# CVEs published 2018-08-16

15 CVEs were published on August 16, 2018: 0 critical, 1 high. Days are UTC.

- [CVE-2016-9596](https://cve.now/CVE-2016-9596.md): libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service ( (no CVSS)
- [CVE-2016-9598](https://cve.now/CVE-2016-9598.md): libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and app (no CVSS)
- [CVE-2018-11509](https://cve.now/CVE-2018-11509.md): ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are instal (no CVSS)
- [CVE-2018-11511](https://cve.now/CVE-2018-11511.md): The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'a (no CVSS)
- [CVE-2018-12256](https://cve.now/CVE-2018-12256.md): admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file (resulting in remo (no CVSS)
- [CVE-2018-13434](https://cve.now/CVE-2018-13434.md): An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. (no CVSS)
- [CVE-2018-13435](https://cve.now/CVE-2018-13435.md): An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. (no CVSS)
- [CVE-2018-13446](https://cve.now/CVE-2018-13446.md): An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. (no CVSS)
- [CVE-2018-14567](https://cve.now/CVE-2018-14567.md): libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that trig (no CVSS)
- [CVE-2018-15122](https://cve.now/CVE-2018-15122.md): An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute cod (no CVSS)
- [CVE-2018-1712](https://cve.now/CVE-2018-1712.md): IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. (CVSS 8.6, IBM API Connect)
- [CVE-2018-10139](https://cve.now/CVE-2018-10139.md): The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and (no CVSS, Palo Alto Networks PAN-OS)
- [CVE-2018-10140](https://cve.now/CVE-2018-10140.md): The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all manageme (no CVSS, Palo Alto Networks PAN-OS)
- [CVE-2018-11771](https://cve.now/CVE-2018-11771.md): When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to ret (no CVSS, Apache Software Foundation Apache Commons Compress · org.ap…)
- [CVE-2018-1715](https://cve.now/CVE-2018-1715.md): IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Maximo Asset Management)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-08-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.