# CVEs published 2018-08-25

27 CVEs were published on August 25, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-15842](https://cve.now/CVE-2018-15842.md): WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter. (no CVSS)
- [CVE-2018-15843](https://cve.now/CVE-2018-15843.md): GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field. (no CVSS)
- [CVE-2018-15844](https://cve.now/CVE-2018-15844.md): An issue was discovered in DamiCMS 6.0.0. (no CVSS)
- [CVE-2018-15845](https://cve.now/CVE-2018-15845.md): There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add. (no CVSS, gleez/cms)
- [CVE-2018-15846](https://cve.now/CVE-2018-15846.md): An issue was discovered in fledrCMS through 2014-02-03. (no CVSS)
- [CVE-2018-15847](https://cve.now/CVE-2018-15847.md): An issue was discovered in puppyCMS 5.1. (no CVSS)
- [CVE-2018-15848](https://cve.now/CVE-2018-15848.md): An issue was discovered in portfolioCMS 1.0.5. (no CVSS)
- [CVE-2018-15849](https://cve.now/CVE-2018-15849.md): An issue was discovered in portfolioCMS 1.0.5. (no CVSS)
- [CVE-2018-15850](https://cve.now/CVE-2018-15850.md): An issue was discovered in REDAXO CMS 4.7.2. (no CVSS)
- [CVE-2018-15851](https://cve.now/CVE-2018-15851.md): An issue was discovered in Flexo CMS v0.1.6. (no CVSS)
- [CVE-2018-15852](https://cve.now/CVE-2018-15852.md): Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, a (no CVSS)
- [CVE-2018-15853](https://cve.now/CVE-2018-15853.md): Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbco (no CVSS)
- [CVE-2018-15854](https://cve.now/CVE-2018-15854.md): Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon pa (no CVSS)
- [CVE-2018-15855](https://cve.now/CVE-2018-15855.md): Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon pa (no CVSS)
- [CVE-2018-15856](https://cve.now/CVE-2018-15856.md): An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local (no CVSS)
- [CVE-2018-15857](https://cve.now/CVE-2018-15857.md): An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbc (no CVSS)
- [CVE-2018-15858](https://cve.now/CVE-2018-15858.md): Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could b (no CVSS)
- [CVE-2018-15859](https://cve.now/CVE-2018-15859.md): Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local (no CVSS)
- [CVE-2018-15861](https://cve.now/CVE-2018-15861.md): Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL p (no CVSS)
- [CVE-2018-15862](https://cve.now/CVE-2018-15862.md): Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL po (no CVSS)
- [CVE-2018-15863](https://cve.now/CVE-2018-15863.md): Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to c (no CVSS)
- [CVE-2018-15864](https://cve.now/CVE-2018-15864.md): Unchecked NULL pointer usage in resolve\_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL (no CVSS)
- [CVE-2018-15870](https://cve.now/CVE-2018-15870.md): An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. (no CVSS)
- [CVE-2018-15871](https://cve.now/CVE-2018-15871.md): An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. (no CVSS)
- [CVE-2018-15874](https://cve.now/CVE-2018-15874.md): Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -\> Active (no CVSS)
- [CVE-2018-15875](https://cve.now/CVE-2018-15875.md): Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP (no CVSS)
- [CVE-2018-15869](https://cve.now/CVE-2018-15869.md): An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-08-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.