# CVEs published 2018-08-01

79 CVEs were published on August 1, 2018: 2 critical, 11 high. Days are UTC.

- [CVE-2015-9262](https://cve.now/CVE-2015-9262.md): \_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execut (no CVSS)
- [CVE-2018-10624](https://cve.now/CVE-2018-10624.md): Johnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive Information (CVSS 4.3, Johnson Controls Metasys System · Johnson Controls BCPro)
- [CVE-2018-0391](https://cve.now/CVE-2018-0391.md): A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to c (no CVSS, Cisco Prime Collaboration Provisioning unknown)
- [CVE-2018-0397](https://cve.now/CVE-2018-0397.md): A vulnerability in Cisco AMP for Endpoints Mac Connector Software installed on Apple macOS 10.12 could allow an unauthenticated, remote atta (no CVSS, Cisco AMP for Endpoints Mac Connector unknown)
- [CVE-2018-0406](https://cve.now/CVE-2018-0406.md): A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker (no CVSS, Cisco Web Security Appliance unknown)
- [CVE-2018-0407](https://cve.now/CVE-2018-0407.md): A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticat (no CVSS, Cisco Small Business 300 Series Managed Switches unknown)
- [CVE-2018-0408](https://cve.now/CVE-2018-0408.md): A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticat (no CVSS, Cisco Small Business 300 Series Managed Switches unknown)
- [CVE-2018-0411](https://cve.now/CVE-2018-0411.md): A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacke (no CVSS, Cisco Unified Communications Manager unknown)
- [CVE-2018-0413](https://cve.now/CVE-2018-0413.md): A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacke (no CVSS, Cisco Identity Services Engine unknown)
- [CVE-2018-12468](https://cve.now/CVE-2018-12468.md): Arbitrary File Upload in GroupWise Administration Console (CVSS 9.1, Micro Focus GroupWise)
- [CVE-2018-3881](https://cve.now/CVE-2018-3881.md): An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. (CVSS 9.4, Focalscope)
- [CVE-2018-3924](https://cve.now/CVE-2018-3924.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096. (CVSS 8.8, Foxit)
- [CVE-2018-3939](https://cve.now/CVE-2018-3939.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. (CVSS 8.0, Foxit)
- [CVE-2018-14777](https://cve.now/CVE-2018-14777.md): An issue was discovered in DataLife Engine (DLE) through 13.0. (no CVSS)
- [CVE-2018-3847](https://cve.now/CVE-2018-3847.md): Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. (CVSS 8.8, NASA CFITSIO)
- [CVE-2016-8640](https://cve.now/CVE-2016-8640.md): A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table (no CVSS, https://github.com/geopython pycsw · pycsw)
- [CVE-2018-10618](https://cve.now/CVE-2018-10618.md): Davolink DVW-3200N all version prior to Version 1.00.06. (no CVSS, Davolink DVW-3200N)
- [CVE-2018-8034](https://cve.now/CVE-2018-8034.md): The host name verification when using TLS with the WebSocket client was missing. (CVSS 7.5, Apache Software Foundation Apache Tomcat · org.apache.tomca…)
- [CVE-2016-8609](https://cve.now/CVE-2016-8609.md): It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. (CVSS 3.7, Red Hat keycloak · org.keycloak:keycloak-core)
- [CVE-2016-9583](https://cve.now/CVE-2016-9583.md): An out-of-bounds heap read vulnerability was found in the jpc\_pi\_nextpcrl() function of jasper before 2.0.6 when processing crafted input. (CVSS 5.5, The Jasper Project jasper)
- [CVE-2018-10894](https://cve.now/CVE-2018-10894.md): It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. (CVSS 5.4, Red Hat keycloak · org.keycloak:keycloak-saml-adapter-co… +1)
- [CVE-2018-10896](https://cve.now/CVE-2018-10896.md): The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh\_deletekeys: 0", disabling cloud-init's deletion of ssh ho (CVSS 4.6, Canonical cloud-init)
- [CVE-2018-10897](https://cve.now/CVE-2018-10897.md): A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configur (CVSS 8.8, The RPM Project yum-utils:)
- [CVE-2018-1595](https://cve.now/CVE-2018-1595.md): IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary commands due to imprope (CVSS 8.8, IBM Spectrum Symphony)
- [CVE-2016-8651](https://cve.now/CVE-2016-8651.md): An input validation flaw was found in the way OpenShift 3 handles requests for images. (CVSS 3.1, Red Hat OpenShift Enterprise)
- [CVE-2016-8654](https://cve.now/CVE-2016-8654.md): A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. (CVSS 7.8, The Jasper Project jasper)
