# CVEs published 2018-07-22

3 CVEs were published on July 22, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-14505](https://cve.now/CVE-2018-14505.md): mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py. (no CVSS, mitmproxy)
- [CVE-2018-14500](https://cve.now/CVE-2018-14500.md): joyplus-cms 1.6.0 has XSS via the manager/collect/collect\_vod\_zhuiju.php keyword parameter. (no CVSS)
- [CVE-2018-14501](https://cve.now/CVE-2018-14501.md): manager/admin\_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m\_id=1 AND SLEEP(5)" (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-07-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.