# CVEs published 2018-04-24

97 CVEs were published on April 24, 2018: 2 critical, 52 high. Days are UTC.

- [CVE-2013-3947](https://cve.now/CVE-2013-3947.md): Buffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 (Build 1373) allows local users to gain privileges via a crafted 0xA3 (no CVSS)
- [CVE-2013-7245](https://cve.now/CVE-2013-7245.md): The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database du (no CVSS)
- [CVE-2017-17557](https://cve.now/CVE-2017-17557.md): In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. (no CVSS)
- [CVE-2016-8382](https://cve.now/CVE-2016-8382.md): An exploitable heap corruption vulnerability exists in the Doc\_SetSummary functionality of AntennaHouse DMC HTMLFilter. (CVSS 8.3, Antenna House AntennaHouse)
- [CVE-2016-8383](https://cve.now/CVE-2016-8383.md): An exploitable heap corruption vulnerability exists in the Doc\_GetFontTable functionality of AntennaHouse DMC HTMLFilter. (CVSS 8.3, Antenna House AntennaHouse)
- [CVE-2016-8384](https://cve.now/CVE-2016-8384.md): An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter. (CVSS 8.3, Antenna House AntennaHouse)
- [CVE-2016-8728](https://cve.now/CVE-2016-8728.md): An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. (CVSS 8.6, Artifex Software MuPDF)
- [CVE-2016-8729](https://cve.now/CVE-2016-8729.md): An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. (CVSS 7.5, Artifex Software MuPDF)
- [CVE-2016-8730](https://cve.now/CVE-2016-8730.md): An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. (CVSS 8.8, Corel PHOTO-PAINT)
- [CVE-2016-8732](https://cve.now/CVE-2016-8732.md): Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. (CVSS 7.8, Invincea Dell Protected Workspace)
- [CVE-2016-9038](https://cve.now/CVE-2016-9038.md): An exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of Invincea-X 6.1.3-24058. (CVSS 7.8, Invincea X)
- [CVE-2016-9043](https://cve.now/CVE-2016-9043.md): An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Engine (64-Bit) - 18.1. (CVSS 8.8, CorelDRAW)
- [CVE-2017-12081](https://cve.now/CVE-2017-12081.md): An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. (CVSS 8.8, Blender)
- [CVE-2017-12082](https://cve.now/CVE-2017-12082.md): An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite. (CVSS 8.8, Blender)
- [CVE-2017-12086](https://cve.now/CVE-2017-12086.md): An exploitable integer overflow exists in the 'BKE\_mesh\_calc\_normals\_tessface' functionality of the Blender open-source 3d creation suite. (CVSS 8.8, Blender)
- [CVE-2017-12087](https://cve.now/CVE-2017-12087.md): An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18. (CVSS 10.0, geekman Tinysvcmdns)
- [CVE-2017-12099](https://cve.now/CVE-2017-12099.md): An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the Blender open-source 3d creation suite v2.7 (CVSS 8.8, Blender)
- [CVE-2017-12100](https://cve.now/CVE-2017-12100.md): An exploitable integer overflow exists in the 'multires\_load\_old\_dm' functionality of the Blender open-source 3d creation suite v2.78c. (CVSS 8.8, Blender)
- [CVE-2017-12101](https://cve.now/CVE-2017-12101.md): An exploitable integer overflow exists in the 'modifier\_mdef\_compact\_influences' functionality of the Blender open-source 3d creation suite (CVSS 8.8, Blender)
- [CVE-2017-12102](https://cve.now/CVE-2017-12102.md): An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons. (CVSS 8.8, Blender)
- [CVE-2017-12103](https://cve.now/CVE-2017-12103.md): An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font int (CVSS 8.8, Blender)
- [CVE-2017-12104](https://cve.now/CVE-2017-12104.md): An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particle object. (CVSS 8.8, Blender)
- [CVE-2017-12105](https://cve.now/CVE-2017-12105.md): An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier (CVSS 8.8, Blender)
- [CVE-2017-12107](https://cve.now/CVE-2017-12107.md): An memory corruption vulnerability exists in the .PCX parsing functionality of Computerinsel Photoline 20.02. (CVSS 8.8, Computerinsel Photoline)
- [CVE-2017-12108](https://cve.now/CVE-2017-12108.md): An exploitable integer overflow vulnerability exists in the xls\_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. (CVSS 8.8, libxls)
- [CVE-2017-12109](https://cve.now/CVE-2017-12109.md): An exploitable integer overflow vulnerability exists in the xls\_preparseWorkSheet function of libxls 1.4 when handling a MULRK record. (CVSS 8.8, libxls)
- [CVE-2017-12122](https://cve.now/CVE-2017-12122.md): An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2\_image-2.0.2. (CVSS 8.8, Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer)
- [CVE-2017-14440](https://cve.now/CVE-2017-14440.md): An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2\_image-2.0.2. (CVSS 8.8, Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer)
- [CVE-2017-14441](https://cve.now/CVE-2017-14441.md): An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2\_image-2.0.2. (CVSS 8.8, Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer)
- [CVE-2017-14442](https://cve.now/CVE-2017-14442.md): An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2\_image-2.0.2. (CVSS 8.8, Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer)
- [CVE-2017-14448](https://cve.now/CVE-2017-14448.md): An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2\_image-2.0.2. (CVSS 8.8, Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer)
- [CVE-2017-14449](https://cve.now/CVE-2017-14449.md): A double-Free vulnerability exists in the XCF image rendering functionality of SDL2\_image-2.0.2. (CVSS 7.5, Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer)
- [CVE-2017-14450](https://cve.now/CVE-2017-14450.md): A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2\_image-2.0.2. (CVSS 7.1, Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer)
- [CVE-2017-2802](https://cve.now/CVE-2017-2802.md): An exploitable dll hijacking vulnerability exists in the poaService.exe service component of the Dell Precision Optimizer software version 3 (no CVSS, Dell)
- [CVE-2017-2803](https://cve.now/CVE-2017-2803.md): A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. (CVSS 8.8, Corel PHOTO-PAINT)
- [CVE-2017-2804](https://cve.now/CVE-2017-2804.md): A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. (CVSS 8.8, Corel PHOTO-PAINT)
- [CVE-2017-2811](https://cve.now/CVE-2017-2811.md): A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. (CVSS 8.8, Kakadu Software Kakadu SDK)
- [CVE-2017-2812](https://cve.now/CVE-2017-2812.md): A code execution vulnerability exists in the kdu\_buffered\_expand function of the Kakadu SDK 7.9. (CVSS 8.8, Kakadu Software Kakadu SDK)
- [CVE-2017-2832](https://cve.now/CVE-2017-2832.md): An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applica (CVSS 8.8, Foscam Indoor IP Camera)
- [CVE-2017-2833](https://cve.now/CVE-2017-2833.md): An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applica (CVSS 8.8, Foscam Indoor IP Camera)
- [CVE-2017-2834](https://cve.now/CVE-2017-2834.md): An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. (CVSS 8.8, FreeRDP)
- [CVE-2017-2835](https://cve.now/CVE-2017-2835.md): An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. (CVSS 8.8, FreeRDP)
- [CVE-2017-2836](https://cve.now/CVE-2017-2836.md): An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11 (CVSS 6.5, FreeRDP)
- [CVE-2017-2837](https://cve.now/CVE-2017-2837.md): An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. (CVSS 6.5, FreeRDP)
- [CVE-2017-2838](https://cve.now/CVE-2017-2838.md): An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. (CVSS 6.5, FreeRDP)
- [CVE-2017-2839](https://cve.now/CVE-2017-2839.md): An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. (CVSS 6.5, FreeRDP)
- [CVE-2017-2840](https://cve.now/CVE-2017-2840.md): A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. (CVSS 8.8, EZB Systems UltraISO)
