CVEs published July 28, 2018
9 CVEs were published on July 28, 2018: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- ARM mbed TLS before 2.12.0, before 2.7.5, and before
- 2
Medium, low and unrated 9
- CVE-2018-14679An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.
- CVE-2018-14680An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.
- CVE-2018-14681An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha.
- CVE-2018-14682An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.
- CVE-2018-14685The add function in www/Lib/Lib/Action/Admin/TplAction.class.php in Gxlcms v1.1.4 allows remote attackers to read arbitrary files via a craf
- CVE-2018-14686system/edit_book.php in XYCMS 1.7 has stored XSS via a crafted add_do.php request, related to add_book.php.
- CVE-2018-14678An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x.
- CVE-2018-0497ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based cARM mbed TLS before 2.12.0, before 2.7.5, and before
- CVE-2018-0498ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based cipherARM mbed TLS before 2.12.0, before 2.7.5, and before