# CVEs published 2018-08-07

12 CVEs were published on August 7, 2018: 0 critical, 1 high. Days are UTC.

- [CVE-2018-5383](https://cve.now/CVE-2018-5383.md): Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange (CVSS 8.0, Apple macOS · Apple iOS +1)
- [CVE-2018-5953](https://cve.now/CVE-2018-5953.md): The swiotlb\_print\_info function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address informat (no CVSS)
- [CVE-2018-5995](https://cve.now/CVE-2018-5995.md): The pcpu\_embed\_first\_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address inform (no CVSS)
- [CVE-2018-11453](https://cve.now/CVE-2018-11453.md): A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA (no CVSS, Siemens AG SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Porta…)
- [CVE-2018-11454](https://cve.now/CVE-2018-11454.md): A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA (no CVSS, Siemens AG SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Porta…)
- [CVE-2018-11455](https://cve.now/CVE-2018-11455.md): A vulnerability has been identified in Automation License Manager 5 (All versions \< 5.3.4.4), Automation License Manager 6 (All versions \< 6 (no CVSS, Siemens AG Automation License Manager 5, Automation License…)
- [CVE-2018-11456](https://cve.now/CVE-2018-11456.md): A vulnerability has been identified in Automation License Manager 5 (All versions \< 5.3.4.4). (no CVSS, Siemens AG Automation License Manager)
- [CVE-2018-12885](https://cve.now/CVE-2018-12885.md): The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly read (no CVSS)
- [CVE-2018-15132](https://cve.now/CVE-2018-15132.md): An issue was discovered in ext/standard/link\_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. (no CVSS)
- [CVE-2018-15130](https://cve.now/CVE-2018-15130.md): ThinkSAAS through 2018-07-25 has XSS via the index.php?app=group&ac=create&ts=do groupdesc parameter. (no CVSS)
- [CVE-2018-1690](https://cve.now/CVE-2018-1690.md): IBM Rhapsody Model Manager 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rhapsody Model Manager)
- [CVE-2018-15129](https://cve.now/CVE-2018-15129.md): ThinkSAAS through 2018-07-25 has XSS via the index.php?app=article&ac=comment&ts=do content parameter. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-08-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.