# CVEs published 2018-07-31

128 CVEs were published on July 31, 2018: 0 critical, 1 high. Days are UTC.

- [CVE-2016-8617](https://cve.now/CVE-2016-8617.md): The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least (CVSS 3.3, The Curl Project curl)
- [CVE-2016-8621](https://cve.now/CVE-2016-8621.md): The \`curl\_getdate\` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit shor (CVSS 5.3, The Curl Project curl)
- [CVE-2016-8614](https://cve.now/CVE-2016-8614.md): A flaw was found in Ansible before version 2.2.0. (CVSS 6.3, Red Hat Ansible · ansible)
- [CVE-2016-8618](https://cve.now/CVE-2016-8618.md): The libcurl API function called \`curl\_maprintf()\` before version 7.51.0 can be tricked into doing a double-free due to an unsafe \`size\_t\` mu (CVSS 5.3, The Curl Project curl)
- [CVE-2016-8622](https://cve.now/CVE-2016-8622.md): The URL percent-encoding decode function in libcurl before 7.51.0 is called \`curl\_easy\_unescape\`. (CVSS 3.7, The Curl Project curl)
- [CVE-2016-8624](https://cve.now/CVE-2016-8624.md): curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and (CVSS 5.3, The Curl Project curl)
- [CVE-2016-8611](https://cve.now/CVE-2016-8611.md): A vulnerability was found in Openstack Glance. (CVSS 4.3, The Openstack Foundation openstack-glance)
- [CVE-2016-8613](https://cve.now/CVE-2016-8613.md): A flaw was found in foreman 1.5.1. (CVSS 6.4, The Foreman Project foreman)
- [CVE-2016-8628](https://cve.now/CVE-2016-8628.md): Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. (CVSS 7.6, Red Hat Ansible · ansible)
- [CVE-2016-8631](https://cve.now/CVE-2016-8631.md): The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. (CVSS 6.3, Red Hat Openshift Enterprise)
- [CVE-2018-11617](https://cve.now/CVE-2018-11617.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. (no CVSS, Foxit Reader)
- [CVE-2018-11618](https://cve.now/CVE-2018-11618.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. (no CVSS, Foxit Reader)
- [CVE-2018-11619](https://cve.now/CVE-2018-11619.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. (no CVSS, Foxit Reader)
- [CVE-2018-11620](https://cve.now/CVE-2018-11620.md): This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-11621](https://cve.now/CVE-2018-11621.md): This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-11622](https://cve.now/CVE-2018-11622.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-11623](https://cve.now/CVE-2018-11623.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14241](https://cve.now/CVE-2018-14241.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14242](https://cve.now/CVE-2018-14242.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14243](https://cve.now/CVE-2018-14243.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14244](https://cve.now/CVE-2018-14244.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14245](https://cve.now/CVE-2018-14245.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14246](https://cve.now/CVE-2018-14246.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14247](https://cve.now/CVE-2018-14247.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14248](https://cve.now/CVE-2018-14248.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14249](https://cve.now/CVE-2018-14249.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14250](https://cve.now/CVE-2018-14250.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14251](https://cve.now/CVE-2018-14251.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14252](https://cve.now/CVE-2018-14252.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14253](https://cve.now/CVE-2018-14253.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14254](https://cve.now/CVE-2018-14254.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14255](https://cve.now/CVE-2018-14255.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14256](https://cve.now/CVE-2018-14256.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14257](https://cve.now/CVE-2018-14257.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14258](https://cve.now/CVE-2018-14258.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14259](https://cve.now/CVE-2018-14259.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14260](https://cve.now/CVE-2018-14260.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14261](https://cve.now/CVE-2018-14261.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14262](https://cve.now/CVE-2018-14262.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14263](https://cve.now/CVE-2018-14263.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14264](https://cve.now/CVE-2018-14264.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14265](https://cve.now/CVE-2018-14265.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14266](https://cve.now/CVE-2018-14266.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14267](https://cve.now/CVE-2018-14267.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14268](https://cve.now/CVE-2018-14268.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14269](https://cve.now/CVE-2018-14269.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14270](https://cve.now/CVE-2018-14270.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14271](https://cve.now/CVE-2018-14271.