CVEs published July 15, 2018
12 CVEs were published on July 15, 2018: 0 critical, 0 high.
- Published
- 12
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- phpoffice/common
- 1
Medium, low and unrated 12
- CVE-2018-14072libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel
- CVE-2018-14073libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c.
- CVE-2018-14068An issue was discovered in SRCMS V2.3.1.
- CVE-2018-14069An issue was discovered in SRCMS V2.3.1.
- CVE-2018-14066The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL inject
- CVE-2018-14063The increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum ERC20 token, has an integer overflow.
- CVE-2018-14064The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP p
- CVE-2018-14065XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.phpoffice/common
- CVE-2018-14010OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.15, R3 before 2.22.15
- CVE-2018-14060OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D before 2.26.4 devices al
- CVE-2018-14055ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege
- CVE-2018-14056ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.