# CVEs published 2018-07-04

16 CVEs were published on July 4, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-13145](https://cve.now/CVE-2018-13145.md): The mintToken function of a smart contract implementation for JavaSwapTest (JST), an Ethereum token, has an integer overflow. (no CVSS)
- [CVE-2018-13146](https://cve.now/CVE-2018-13146.md): The mintToken, buy, and sell functions of a smart contract implementation for LEF, an Ethereum token, have an integer overflow. (no CVSS)
- [CVE-2018-13139](https://cve.now/CVE-2018-13139.md): A stack-based buffer overflow in psf\_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (applicati (no CVSS)
- [CVE-2018-13133](https://cve.now/CVE-2018-13133.md): Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows. (no CVSS)
- [CVE-2018-13134](https://cve.now/CVE-2018-13134.md): TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH\_INFO to the /webpages/data URI. (no CVSS)
- [CVE-2018-13136](https://cve.now/CVE-2018-13136.md): The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen. (no CVSS)
- [CVE-2018-11335](https://cve.now/CVE-2018-11335.md): GVToken Genesis Vision (GVT) is a smart contract running on Ethereum. (no CVSS)
- [CVE-2018-11429](https://cve.now/CVE-2018-11429.md): ATLANT (ATL) is a smart contract running on Ethereum. (no CVSS)
- [CVE-2018-13126](https://cve.now/CVE-2018-13126.md): MoxyOnePresale is a smart contract running on Ethereum. (no CVSS)
- [CVE-2018-13127](https://cve.now/CVE-2018-13127.md): SP8DE PreSale Token (DSPX) is a smart contract running on Ethereum. (no CVSS)
- [CVE-2018-13128](https://cve.now/CVE-2018-13128.md): Etherty Token (ETY) is a smart contract running on Ethereum. (no CVSS)
- [CVE-2018-13129](https://cve.now/CVE-2018-13129.md): SP8DE Token (SPX) is a smart contract running on Ethereum. (no CVSS)
- [CVE-2018-13130](https://cve.now/CVE-2018-13130.md): Bitotal (TFUND) is a smart contract running on Ethereum. (no CVSS)
- [CVE-2018-13131](https://cve.now/CVE-2018-13131.md): SpadePreSale is a smart contract running on Ethereum. (no CVSS)
- [CVE-2018-13132](https://cve.now/CVE-2018-13132.md): Spadeico is a smart contract running on Ethereum. (no CVSS)
- [CVE-2018-13144](https://cve.now/CVE-2018-13144.md): The transfer and transferFrom functions of a smart contract implementation for Pandora (PDX), an Ethereum token, have an integer overflow. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-07-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.