# CVEs published 2018-07-08

9 CVEs were published on July 8, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-13440](https://cve.now/CVE-2018-13440.md): The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an (no CVSS)
- [CVE-2018-13444](https://cve.now/CVE-2018-13444.md): An issue was discovered in SeaCMS 6.61. (no CVSS)
- [CVE-2018-13445](https://cve.now/CVE-2018-13445.md): An issue was discovered in SeaCMS 6.61. (no CVSS)
- [CVE-2018-13447](https://cve.now/CVE-2018-13447.md): SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands (no CVSS, dolibarr/dolibarr)
- [CVE-2018-13448](https://cve.now/CVE-2018-13448.md): SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands (no CVSS, dolibarr/dolibarr)
- [CVE-2018-13449](https://cve.now/CVE-2018-13449.md): SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands (no CVSS, dolibarr/dolibarr)
- [CVE-2018-13450](https://cve.now/CVE-2018-13450.md): SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands (no CVSS, dolibarr/dolibarr)
- [CVE-2018-13439](https://cve.now/CVE-2018-13439.md): WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL. (no CVSS, com.github.wxpay:wxpay-sdk)
- [CVE-2018-13433](https://cve.now/CVE-2018-13433.md): Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-07-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.