# CVEs published 2018-07-28

9 CVEs were published on July 28, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-14679](https://cve.now/CVE-2018-14679.md): An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. (no CVSS)
- [CVE-2018-14680](https://cve.now/CVE-2018-14680.md): An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. (no CVSS)
- [CVE-2018-14681](https://cve.now/CVE-2018-14681.md): An issue was discovered in kwajd\_read\_headers in mspack/kwajd.c in libmspack before 0.7alpha. (no CVSS)
- [CVE-2018-14682](https://cve.now/CVE-2018-14682.md): An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. (no CVSS)
- [CVE-2018-14685](https://cve.now/CVE-2018-14685.md): The add function in www/Lib/Lib/Action/Admin/TplAction.class.php in Gxlcms v1.1.4 allows remote attackers to read arbitrary files via a craf (no CVSS)
- [CVE-2018-14686](https://cve.now/CVE-2018-14686.md): system/edit\_book.php in XYCMS 1.7 has stored XSS via a crafted add\_do.php request, related to add\_book.php. (no CVSS)
- [CVE-2018-14678](https://cve.now/CVE-2018-14678.md): An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. (no CVSS)
- [CVE-2018-0497](https://cve.now/CVE-2018-0497.md): ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based c (no CVSS, ARM mbed TLS before 2.12.0, before 2.7.5, and before)
- [CVE-2018-0498](https://cve.now/CVE-2018-0498.md): ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based cipher (no CVSS, ARM mbed TLS before 2.12.0, before 2.7.5, and before)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-07-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.