CVEs published September 3, 2018
31 CVEs were published on September 3, 2018: 0 critical, 0 high.
- Published
- 31
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- mayan-edms
- 2
- elefant/cms
- 1
- mayan-edms · mayan-edms-ng
- 1
- topthink/framework
- 1
Medium, low and unrated 31
- CVE-2018-16398In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=\/start to bypass a policy in
- CVE-2018-16402libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have
- CVE-2018-16403libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf
- CVE-2018-16405An issue was discovered in Mayan EDMS before 3.0.2.mayan-edms · mayan-edms-ng
- CVE-2018-16406An issue was discovered in Mayan EDMS before 3.0.2.mayan-edms
- CVE-2018-16407An issue was discovered in Mayan EDMS before 3.0.3.mayan-edms
- CVE-2018-16408D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings requ
- CVE-2018-16409In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF.
- CVE-2018-16410Vanilla before 2.6.1 allows SQL injection via an invitationID array to /profile/deleteInvitation, related to applications/dashboard/models/c
- CVE-2018-16412ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.
- CVE-2018-16413ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the
- CVE-2018-16416Cross-site request forgery (CSRF) vulnerability in my_profile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrat
- CVE-2018-16397In LimeSurvey before 3.14.7, an admin user can leverage a "file upload" question to read an arbitrary file,
- CVE-2018-16391Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-
- CVE-2018-16392Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 c
- CVE-2018-16393Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in Open
- CVE-2018-16382Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regflags.c.
- CVE-2018-16385ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string.topthink/framework
- CVE-2018-16387An issue was discovered in Elefant CMS before 2.0.5.elefant/cms
- CVE-2018-16368SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over
- CVE-2018-16369XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related
- CVE-2018-16370In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file
- CVE-2018-16371PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=User_group&a=index&keyword=
- CVE-2018-16372The issue was discovered in IdeaCMS through 2016-04-30.
- CVE-2018-16373Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.
- CVE-2018-16374Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.
- CVE-2018-16375An issue was discovered in OpenJPEG 2.3.0.
- CVE-2018-16376An issue was discovered in OpenJPEG 2.3.0.
- CVE-2018-16379Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.
- CVE-2018-16380An issue was discovered in Ogma CMS 0.4 Beta.
- CVE-2018-16384A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through v3.1.0-rc3 via {`a`b} wher