- [CVE-2017-2885](https://cve.now/CVE-2017-2885.md): An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. (CVSS 9.8, GNOME libsoup)
- [CVE-2017-2899](https://cve.now/CVE-2017-2899.md): An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. (CVSS 8.8, Blender)
- [CVE-2017-2900](https://cve.now/CVE-2017-2900.md): An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c. (CVSS 8.8, Blender)
- [CVE-2017-2901](https://cve.now/CVE-2017-2901.md): An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. (CVSS 8.8, Blender)
- [CVE-2017-2902](https://cve.now/CVE-2017-2902.md): An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. (CVSS 8.8, Blender)
- [CVE-2017-2903](https://cve.now/CVE-2017-2903.md): An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. (CVSS 8.8, Blender)
- [CVE-2017-2904](https://cve.now/CVE-2017-2904.md): An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. (CVSS 8.8, Blender)
- [CVE-2017-2905](https://cve.now/CVE-2017-2905.md): An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. (CVSS 8.8, Blender)
- [CVE-2017-2906](https://cve.now/CVE-2017-2906.md): An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. (CVSS 8.8, Blender)
- [CVE-2017-2907](https://cve.now/CVE-2017-2907.md): An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. (CVSS 8.8, Blender)
- [CVE-2017-2908](https://cve.now/CVE-2017-2908.md): An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. (CVSS 7.5, Blender)
- [CVE-2017-2918](https://cve.now/CVE-2017-2918.md): An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. (CVSS 8.8, Blender)
- [CVE-2017-2923](https://cve.now/CVE-2017-2923.md): An exploitable heap based buffer overflow vulnerability exists in the 'read\_biff\_next\_record function' of FreeXL 1.0.3. (CVSS 8.8, Alessandro Furieri FreeXL)
- [CVE-2017-2924](https://cve.now/CVE-2017-2924.md): An exploitable heap-based buffer overflow vulnerability exists in the read\_legacy\_biff function of FreeXL 1.0.3. (CVSS 8.8, Alessandro Furieri FreeXL)
- [CVE-2018-3836](https://cve.now/CVE-2018-3836.md): An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. (CVSS 7.0, Dan Bloomberg Leptonica)
- [CVE-2018-1059](https://cve.now/CVE-2018-1059.md): The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing (no CVSS, Red Hat DPDK)
- [CVE-2018-4832](https://cve.now/CVE-2018-4832.md): A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All version (no CVSS, Siemens OpenPCS 7 V7.1 and earlier · Siemens OpenPCS 7 +11)
- [CVE-2016-9587](https://cve.now/CVE-2016-9587.md): Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. (CVSS 6.6, Ansible)
- [CVE-2017-17251](https://cve.now/CVE-2017-17251.md): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V (no CVSS, Huawei Technologies Co. AR120-S, AR1200, AR1200-S, AR150, A…)
- [CVE-2017-17252](https://cve.now/CVE-2017-17252.md): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V (no CVSS, Huawei Technologies Co. AR120-S, AR1200, AR1200-S, AR150, A…)
- [CVE-2017-17253](https://cve.now/CVE-2017-17253.md): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V (no CVSS, Huawei Technologies Co. AR120-S, AR1200, AR1200-S, AR150, A…)
- [CVE-2017-17254](https://cve.now/CVE-2017-17254.md): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V (no CVSS)
- [CVE-2017-17255](https://cve.now/CVE-2017-17255.md): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V (no CVSS, Huawei Technologies Co. AR120-S, AR1200, AR1200-S, AR150, A…)
- [CVE-2017-17256](https://cve.now/CVE-2017-17256.md): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V (no CVSS, Huawei Technologies Co. AR120-S, AR1200, AR1200-S, AR150, A…)
- [CVE-2017-17257](https://cve.now/CVE-2017-17257.md): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V (no CVSS, Huawei Technologies Co. AR120-S, AR1200, AR1200-S, AR150, A…)
- [CVE-2017-17258](https://cve.now/CVE-2017-17258.md): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V (no CVSS, Huawei Technologies Co. AR120-S, AR1200, AR1200-S, AR150, A…)
