# CVEs published 2018-07-17 32 CVEs were published on July 17, 2018: 0 critical, 0 high. Days are UTC. - [CVE-2018-14349](https://cve.now/CVE-2018-14349.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14350](https://cve.now/CVE-2018-14350.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14351](https://cve.now/CVE-2018-14351.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14352](https://cve.now/CVE-2018-14352.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14353](https://cve.now/CVE-2018-14353.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14354](https://cve.now/CVE-2018-14354.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14355](https://cve.now/CVE-2018-14355.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14356](https://cve.now/CVE-2018-14356.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14357](https://cve.now/CVE-2018-14357.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14358](https://cve.now/CVE-2018-14358.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14359](https://cve.now/CVE-2018-14359.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14360](https://cve.now/CVE-2018-14360.md): An issue was discovered in NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14361](https://cve.now/CVE-2018-14361.md): An issue was discovered in NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14362](https://cve.now/CVE-2018-14362.md): An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-14363](https://cve.now/CVE-2018-14363.md): An issue was discovered in NeoMutt before 2018-07-16. (no CVSS) - [CVE-2018-1612](https://cve.now/CVE-2018-1612.md): IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive inf (CVSS 5.8, IBM QRadar SIEM) - [CVE-2018-14346](https://cve.now/CVE-2018-14346.md): GNU Libextractor before 1.7 has a stack-based buffer overflow in ec\_read\_file\_func (unzip.c). (no CVSS) - [CVE-2018-14347](https://cve.now/CVE-2018-14347.md): GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR\_mpeg\_extract\_method (mpeg\_extractor.c). (no CVSS) - [CVE-2018-13858](https://cve.now/CVE-2018-13858.md): MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows unauthorized remote attackers to reboot or execute ot (no CVSS) - [CVE-2018-13859](https://cve.now/CVE-2018-13859.md): MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remo (no CVSS) - [CVE-2018-13860](https://cve.now/CVE-2018-13860.md): MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18 allows unauthorized remo (no CVSS) - [CVE-2018-13861](https://cve.now/CVE-2018-13861.md): Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allows unauthorized remote attackers to reboot or exec (no CVSS) - [CVE-2018-13862](https://cve.now/CVE-2018-13862.md): Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authe (no CVSS) - [CVE-2018-14345](https://cve.now/CVE-2018-14345.md): An issue was discovered in SDDM through 0.17.0. (no CVSS) - [CVE-2018-6681](https://cve.now/CVE-2018-6681.md): SB10244 - Network Security Management (NSM) - Abuse of Functionality vulnerability (CVSS 5.5, McAfee Network Security Management) - [CVE-2018-13864](https://cve.now/CVE-2018-13864.md): A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when r (no CVSS, com.typesafe.play:play\_2.12) - [CVE-2018-14338](https://cve.now/CVE-2018-14338.md): samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where gli (no CVSS) - [CVE-2018-14337](https://cve.now/CVE-2018-14337.md): The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds (no CVSS) - [CVE-2018-14329](https://cve.now/CVE-2018-14329.md): In HTSlib 1.8, a race condition in cram/cram\_io.c might allow local users to overwrite arbitrary files via a symlink attack. (no CVSS) - [CVE-2018-14331](https://cve.now/CVE-2018-14331.md): An issue was discovered in XiaoCms X1 v20140305. (no CVSS) - [CVE-2018-14333](https://cve.now/CVE-2018-14333.md): TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "\[00 88\] and "\[00 00 00\]" deli (no CVSS) - [CVE-2018-14334](https://cve.now/CVE-2018-14334.md): manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-07-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.