# CVEs published 2018-07-01

8 CVEs were published on July 1, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-13043](https://cve.now/CVE-2018-13043.md): scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used wit (no CVSS)
- [CVE-2018-13037](https://cve.now/CVE-2018-13037.md): An issue was discovered in jpeg-compressor 0.1. (no CVSS)
- [CVE-2018-13038](https://cve.now/CVE-2018-13038.md): OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature. (no CVSS)
- [CVE-2018-13039](https://cve.now/CVE-2018-13039.md): OpenSID 18.06-pasca has reflected Cross Site Scripting (XSS) via the cari parameter, aka an index.php/first?cari= URI. (no CVSS)
- [CVE-2018-13040](https://cve.now/CVE-2018-13040.md): OpenSID 18.06-pasca has a CSRF vulnerability. (no CVSS)
- [CVE-2018-13041](https://cve.now/CVE-2018-13041.md): The mint function of a smart contract implementation for Link Platform (LNK), an Ethereum ERC20 token, has an integer overflow that allows t (no CVSS)
- [CVE-2018-13032](https://cve.now/CVE-2018-13032.md): ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl\_web.cgi/util\_configlogin\_act URI. (no CVSS)
- [CVE-2018-13033](https://cve.now/CVE-2018-13033.md): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of ser (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-07-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.