- [CVE-2017-9654](https://cve.now/CVE-2017-9654.md): The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend sy (no CVSS, Philips DoseWise Portal)
- [CVE-2017-9656](https://cve.now/CVE-2017-9656.md): The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database (no CVSS, Philips DoseWise Portal)
- [CVE-2018-7931](https://cve.now/CVE-2018-7931.md): Huawei AppGallery versions before 8.0.4.301 has a whitelist mechanism bypass vulnerability. (no CVSS, Huawei Technologies Co. AppGallery)
- [CVE-2018-7932](https://cve.now/CVE-2018-7932.md): Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running vulnerability. (no CVSS)
- [CVE-2017-1700](https://cve.now/CVE-2017-1700.md): IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (no CVSS, IBM Rational Team Concert · IBM Rational Engineering Lif… +5)
- [CVE-2017-1725](https://cve.now/CVE-2017-1725.md): IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (no CVSS, IBM Rational Quality Manager · IBM Rational Collaborativ… +5)
- [CVE-2017-1734](https://cve.now/CVE-2017-1734.md): IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (no CVSS, IBM Rational Engineering Lifecycle Manager · IBM Rationa… +5)
- [CVE-2017-7651](https://cve.now/CVE-2017-7651.md): In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large (no CVSS, The Eclipse Foundation Eclipse Mosquitto)
- [CVE-2018-5228](https://cve.now/CVE-2018-5228.md): The /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScr (no CVSS, Atlassian Fisheye and Crucible)
- [CVE-2018-10321](https://cve.now/CVE-2018-10321.md): Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings. (no CVSS)
- [CVE-2018-10322](https://cve.now/CVE-2018-10322.md): The xfs\_dinode\_verify function in fs/xfs/libxfs/xfs\_inode\_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of s (no CVSS)
- [CVE-2018-10323](https://cve.now/CVE-2018-10323.md): The xfs\_bmap\_extents\_to\_btree function in fs/xfs/libxfs/xfs\_bmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial o (no CVSS)
- [CVE-2018-10328](https://cve.now/CVE-2018-10328.md): Momentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account, which allows remote attackers to view the (no CVSS)
- [CVE-2018-10329](https://cve.now/CVE-2018-10329.md): app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter. (no CVSS)
- [CVE-2018-7751](https://cve.now/CVE-2018-7751.md): The svg\_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) (no CVSS)
- [CVE-2018-10305](https://cve.now/CVE-2018-10305.md): The MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15 does not properly use the possible\_users var (no CVSS)
- [CVE-2018-10309](https://cve.now/CVE-2018-10309.md): The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS. (no CVSS)
- [CVE-2018-10311](https://cve.now/CVE-2018-10311.md): A vulnerability was discovered in WUZHI CMS 4.1.0. (no CVSS)
- [CVE-2018-10312](https://cve.now/CVE-2018-10312.md): index.php?m=member&v=pw\_reset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common member. (no CVSS)
- [CVE-2018-10313](https://cve.now/CVE-2018-10313.md): WUZHI CMS 4.1.0 allows persistent XSS via the form%5Bqq\_10%5D parameter to the /index.php?m=member&f=index&v=profile&set\_iframe=1 URI. (no CVSS)
- [CVE-2018-10316](https://cve.now/CVE-2018-10316.md): Netwide Assembler (NASM) 2.14rc0 has an endless while loop in the assemble\_file function of asm/nasm.c because of a globallineno integer ove (no CVSS)
- [CVE-2018-10318](https://cve.now/CVE-2018-10318.md): Frog CMS 0.9.5 has XSS via the admin/?/page/edit page\[keywords\] parameter, aka Edit Page Metadata. (no CVSS)
- [CVE-2018-10319](https://cve.now/CVE-2018-10319.md): Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet\[name\] parameter, aka Edit Snippet. (no CVSS)
- [CVE-2018-10320](https://cve.now/CVE-2018-10320.md): Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout\[name\] parameter, aka Edit Layout. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-04-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.