CVEs published August 25, 2018
27 CVEs were published on August 25, 2018: 0 critical, 0 high.
- Published
- 27
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- gleez/cms
- 1
Medium, low and unrated 27
- CVE-2018-15842WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter.
- CVE-2018-15843GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field.
- CVE-2018-15844An issue was discovered in DamiCMS 6.0.0.
- CVE-2018-15845There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.gleez/cms
- CVE-2018-15846An issue was discovered in fledrCMS through 2014-02-03.
- CVE-2018-15847An issue was discovered in puppyCMS 5.1.
- CVE-2018-15848An issue was discovered in portfolioCMS 1.0.5.
- CVE-2018-15849An issue was discovered in portfolioCMS 1.0.5.
- CVE-2018-15850An issue was discovered in REDAXO CMS 4.7.2.
- CVE-2018-15851An issue was discovered in Flexo CMS v0.1.6.
- CVE-2018-15852Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, a
- CVE-2018-15853Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbco
- CVE-2018-15854Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon pa
- CVE-2018-15855Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon pa
- CVE-2018-15856An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local
- CVE-2018-15857An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbc
- CVE-2018-15858Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could b
- CVE-2018-15859Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local
- CVE-2018-15861Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL p
- CVE-2018-15862Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL po
- CVE-2018-15863Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to c
- CVE-2018-15864Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL
- CVE-2018-15870An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12.
- CVE-2018-15871An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12.
- CVE-2018-15874Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active
- CVE-2018-15875Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP
- CVE-2018-15869An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly