# CVEs published 2018-08-05

21 CVEs were published on August 5, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-14958](https://cve.now/CVE-2018-14958.md): An issue was discovered in WeaselCMS v0.3.5. (no CVSS)
- [CVE-2018-14959](https://cve.now/CVE-2018-14959.md): An issue was discovered in WeaselCMS v0.3.5. (no CVSS)
- [CVE-2018-14939](https://cve.now/CVE-2018-14939.md): The get\_app\_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environment (no CVSS)
- [CVE-2018-14940](https://cve.now/CVE-2018-14940.md): PHPCMS 9 allows remote attackers to cause a denial of service (resource consumption) via large font\_size, height, and width parameters in an (no CVSS)
- [CVE-2018-14941](https://cve.now/CVE-2018-14941.md): Harmonic NSG 9000 devices allow remote authenticated users to read the webapp.py source code via a direct request for the /webapp.py URI. (no CVSS)
- [CVE-2018-14942](https://cve.now/CVE-2018-14942.md): Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "POST /PY/EMULATION\_GE (no CVSS)
- [CVE-2018-14943](https://cve.now/CVE-2018-14943.md): Harmonic NSG 9000 devices have a default password of nsgadmin for the admin account, a default password of nsgguest for the guest account, a (no CVSS)
- [CVE-2018-14944](https://cve.now/CVE-2018-14944.md): An issue has been found in jpeg\_encoder through 2015-11-27. (no CVSS)
- [CVE-2018-14945](https://cve.now/CVE-2018-14945.md): An issue has been found in jpeg\_encoder through 2015-11-27. (no CVSS)
- [CVE-2018-14946](https://cve.now/CVE-2018-14946.md): An issue has been found in PDF2JSON 0.69. (no CVSS)
- [CVE-2018-14947](https://cve.now/CVE-2018-14947.md): An issue has been found in PDF2JSON 0.69. (no CVSS)
- [CVE-2018-14948](https://cve.now/CVE-2018-14948.md): An issue has been found in dilawar sound through 2017-11-27. (no CVSS)
- [CVE-2018-14950](https://cve.now/CVE-2018-14950.md): The mail message display page in SquirrelMail through 1.4.22 has XSS via a "\<svg\>\<a xlink:href=" attack. (no CVSS)
- [CVE-2018-14951](https://cve.now/CVE-2018-14951.md): The mail message display page in SquirrelMail through 1.4.22 has XSS via a "\<form action='data:text" attack. (no CVSS)
- [CVE-2018-14952](https://cve.now/CVE-2018-14952.md): The mail message display page in SquirrelMail through 1.4.22 has XSS via a "\<math\>\<maction xlink:href=" attack. (no CVSS)
- [CVE-2018-14953](https://cve.now/CVE-2018-14953.md): The mail message display page in SquirrelMail through 1.4.22 has XSS via a "\<math xlink:href=" attack. (no CVSS)
- [CVE-2018-14954](https://cve.now/CVE-2018-14954.md): The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute. (no CVSS)
- [CVE-2018-14955](https://cve.now/CVE-2018-14955.md): The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute). (no CVSS)
- [CVE-2018-14938](https://cve.now/CVE-2018-14938.md): An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. (no CVSS)
- [CVE-2018-14936](https://cve.now/CVE-2018-14936.md): The Add page option in my little forum 2.4.12 allows XSS via the Title field. (no CVSS)
- [CVE-2018-14937](https://cve.now/CVE-2018-14937.md): The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-08-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.