- [CVE-2016-9572](https://cve.now/CVE-2016-9572.md): A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. (CVSS 5.9, The OpenJPEG Project openjpeg)
- [CVE-2016-9579](https://cve.now/CVE-2016-9579.md): A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a buc (CVSS 6.5, Red Hat ceph)
- [CVE-2016-9580](https://cve.now/CVE-2016-9580.md): An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow. (CVSS 3.3, The OpenJPEG Project openjpeg2)
- [CVE-2017-5692](https://cve.now/CVE-2017-5692.md): Out-of-bounds read condition in older versions of some Intel Graphics Driver for Windows code branches allows local users to perform a denia (no CVSS, Mobile, Desktop, Server, Workstation, and Embedded processo…)
- [CVE-2018-12466](https://cve.now/CVE-2018-12466.md): openbuildservice allowed deleting packages via project links (CVSS 4.4, opensuse openbuildservice)
- [CVE-2018-12467](https://cve.now/CVE-2018-12467.md): delete package via link exploit in open buildservice (CVSS 6.0, opensuse openbuildservice)
- [CVE-2018-3650](https://cve.now/CVE-2018-3650.md): Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user (no CVSS, Intel Distribution for Python)
- [CVE-2018-3662](https://cve.now/CVE-2018-3662.md): Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to (no CVSS, Intel Saffron MemoryBase)
- [CVE-2018-3663](https://cve.now/CVE-2018-3663.md): Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged information. (no CVSS, Intel Saffron MemoryBase)
- [CVE-2018-3666](https://cve.now/CVE-2018-3666.md): Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a (no CVSS, Intel Smart Sound Technology)
- [CVE-2018-3670](https://cve.now/CVE-2018-3670.md): Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a (no CVSS, Intel Smart Sound Technology)
- [CVE-2018-3671](https://cve.now/CVE-2018-3671.md): Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information. (no CVSS, Intel Saffron MemoryBase)
- [CVE-2018-3672](https://cve.now/CVE-2018-3672.md): Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a (no CVSS, Intel Smart Sound Technology)
- [CVE-2018-3921](https://cve.now/CVE-2018-3921.md): A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. (CVSS 8.8, Computerinsel Photoline)
- [CVE-2018-3922](https://cve.now/CVE-2018-3922.md): A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. (CVSS 8.8, Computerinsel Photoline)
- [CVE-2018-3923](https://cve.now/CVE-2018-3923.md): A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. (CVSS 8.8, Computerinsel Photoline)
- [CVE-2016-8608](https://cve.now/CVE-2016-8608.md): JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. (CVSS 5.4, Red Hat BRMS)
- [CVE-2016-8641](https://cve.now/CVE-2016-8641.md): A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely ch (CVSS 6.7, Nagios Enterprises nagios)
- [CVE-2016-8648](https://cve.now/CVE-2016-8648.md): It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects passed to MBeans via (CVSS 7.2, Apache Software Foundation Karaf)
- [CVE-2016-8653](https://cve.now/CVE-2016-8653.md): It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it. (CVSS 5.3, Red Hat Fuse)
- [CVE-2016-9581](https://cve.now/CVE-2016-9581.md): An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert\_32s\_C1P1 was found in openjpeg 2.1.2. (CVSS 3.3, The OpenJPEG Project openjpeg2)
- [CVE-2018-10916](https://cve.now/CVE-2018-10916.md): It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integr (CVSS 5.3, \[UNKNOWN\] lftp)
- [CVE-2016-8635](https://cve.now/CVE-2016-8635.md): It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. (CVSS 5.3, Mozilla nss)
- [CVE-2016-8637](https://cve.now/CVE-2016-8637.md): A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'e (CVSS 5.0, The Dracut Project dracut)
- [CVE-2016-8639](https://cve.now/CVE-2016-8639.md): It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. (CVSS 6.1, The Foreman Project foreman)
- [CVE-2018-1999025](https://cve.now/CVE-2018-1999025.md): A man in the middle vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java, ATXValidator.java that (no CVSS, de.tracetronic.jenkins.plugins:ecutest)
- [CVE-2018-1999026](https://cve.now/CVE-2018-1999026.md): A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows a (no CVSS, de.tracetronic.jenkins.plugins:ecutest)
- [CVE-2018-1999027](https://cve.now/CVE-2018-1999027.md): An exposure of sensitive information vulnerability exists in Jenkins SaltStack Plugin 3.1.6 and earlier in SaltAPIBuilder.java, SaltAPIStep. (no CVSS, org.jenkins-ci.plugins:saltstack)
