# CVEs published 2018-04-10

50 CVEs were published on April 10, 2018: 0 critical, 2 high. Days are UTC.

- [CVE-2016-9645](https://cve.now/CVE-2016-9645.md): Editing restriction bypass for git revert (no CVSS, ikiwiki)
- [CVE-2018-9995](https://cve.now/CVE-2018-9995.md): TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login (no CVSS)
- [CVE-2018-9996](https://cve.now/CVE-2018-9996.md): An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. (no CVSS)
- [CVE-2018-3837](https://cve.now/CVE-2018-3837.md): An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2\_image-2 (CVSS 5.3, Cisco Systems Simple Direct Media)
- [CVE-2018-3838](https://cve.now/CVE-2018-3838.md): An exploitable information vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2\_image-2.0.2. (CVSS 5.3, Cisco Systems Simple DirectMedia)
- [CVE-2018-3839](https://cve.now/CVE-2018-3839.md): An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2\_image-2.0.2. (CVSS 7.5, Cisco Systems Simple DirectMedia)
- [CVE-2018-9993](https://cve.now/CVE-2018-9993.md): YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/## page (aka a news center page). (no CVSS)
- [CVE-2018-9988](https://cve.now/CVE-2018-9988.md): ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl\_parse\_server\_key\_exchange() that could cause a cras (no CVSS)
- [CVE-2018-9989](https://cve.now/CVE-2018-9989.md): ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl\_parse\_server\_psk\_hint() that could cause a crash on (no CVSS)
- [CVE-2018-8772](https://cve.now/CVE-2018-8772.md): Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen. (no CVSS)
- [CVE-2018-9037](https://cve.now/CVE-2018-9037.md): Monstra CMS 3.0.4 allows remote code execution via an upload\_file request for a .zip file, which is automatically extracted and may contain (no CVSS)
- [CVE-2018-9038](https://cve.now/CVE-2018-9038.md): Monstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager&delete\_dir=./&path=uploads/ request. (no CVSS)
- [CVE-2018-9918](https://cve.now/CVE-2018-9918.md): libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to c (no CVSS)
- [CVE-2018-9985](https://cve.now/CVE-2018-9985.md): The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator. (no CVSS)
- [CVE-2014-0158](https://cve.now/CVE-2014-0158.md): Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2014-1398](https://cve.now/CVE-2014-1398.md): The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass in (no CVSS)
- [CVE-2014-1399](https://cve.now/CVE-2014-1399.md): The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass in (no CVSS)
- [CVE-2014-1400](https://cve.now/CVE-2014-1400.md): The entity\_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended a (no CVSS)
- [CVE-2014-1889](https://cve.now/CVE-2014-1889.md): The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrar (no CVSS)
- [CVE-2014-1946](https://cve.now/CVE-2014-1946.md): OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended acces (no CVSS)
- [CVE-2014-2073](https://cve.now/CVE-2014-2073.md): Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, rel (no CVSS)
- [CVE-2014-2078](https://cve.now/CVE-2014-2078.md): The backend in Open-Xchange (OX) AppSuite 7.4.2 before 7.4.2-rev9 allows remote attackers to obtain sensitive information about user email a (no CVSS)
- [CVE-2014-3114](https://cve.now/CVE-2014-3114.md): The EZPZ One Click Backup (ezpz-one-click-backup) plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary com (no CVSS)
- [CVE-2014-3999](https://cve.now/CVE-2014-3999.md): The Horde\_Ldap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user (no CVSS)
- [CVE-2015-0172](https://cve.now/CVE-2015-0172.md): IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently exe (no CVSS)
- [CVE-2015-1957](https://cve.now/CVE-2015-1957.md): IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3 allows remote authenticated users to obtain sensitive information via a man-i (no CVSS)
- [CVE-2017-14323](https://cve.now/CVE-2017-14323.md): SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive in (no CVSS)
- [CVE-2017-14611](https://cve.now/CVE-2017-14611.md): SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts v (no CVSS)
- [CVE-2018-2403](https://cve.now/CVE-2018-2403.md): Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. (CVSS 5.4, SAP SE SAP Disclosure Management)
- [CVE-2018-2404](https://cve.now/CVE-2018-2404.md): SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation. (CVSS 4.3, SAP SE SAP Disclosure Management)
- [CVE-2018-2405](https://cve.now/CVE-2018-2405.md): SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this (CVSS 5.4, SAP SE SAP Solution Manager)
- [CVE-2018-2406](https://cve.now/CVE-2018-2406.md): Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, (CVSS 5.3, SAP SE SAP Crystal Reports Server, OEM Edition)
- [CVE-2018-2408](https://cve.now/CVE-2018-2408.md): Improper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI Launchpad/Fiorified BI Launchpad. (CVSS 7.3, SAP SE SAP Business Objects)
- [CVE-2018-2409](https://cve.now/CVE-2018-2409.md): Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). (CVSS 6.3, SAP SE SAP Cloud Platform Connector)
- [CVE-2018-2410](https://cve.now/CVE-2018-2410.md): SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting (XSS (CVSS 5.4, SAP SE SAP Business One)
- [CVE-2018-2412](https://cve.now/CVE-2018-2412.md): SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privile (CVSS 3.8, SAP SE SAP Disclosure Management)
- [CVE-2018-2413](https://cve.now/CVE-2018-2413.md): SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privile (CVSS 5.4, SAP SE SAP Disclosure Management)
- [CVE-2017-1081](https://cve.now/CVE-2017-1081.md): In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can (no CVSS, FreeBSD)
- [CVE-2017-18100](https://cve.now/CVE-2017-18100.md): The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross (no CVSS)
- [CVE-2017-18101](https://cve.now/CVE-2017-18101.md): Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7. (no CVSS, Atlassian Jira)
- [CVE-2018-5227](https://cve.now/CVE-2018-5227.md): Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administra (no CVSS, Atlassian Application Links)
- [CVE-2018-9934](https://cve.now/CVE-2018-9934.md): The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header tha (no CVSS)
- [CVE-2018-9922](https://cve.now/CVE-2018-9922.md): An issue was discovered in idreamsoft iCMS through 7.0.7. (no CVSS)
- [CVE-2018-9923](https://cve.now/CVE-2018-9923.md): An issue was discovered in idreamsoft iCMS through 7.0.7. (no CVSS)
- [CVE-2018-9924](https://cve.now/CVE-2018-9924.md): An issue was discovered in idreamsoft iCMS through 7.0.7. (no CVSS)
- [CVE-2018-9925](https://cve.now/CVE-2018-9925.md): An issue was discovered in idreamsoft iCMS through 7.0.7. (no CVSS)
- [CVE-2018-9926](https://cve.now/CVE-2018-9926.md): An issue was discovered in WUZHI CMS 4.1.0. (no CVSS)
- [CVE-2018-9927](https://cve.now/CVE-2018-9927.md): An issue was discovered in WUZHI CMS 4.1.0. (no CVSS)
- [CVE-2018-9928](https://cve.now/CVE-2018-9928.md): Cross-site scripting (XSS) vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the w (no CVSS)
- [CVE-2018-9840](https://cve.now/CVE-2018-9840.md): The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via certain rapi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-04-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.