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14272](https://cve.now/CVE-2018-14272.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14273](https://cve.now/CVE-2018-14273.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14274](https://cve.now/CVE-2018-14274.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14275](https://cve.now/CVE-2018-14275.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14276](https://cve.now/CVE-2018-14276.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14277](https://cve.now/CVE-2018-14277.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14278](https://cve.now/CVE-2018-14278.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14279](https://cve.now/CVE-2018-14279.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14280](https://cve.now/CVE-2018-14280.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14281](https://cve.now/CVE-2018-14281.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14282](https://cve.now/CVE-2018-14282.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14283](https://cve.now/CVE-2018-14283.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14284](https://cve.now/CVE-2018-14284.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14285](https://cve.now/CVE-2018-14285.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14286](https://cve.now/CVE-2018-14286.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14287](https://cve.now/CVE-2018-14287.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14288](https://cve.now/CVE-2018-14288.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. (no CVSS, Foxit Reader)
- [CVE-2018-14289](https://cve.now/CVE-2018-14289.md): This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14290](https://cve.now/CVE-2018-14290.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14291](https://cve.now/CVE-2018-14291.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14292](https://cve.now/CVE-2018-14292.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14293](https://cve.now/CVE-2018-14293.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14294](https://cve.now/CVE-2018-14294.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14295](https://cve.now/CVE-2018-14295.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. (no CVSS, Foxit PhantomPDF)
- [CVE-2018-14296](https://cve.now/CVE-2018-14296.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14297](https://cve.now/CVE-2018-14297.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14298](https://cve.now/CVE-2018-14298.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14299](https://cve.now/CVE-2018-14299.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14300](https://cve.now/CVE-2018-14300.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS)
- [CVE-2018-14301](https://cve.now/CVE-2018-14301.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14302](https://cve.now/CVE-2018-14302.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14303](https://cve.now/CVE-2018-14303.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14304](https://cve.now/CVE-2018-14304.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14305](https://cve.now/CVE-2018-14305.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14306](https://cve.now/CVE-2018-14306.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14307](https://cve.now/CVE-2018-14307.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14308](https://cve.now/CVE-2018-14308.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14309](https://cve.now/CVE-2018-14309.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14310](https://cve.now/CVE-2018-14310.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14311](https://cve.now/CVE-2018-14311.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. (no CVSS, Foxit ActiveX Pro SDK)
- [CVE-2018-14312](https://cve.now/CVE-2018-14312.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14313](https://cve.now/CVE-2018-14313.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14314](https://cve.now/CVE-2018-14314.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14315](https://cve.now/CVE-2018-14315.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-14316](https://cve.now/CVE-2018-14316.md): This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2016-8626](https://cve.now/CVE-2016-8626.md): A flaw was found in Red Hat Ceph before 0.94.9-8. (CVSS 6.5, Red Hat Ceph)
- [CVE-2016-8657](https://cve.now/CVE-2016-8657.md): It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas con (no CVSS)
- [CVE-2017-5693](https://cve.now/CVE-2017-5693.md): Firmware in the Intel Puma 5, 6, and 7 Series might experience resource depletion or timeout, which allows a network attacker to create a de (no CVSS, Intel Puma 5, 6, and 7 Series)
- [CVE-2018-10592](https://cve.now/CVE-2018-10592.md): Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 cont (no CVSS, Yokogawa STARDOM FCJ Controllers · Yokogawa STARDOM FCN-… +2)
- [CVE-2018-10603](https://cve.now/CVE-2018-10603.md): Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux\_4-01-601cb47 and prior do not perform authentication of IEC-104 control comm (no CVSS, Martem TELEM GW6 · Martem TELEM GWM)
- [CVE-2018-10607](https://cve.now/CVE-2018-10607.md): Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux\_4-01-601cb47 and prior allow the creation of new connections to one or more (no CVSS, Martem TELEM GW6 · Martem TELEM GWM)
