# CVEs published 2018-07-19

56 CVEs were published on July 19, 2018: 1 critical, 8 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2018-10869](https://cve.now/CVE-2018-10869.md): redhat-certification does not properly restrict files that can be download through the /download page. (CVSS 7.5, \[UNKNOWN\] redhat-certification)
- [CVE-2018-10870](https://cve.now/CVE-2018-10870.md): redhat-certification does not properly sanitize paths in rhcertStore.py:\_\_saveResultsFile. (CVSS 9.8, redhat-certification rhcertstore.py)
- [CVE-2018-12959](https://cve.now/CVE-2018-12959.md): The approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token, allows attackers to steal assets ( (no CVSS)
- [CVE-2018-14336](https://cve.now/CVE-2018-14336.md): TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addre (no CVSS)
- [CVE-2018-10620](https://cve.now/CVE-2018-10620.md): AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully cra (no CVSS, AVEVA Software InduSoft Web Studio · AVEVA Software InTouch…)
- [CVE-2018-14423](https://cve.now/CVE-2018-14423.md): Division-by-zero vulnerabilities in the functions pi\_next\_pcrl, pi\_next\_cprl, and pi\_next\_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3. (no CVSS)
- [CVE-2018-3857](https://cve.now/CVE-2018-3857.md): An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. (CVSS 8.8, ACD Systems Canvas Draw)
- [CVE-2018-3858](https://cve.now/CVE-2018-3858.md): An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. (CVSS 8.8, ACD Systems Canvas Draw)
- [CVE-2018-3859](https://cve.now/CVE-2018-3859.md): An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. (CVSS 8.8, ACD Systems Canvas Draw)
- [CVE-2018-3860](https://cve.now/CVE-2018-3860.md): An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. (CVSS 8.8, ACD Systems Canvas Draw)
- [CVE-2018-3870](https://cve.now/CVE-2018-3870.md): An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. (CVSS 8.8, ACD Systems Canvas Draw)
- [CVE-2018-3871](https://cve.now/CVE-2018-3871.md): An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. (CVSS 8.8, ACD Systems Canvas Draw)
- [CVE-2018-9062](https://cve.now/CVE-2018-9062.md): BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack (no CVSS, Lenovo Group some Lenovo ThinkPads)
- [CVE-2018-14415](https://cve.now/CVE-2018-14415.md): An issue was discovered in idreamsoft iCMS before 7.0.10. (no CVSS)
- [CVE-2018-14418](https://cve.now/CVE-2018-14418.md): In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI. (no CVSS)
- [CVE-2018-14419](https://cve.now/CVE-2018-14419.md): MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page. (no CVSS)
- [CVE-2018-14420](https://cve.now/CVE-2018-14420.md): MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?an (no CVSS)
- [CVE-2018-14421](https://cve.now/CVE-2018-14421.md): SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v_pic) to /admin/admin\_video.php (aka /bac (no CVSS)
- [CVE-2018-14422](https://cve.now/CVE-2018-14422.md): blog/index.php in SansCMS 0.7 has XSS via the q parameter. (no CVSS)
- [CVE-2018-8018](https://cve.now/CVE-2018-8018.md): In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/ (no CVSS, Apache Software Foundation Apache Ignite · org.apache.ignit…)
- [CVE-2014-0243](https://cve.now/CVE-2014-0243.md): Check\_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check\_mk\_agent/job. (no CVSS)
- [CVE-2014-2302](https://cve.now/CVE-2014-2302.md): The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection att (no CVSS)
- [CVE-2018-7602](https://cve.now/CVE-2018-7602.md): Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 (CVSS 8.1, KEV, Drupal core · drupal/core +1)
- [CVE-2018-14332](https://cve.now/CVE-2018-14332.md): An issue was discovered in Clementine Music Player 1.3.1. (no CVSS)
- [CVE-2018-1529](https://cve.now/CVE-2018-1529.md): IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 through 5.0.2 are vulnera (no CVSS)
- [CVE-2018-1535](https://cve.now/CVE-2018-1535.md): IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through (CVSS 5.4, IBM Rational Rhapsody Design Manager · IBM Rational Softwar…)
- [CVE-2018-1536](https://cve.now/CVE-2018-1536.md): IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through (CVSS 5.4, IBM Rational Software Architect Design Manager · IBM Ration…)