- [CVE-2018-1999028](https://cve.now/CVE-2018-1999028.md): An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and earlier in AccurevSCM.java that allows attack (no CVSS, org.jenkins-ci.plugins:accurev)
- [CVE-2018-1999029](https://cve.now/CVE-2018-1999029.md): A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/index.jelly, ShelvedProj (no CVSS, org.jenkins-ci.plugins:shelve-project-plugin)
- [CVE-2018-1999030](https://cve.now/CVE-2018-1999030.md): An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in A (no CVSS, org.jenkins-ci.plugins:maven-artifact-choicelistprovider)
- [CVE-2018-1999031](https://cve.now/CVE-2018-1999031.md): An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that al (no CVSS, org.jenkins-ci.plugins:meliora-testlab)
- [CVE-2018-1999032](https://cve.now/CVE-2018-1999032.md): A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.jav (no CVSS, org.jenkins-ci.plugins:pangolin-testrail-connector)
- [CVE-2018-1999033](https://cve.now/CVE-2018-1999033.md): An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuil (no CVSS, org.jenkins-ci.plugins:anchore-container-scanner)
- [CVE-2018-1999034](https://cve.now/CVE-2018-1999034.md): A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.java, ProGetConfigur (no CVSS, com.inedo.proget:inedo-proget)
- [CVE-2018-1999035](https://cve.now/CVE-2018-1999035.md): A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterCo (no CVSS, com.inedo.buildmaster:inedo-buildmaster)
- [CVE-2018-1999036](https://cve.now/CVE-2018-1999036.md): An exposure of sensitive information vulnerability exists in Jenkins SSH Agent Plugin 1.15 and earlier in SSHAgentStepExecution.java that ex (no CVSS, org.jenkins-ci.plugins:ssh-agent)
- [CVE-2018-1999037](https://cve.now/CVE-2018-1999037.md): A data modification vulnerability exists in Jenkins Resource Disposer Plugin 0.11 and earlier in AsyncResourceDisposer.java that allows atta (no CVSS, org.jenkins-ci.plugins:resource-disposer)
- [CVE-2018-1999038](https://cve.now/CVE-2018-1999038.md): A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that all (no CVSS, org.jenkins-ci.plugins:publish-over-cifs)
- [CVE-2018-1999039](https://cve.now/CVE-2018-1999039.md): A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in ConfluenceSite.java that allo (no CVSS, org.jenkins-ci.plugins:confluence-publisher)
- [CVE-2018-1999040](https://cve.now/CVE-2018-1999040.md): An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allow (no CVSS, org.csanchez.jenkins.plugins:kubernetes)
- [CVE-2018-1999041](https://cve.now/CVE-2018-1999041.md): An exposure of sensitive information vulnerability exists in Jenkins Tinfoil Security Plugin 1.6.1 and earlier in TinfoilScanRecorder.java t (no CVSS, com.tinfoilsecurity.plugins:tinfoil-scan)
- [CVE-2016-8634](https://cve.now/CVE-2016-8634.md): A vulnerability was found in foreman 1.14.0. (CVSS 6.1, The Foreman Project foreman)
- [CVE-2016-8615](https://cve.now/CVE-2016-8615.md): A flaw was found in curl before version 7.51. (CVSS 5.3, The Curl Project curl)
- [CVE-2016-8616](https://cve.now/CVE-2016-8616.md): A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and pass (CVSS 3.7, The Curl Project curl)
- [CVE-2016-8619](https://cve.now/CVE-2016-8619.md): The function \`read\_data()\` in security.c in curl before version 7.51.0 is vulnerable to memory double free. (CVSS 5.3, The Curl Project curl)
- [CVE-2016-8620](https://cve.now/CVE-2016-8620.md): The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled in (CVSS 6.5, The Curl Project curl)
- [CVE-2016-8623](https://cve.now/CVE-2016-8623.md): A flaw was found in curl before version 7.51.0. (CVSS 3.3, The Curl Project curl)
- [CVE-2016-8625](https://cve.now/CVE-2016-8625.md): curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and (CVSS 5.3, The Curl Project curl)
- [CVE-2016-9573](https://cve.now/CVE-2016-9573.md): An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k\_to\_image tool. (CVSS 6.5, The OpenJPEG Project openjpeg)
- [CVE-2018-11050](https://cve.now/CVE-2018-11050.md): Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over netwo (no CVSS, Dell EMC Networker)
- [CVE-2018-14775](https://cve.now/CVE-2018-14775.md): tss\_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service (system crash) due to incorrect I/O port access c (no CVSS)
- [CVE-2018-14776](https://cve.now/CVE-2018-14776.md): Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-08-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.