- [CVE-2018-10609](https://cve.now/CVE-2018-10609.md): Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux\_4-01-601cb47 and prior allow improper sanitization of data over a Websocket (no CVSS, Martem TELEM-GW6/GWM)
- [CVE-2017-13652](https://cve.now/CVE-2017-13652.md): NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perfo (no CVSS)
- [CVE-2017-17174](https://cve.now/CVE-2017-17174.md): Some Huawei products RSE6500 V500R002C00; SoftCo V200R003C20SPCb00; VP9660 V600R006C10; eSpace U1981 V100R001C20; V200R003C20; V200R003C30; (no CVSS, Huawei Technologies Co. RSE6500; SoftCo; VP9660; eSpace U19…)
- [CVE-2017-17707](https://cve.now/CVE-2017-17707.md): Due to missing authorization checks, any authenticated user is able to list, upload, or delete attachments to password safe entries in Pleas (no CVSS)
- [CVE-2017-17708](https://cve.now/CVE-2017-17708.md): Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Pas (no CVSS)
- [CVE-2018-11338](https://cve.now/CVE-2018-11338.md): Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attack (no CVSS)
- [CVE-2018-12939](https://cve.now/CVE-2018-12939.md): A directory traversal flaw in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows an authenticated attacker to write to (or potentially (no CVSS)
- [CVE-2018-12940](https://cve.now/CVE-2018-12940.md): Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attack (no CVSS)
- [CVE-2018-12941](https://cve.now/CVE-2018-12941.md): This vulnerability allows remote attackers to execute arbitrary code in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 by adding a system (no CVSS)
- [CVE-2018-12942](https://cve.now/CVE-2018-12942.md): SQL injection vulnerability in the "Users management" functionality in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows authenticate (no CVSS)
- [CVE-2018-12943](https://cve.now/CVE-2018-12943.md): Cross-Site Scripting (XSS) vulnerability in every page that includes the "action" URL parameter in SeedDMS (formerly LetoDMS and MyDMS) befo (no CVSS)
- [CVE-2018-12944](https://cve.now/CVE-2018-12944.md): Persistent Cross-Site Scripting (XSS) vulnerability in the "Categories" feature in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows (no CVSS)
- [CVE-2018-14432](https://cve.now/CVE-2018-14432.md): In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" reque (no CVSS)
- [CVE-2018-14533](https://cve.now/CVE-2018-14533.md): read\_tmp and write\_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to / (no CVSS)
- [CVE-2018-14581](https://cve.now/CVE-2018-14581.md): Redgate .NET Reflector before 10.0.7.774 and SmartAssembly before 6.12.5 allow attackers to execute code by decompiling a compiled .NET obje (no CVSS)
- [CVE-2018-5543](https://cve.now/CVE-2018-5543.md): The F5 BIG-IP Controller for Kubernetes 1.0.0-1.5.0 (k8s-bigip-crtl) passes BIG-IP username and password as command line parameters, which m (no CVSS, F5 Networks F5 Container Connector)
- [CVE-2018-5544](https://cve.now/CVE-2018-5544.md): When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages (pages with a logon agent or a confirm box), the BIG-IP APM may (no CVSS, F5 Networks BIG-IP)
- [CVE-2018-7934](https://cve.now/CVE-2018-7934.md): Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not a (no CVSS, Huawei Technologies Co. Mate 10 Pro)
- [CVE-2018-7947](https://cve.now/CVE-2018-7947.md): Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. (no CVSS, Huawei Technologies Co. Emily-AL00A)
- [CVE-2018-7957](https://cve.now/CVE-2018-7957.md): Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. (no CVSS, Huawei Technologies Co. Victoria-AL00)
- [CVE-2018-7992](https://cve.now/CVE-2018-7992.md): Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier t (no CVSS, Huawei Technologies Co. MediaPad M3; Mate 9 Pro; P10 Plus)
- [CVE-2018-7993](https://cve.now/CVE-2018-7993.md): HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. (no CVSS, Huawei Technologies Co. HUAWEI Mate)
- [CVE-2018-7994](https://cve.now/CVE-2018-7994.md): Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R00 (no CVSS, Huawei Technologies Co. NGFW Module; NIP6300; NIP6600; NIP6…)
- [CVE-2018-1638](https://cve.now/CVE-2018-1638.md): IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) while resetting a user password but enforc (CVSS 5.9, IBM API Connect)
- [CVE-2018-1718](https://cve.now/CVE-2018-1718.md): IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Sterling B2B Integrator)
- [CVE-2018-8019](https://cve.now/CVE-2018-8019.md): When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not correctly handle invalid responses. (no CVSS, Apache Software Foundation Apache Tomcat Native)
- [CVE-2018-8020](https://cve.now/CVE-2018-8020.md): Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check OCSP pre-produced responses, which are lis (no CVSS, Apache Software Foundation Apache Tomcat Native)
- [CVE-2018-8027](https://cve.now/CVE-2018-8027.md): Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor. (no CVSS, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2018-14767](https://cve.now/CVE-2018-14767.md): In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-07-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.