CVEs published April 15, 2018
7 CVEs were published on April 15, 2018: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 7
- CVE-2018-10121plugins/box/pages/pages.admin.php in Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and en
- CVE-2018-10119sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm
- CVE-2018-10120The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validat
- CVE-2018-9153The plugin upload component in Z-BlogPHP 1.5.1 allows remote attackers to execute arbitrary PHP code via the app_id parameter to zb_users/pl
- CVE-2018-9169Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/plugin_edit.php app_id parameter.
- CVE-2018-10118Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins
- CVE-2018-10117An issue was discovered in idreamsoft iCMS V7.0.7.