# CVEs published 2018-08-31

13 CVEs were published on August 31, 2018: 0 critical, 2 high. Days are UTC.

- [CVE-2018-16298](https://cve.now/CVE-2018-16298.md): An issue was discovered in MiniCMS 1.10. (no CVSS)
- [CVE-2018-6257](https://cve.now/CVE-2018-6257.md): NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access c (no CVSS, NVIDIA GeForce Experience)
- [CVE-2018-6258](https://cve.now/CVE-2018-6258.md): NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker w (no CVSS, NVIDIA GeForce Experience)
- [CVE-2018-6259](https://cve.now/CVE-2018-6259.md): NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled, an attacker has system (no CVSS, NVIDIA GeForce Experience)
- [CVE-2018-11054](https://cve.now/CVE-2018-11054.md): RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. (CVSS 7.5, RSA BSAFE Micro Edition Suite)
- [CVE-2018-11055](https://cve.now/CVE-2018-11055.md): RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Me (CVSS 4.4, RSA BSAFE Micro Edition Suite)
- [CVE-2018-11056](https://cve.now/CVE-2018-11056.md): RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contai (CVSS 6.5, RSA BSAFE Micro Edition Suite · RSA BSAFE Crypto-C Micro Ed…)
- [CVE-2018-11057](https://cve.now/CVE-2018-11057.md): RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerab (CVSS 5.9, RSA BSAFE Micro Edition Suite)
- [CVE-2018-16276](https://cve.now/CVE-2018-16276.md): An issue was discovered in yurex\_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. (no CVSS)
- [CVE-2018-16278](https://cve.now/CVE-2018-16278.md): phpkaiyuancms PhpOpenSourceCMS (POSCMS) V3.2.0 allows an unauthenticated user to execute arbitrary SQL commands via the diy/module/member/co (no CVSS)
- [CVE-2018-3787](https://cve.now/CVE-2018-3787.md): Path traversal in simplehttpserver \<v0.2.1 allows listing any file on the server. (no CVSS, HackerOne simplehttpserver · simplehttpserver)
- [CVE-2018-7685](https://cve.now/CVE-2018-7685.md): libzypp does not reevaluate malicious rpms once downloaded (CVSS 7.8, SUSE libzypp)
- [CVE-2018-16275](https://cve.now/CVE-2018-16275.md): OPSWAT MetaDefender before v4.11.2 allows CSV injection. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-08-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
