.now/CVE-2018-8817.md): Wampserver before 3.1.3 has CSRF in add\_vhost.php. (no CVSS) - [CVE-2018-8978](https://cve.now/CVE-2018-8978.md): Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI. (no CVSS) - [CVE-2018-8979](https://cve.now/CVE-2018-8979.md): Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI. (no CVSS) - [CVE-2018-9010](https://cve.now/CVE-2018-9010.md): Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServe (no CVSS) - [CVE-2018-9014](https://cve.now/CVE-2018-9014.md): dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr\_sn= request. (no CVSS) - [CVE-2018-9015](https://cve.now/CVE-2018-9015.md): dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr\_sn parameter (aka the CMS search box). (no CVSS) - [CVE-2018-9016](https://cve.now/CVE-2018-9016.md): dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI. (no CVSS) - [CVE-2018-9017](https://cve.now/CVE-2018-9017.md): dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI. (no CVSS) - [CVE-2018-7719](https://cve.now/CVE-2018-7719.md): Acrolinx Server before 5.2.5 on Windows allows Directory Traversal. (no CVSS) - [CVE-2018-8947](https://cve.now/CVE-2018-8947.md): rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attack (no CVSS, rap2hpoutre/laravel-log-viewer) - [CVE-2018-8975](https://cve.now/CVE-2018-8975.md): The pm\_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-b (no CVSS) - [CVE-2018-8977](https://cve.now/CVE-2018-8977.md): In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn\_int.cpp allows remote attackers to cause a denial of service (invali (no CVSS) - [CVE-2018-8988](https://cve.now/CVE-2018-8988.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS) - [CVE-2018-8989](https://cve.now/CVE-2018-8989.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS) - [CVE-2018-8990](https://cve.now/CVE-2018-8990.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS) - [CVE-2018-8991](https://cve.now/CVE-2018-8991.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS) - [CVE-2018-8992](https://cve.now/CVE-2018-8992.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS) - [CVE-2018-8993](https://cve.now/CVE-2018-8993.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS) - [CVE-2018-8994](https://cve.now/CVE-2018-8994.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS) - [CVE-2018-8995](https://cve.now/CVE-2018-8995.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS) - [CVE-2018-8996](https://cve.now/CVE-2018-8996.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS) - [CVE-2018-8997](https://cve.now/CVE-2018-8997.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS) - [CVE-2018-8998](https://cve.now/CVE-2018-8998.md): In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor\_x86.sys) allows local users to cause a denial of service (BSOD) or possi (no CVSS) - [CVE-2018-8999](https://cve.now/CVE-2018-8999.md): In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor\_win7\_x64.sys) allows local users to cause a denial of service (BSOD) or (no CVSS) - [CVE-2018-9000](https://cve.now/CVE-2018-9000.md): In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor\_x86.sys) allows local users to cause a denial of service (BSOD) or possi (no CVSS) - [CVE-2018-9001](https://cve.now/CVE-2018-9001.md): In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor\_win7\_x64.sys) allows local users to cause a denial of service (BSOD) or (no CVSS) - [CVE-2018-9002](https://cve.now/CVE-2018-9002.md): In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor\_win7\_x64.sys) allows local users to cause a denial of service (BSOD) or (no CVSS) - [CVE-2018-9003](https://cve.now/CVE-2018-9003.md): In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor\_x86.sys) allows local users to cause a denial of service (BSOD) or possi (no CVSS) - [CVE-2018-9004](https://cve.now/CVE-2018-9004.md): In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor\_x86.sys) allows local users to cause a denial of service (BSOD) or possi (no CVSS) - [CVE-2018-9005](https://cve.now/CVE-2018-9005.md): In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor\_win7\_x64.sys) allows local users to cause a denial of service (BSOD) or (no CVSS) - [CVE-2018-9006](https://cve.now/CVE-2018-9006.md): In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor\_win7\_x64.sys) allows local users to cause a denial of service (BSOD) or (no CVSS) - [CVE-2018-9007](https://cve.now/CVE-2018-9007.md): In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor\_x86.sys) allows local users to cause a denial of service (BSOD) or possi (no CVSS) - [CVE-2018-9009](https://cve.now/CVE-2018-9009.md): In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file. (no CVSS) - [CVE-2018-8976](https://cve.now/CVE-2018-8976.md): In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-03-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.