CVEs published July 8, 2018
9 CVEs were published on July 8, 2018: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- dolibarr/dolibarr
- 4
- com.github.wxpay:wxpay-sdk
- 1
Medium, low and unrated 9
- CVE-2018-13440The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an
- CVE-2018-13444An issue was discovered in SeaCMS 6.61.
- CVE-2018-13445An issue was discovered in SeaCMS 6.61.
- CVE-2018-13447SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands dolibarr/dolibarr
- CVE-2018-13448SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands dolibarr/dolibarr
- CVE-2018-13449SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands dolibarr/dolibarr
- CVE-2018-13450SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands dolibarr/dolibarr
- CVE-2018-13439WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.com.github.wxpay:wxpay-sdk
- CVE-2018-13433Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element.