CVEs published August 5, 2018
21 CVEs were published on August 5, 2018: 0 critical, 0 high.
- Published
- 21
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 21
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 21
- CVE-2018-14958An issue was discovered in WeaselCMS v0.3.5.
- CVE-2018-14959An issue was discovered in WeaselCMS v0.3.5.
- CVE-2018-14939The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environment
- CVE-2018-14940PHPCMS 9 allows remote attackers to cause a denial of service (resource consumption) via large font_size, height, and width parameters in an
- CVE-2018-14941Harmonic NSG 9000 devices allow remote authenticated users to read the webapp.py source code via a direct request for the /webapp.py URI.
- CVE-2018-14942Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "POST /PY/EMULATION_GE
- CVE-2018-14943Harmonic NSG 9000 devices have a default password of nsgadmin for the admin account, a default password of nsgguest for the guest account, a
- CVE-2018-14944An issue has been found in jpeg_encoder through 2015-11-27.
- CVE-2018-14945An issue has been found in jpeg_encoder through 2015-11-27.
- CVE-2018-14946An issue has been found in PDF2JSON 0.69.
- CVE-2018-14947An issue has been found in PDF2JSON 0.69.
- CVE-2018-14948An issue has been found in dilawar sound through 2017-11-27.
- CVE-2018-14950The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack.
- CVE-2018-14951The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack.
- CVE-2018-14952The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack.
- CVE-2018-14953The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack.
- CVE-2018-14954The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.
- CVE-2018-14955The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
- CVE-2018-14938An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha.
- CVE-2018-14936The Add page option in my little forum 2.4.12 allows XSS via the Title field.
- CVE-2018-14937The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.