- [CVE-2018-1585](https://cve.now/CVE-2018-1585.md): IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through (CVSS 5.4, IBM Rational Software Architect Design Manager · IBM Ration…)
- [CVE-2018-1587](https://cve.now/CVE-2018-1587.md): IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through (CVSS 4.3, IBM Rational Software Architect Design Manager · IBM Ration…)
- [CVE-2018-5532](https://cve.now/CVE-2018-5532.md): On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be re (no CVSS, F5 Networks BIG-IP)
- [CVE-2018-5533](https://cve.now/CVE-2018-5533.md): Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward pr (no CVSS, F5 Networks BIG-IP)
- [CVE-2018-5534](https://cve.now/CVE-2018-5534.md): Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while proces (no CVSS, F5 Networks BIG-IP)
- [CVE-2018-5535](https://cve.now/CVE-2018-5535.md): On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server (no CVSS, F5 Networks BIG-IP)
- [CVE-2018-5540](https://cve.now/CVE-2018-5540.md): On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0. (no CVSS, F5 Networks BIG-IP · F5 Networks Enterprise Manager +3)
- [CVE-2016-9574](https://cve.now/CVE-2016-9574.md): nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDH (CVSS 5.9, \[UNKNOWN\] nss)
- [CVE-2017-2673](https://cve.now/CVE-2017-2673.md): An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). (CVSS 6.8, \[UNKNOWN\] openstack-keystone · keystone)
- [CVE-2017-7481](https://cve.now/CVE-2017-7481.md): Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. (CVSS 5.3, \[UNKNOWN\] ansible · ansible)
- [CVE-2018-12911](https://cve.now/CVE-2018-12911.md): WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get\_simple\_globs functions in ThirdParty/xdgmime/src (no CVSS)
- [CVE-2018-14404](https://cve.now/CVE-2018-14404.md): A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invali (CVSS 6.5, nokogiri)
- [CVE-2018-14394](https://cve.now/CVE-2018-14394.md): libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero erro (no CVSS)
- [CVE-2018-14395](https://cve.now/CVE-2018-14395.md): libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero err (no CVSS)
- [CVE-2018-14399](https://cve.now/CVE-2018-14399.md): libs\\classes\\attachment.class.php in PHPCMS 9.6.0 allows remote attackers to upload and execute arbitrary PHP code via a .txt?.php#.jpg URI (no CVSS)
- [CVE-2018-14401](https://cve.now/CVE-2018-14401.md): CopyData in AxmlParser.c in AXML Parser through 2018-01-04 has an out-of-bounds read. (no CVSS)
- [CVE-2018-14402](https://cve.now/CVE-2018-14402.md): axmldec 1.2.0 has an out-of-bounds write in the jitana::axml\_parser::parse\_start\_namespace function in lib/jitana/util/axml\_parser.cpp. (no CVSS)
- [CVE-2018-14339](https://cve.now/CVE-2018-14339.md): In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. (no CVSS)
- [CVE-2018-14340](https://cve.now/CVE-2018-14340.md): In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. (no CVSS)
- [CVE-2018-14341](https://cve.now/CVE-2018-14341.md): In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. (no CVSS)
- [CVE-2018-14342](https://cve.now/CVE-2018-14342.md): In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. (no CVSS)
- [CVE-2018-14343](https://cve.now/CVE-2018-14343.md): In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. (no CVSS)
- [CVE-2018-14344](https://cve.now/CVE-2018-14344.md): In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. (no CVSS)
- [CVE-2018-14367](https://cve.now/CVE-2018-14367.md): In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. (no CVSS)
- [CVE-2018-14368](https://cve.now/CVE-2018-14368.md): In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. (no CVSS)
- [CVE-2018-14369](https://cve.now/CVE-2018-14369.md): In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. (no CVSS)
- [CVE-2018-14370](https://cve.now/CVE-2018-14370.md): In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. (no CVSS)
- [CVE-2018-14392](https://cve.now/CVE-2018-14392.md): The New Threads plugin before 1.2 for MyBB has XSS. (no CVSS)
- [CVE-2018-14403](https://cve.now/CVE-2018-14403.md): MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for asso (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-07-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.