# CVEs published 2018-04-23

27 CVEs were published on April 23, 2018: 0 critical, 4 high. Days are UTC.

- [CVE-2018-10303](https://cve.now/CVE-2018-10303.md): A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y (no CVSS)
- [CVE-2017-7893](https://cve.now/CVE-2017-7893.md): In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master. (no CVSS, salt)
- [CVE-2016-9599](https://cve.now/CVE-2016-9599.md): puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the crea (CVSS 7.1, puppet-tripleo)
- [CVE-2016-9601](https://cve.now/CVE-2016-9601.md): ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2\_decode\_gray\_scale\_imag (CVSS 5.3, ghostscript)
- [CVE-2018-6491](https://cve.now/CVE-2018-6491.md): MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability (CVSS 8.1, Micro Focus Universal CMDB)
- [CVE-2018-1106](https://cve.now/CVE-2018-1106.md): An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signe (no CVSS, Red Hat PackageKit)
- [CVE-2016-9594](https://cve.now/CVE-2016-9594.md): curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. (CVSS 6.5, curl)
- [CVE-2018-10302](https://cve.now/CVE-2018-10302.md): A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-j (no CVSS)
- [CVE-2018-8781](https://cve.now/CVE-2018-8781.md): The udl\_fb\_mmap function in drivers/gpu/drm/udl/udl\_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflo (no CVSS, Check Point Software Technologies Linux Kernel)
- [CVE-2016-9586](https://cve.now/CVE-2016-9586.md): curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the pr (CVSS 5.9, redhat curl)
- [CVE-2017-17833](https://cve.now/CVE-2017-17833.md): OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-se (no CVSS)
- [CVE-2018-10300](https://cve.now/CVE-2018-10300.md): Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to in (no CVSS)
- [CVE-2018-10301](https://cve.now/CVE-2018-10301.md): Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attacke (no CVSS)
- [CVE-2018-8880](https://cve.now/CVE-2018-8880.md): Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP informat (no CVSS)
- [CVE-2018-9921](https://cve.now/CVE-2018-9921.md): In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the web- (no CVSS)
- [CVE-2018-4847](https://cve.now/CVE-2018-4847.md): A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions \< V1.4). (no CVSS, Siemens AG SIMATIC WinCC OA Operator iOS App)
- [CVE-2017-14458](https://cve.now/CVE-2017-14458.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 8.3.2.25013. (CVSS 8.8, Talos Foxit)
- [CVE-2018-3850](https://cve.now/CVE-2018-3850.md): An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. (CVSS 8.8, Talos Foxit)
- [CVE-2017-13073](https://cve.now/CVE-2017-13073.md): Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allow (no CVSS, QNAP Photo Station)
- [CVE-2018-10233](https://cve.now/CVE-2018-10233.md): The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. (no CVSS)
- [CVE-2018-10234](https://cve.now/CVE-2018-10234.md): Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Cust (no CVSS)
- [CVE-2017-1473](https://cve.now/CVE-2017-1473.md): IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms tha (no CVSS, IBM Security Access Manager)
- [CVE-2017-1486](https://cve.now/CVE-2017-1486.md): IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. (no CVSS, IBM Cognos Business Intelligence)
- [CVE-2017-1701](https://cve.now/CVE-2017-1701.md): IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption al (no CVSS, IBM Rational Team Concert)
- [CVE-2017-1764](https://cve.now/CVE-2017-1764.md): IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to (no CVSS, IBM Cognos Business Intelligence)
- [CVE-2017-1786](https://cve.now/CVE-2017-1786.md): IBM WebSphere MQ 8.0 through 8.0.0.8 and 9.0 through 9.0.4 under special circumstances could allow an authenticated user to consume all reso (no CVSS, IBM MQ)
- [CVE-2018-10299](https://cve.now/CVE-2018-10299.md): An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), the Ethereum ERC20 tok (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-04-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.