CVEs published July 12, 2018
34 CVEs were published on July 12, 2018: 1 critical, 1 high.
- Published
- 34
- Critical
- 1
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 32
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Apache Software Foundation Apache Spark · org.apache.spa… +1
- 1
- Apache Software Foundation Apache Spark · pyspark +2
- 1
- codiad/codiad
- 1
- F5 Networks BIG-IP APM client for Linux and Mac OSX
- 1
- mailman
- 1
- Micro Focus Fortify Software Security Center
- 1
- Qualcomm Snapdragon Automobile, Snapdragon Mobile
- 1
- qutebrowser cross-site request forgery flaw allows sites to…
- 1
- The Eclipse Foundation Eclipse Vert.x · io.vertx:vertx-web
- 1
Critical 1
High 1
Medium, low and unrated 32
- CVE-2018-14015The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application c
- CVE-2018-14016The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buf
- CVE-2018-14017The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-base
- CVE-2018-14012WolfSight CMS 3.2 allows SQL injection via the PATH_INFO to the default URI.
- CVE-2018-14014In waimai Super Cms 20150505, there is a CSRF vulnerability that can add an admin account via admin.php?m=Member&a=adminadd.
- CVE-2018-12979An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.
- CVE-2018-12980An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.
- CVE-2018-12981An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.
- CVE-2018-13441qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a loca
- CVE-2018-13457qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denia
- CVE-2018-13458qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denia
- CVE-2018-13796An issue was discovered in GNU Mailman before 2.1.28.mailman
- CVE-2018-5529The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an uF5 Networks BIG-IP APM client for Linux and Mac OSX
- CVE-2017-14612"Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not verify X.509 certific
- CVE-2017-14709The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X
- CVE-2017-14710The Shein Group Ltd.
- CVE-2018-14009Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.codiad/codiad
- CVE-2018-13836An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract.
- CVE-2018-14001An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH (SKT), an Ethereum token smart contract.
- CVE-2018-14002An integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an Ethereum token smart contract.
- CVE-2018-14003An integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an Ethereum token smart contract.
- CVE-2018-14004An integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin (GLB), an Ethereum token smart contract.
- CVE-2018-14005An integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an Ethereum token smart contract.
- CVE-2018-14006An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token (NGT), an Ethereum token smart contract.
- CVE-2017-18155While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820AQualcomm Snapdragon Automobile, Snapdragon Mobile
- CVE-2018-12540In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form pThe Eclipse Foundation Eclipse Vert.x · io.vertx:vertx-web
- CVE-2018-1334In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connectApache Software Foundation Apache Spark · pyspark +2
- CVE-2018-8024In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark clusterApache Software Foundation Apache Spark · org.apache.spa… +1
- CVE-2018-13996Genann through 2018-07-08 has a stack-based buffer over-read in genann_train in genann.c.
- CVE-2018-13997Genann through 2018-07-08 has a SEGV in genann_run in genann.c.
- CVE-2018-13998ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.
- CVE-2018-13999Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator).