# CVEs published 2018-04-01

8 CVEs were published on April 1, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-9172](https://cve.now/CVE-2018-9172.md): The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes. (no CVSS)
- [CVE-2018-6849](https://cve.now/CVE-2018-6849.md): In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https:// (no CVSS)
- [CVE-2018-9149](https://cve.now/CVE-2018-9149.md): The Zyxel Multy X (AC3000 Tri-Band WiFi System) device doesn't use a suitable mechanism to protect the UART. (no CVSS)
- [CVE-2018-9156](https://cve.now/CVE-2018-9156.md): An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices. (no CVSS)
- [CVE-2018-9157](https://cve.now/CVE-2018-9157.md): An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. (no CVSS)
- [CVE-2018-9158](https://cve.now/CVE-2018-9158.md): An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. (no CVSS)
- [CVE-2018-9165](https://cve.now/CVE-2018-9165.md): The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy (no CVSS)
- [CVE-2018-9128](https://cve.now/CVE-2018-9128.md): DVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to CVE-2007-3068. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-04-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.