CVEs published April 21, 2018
10 CVEs were published on April 21, 2018: 0 critical, 0 high.
- Published
- 10
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 10
- CVE-2017-15640app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter.
- CVE-2018-10126ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_f
- CVE-2018-10283CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action.
- CVE-2018-10284Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp eve_cod parameter.
- CVE-2018-10265An issue was discovered in HongCMS v3.0.0.
- CVE-2018-10266BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI.
- CVE-2018-10267WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=add_post URI.
- CVE-2018-10268An issue was discovered in FastAdmin V1.0.0.20180417_beta.
- CVE-2018-10254Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file.
- CVE-2018-10253Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.