# CVEs published 2018-09-03

31 CVEs were published on September 3, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-16398](https://cve.now/CVE-2018-16398.md): In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=\\/start to bypass a policy in (no CVSS)
- [CVE-2018-16402](https://cve.now/CVE-2018-16402.md): libelf/elf\_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have (no CVSS)
- [CVE-2018-16403](https://cve.now/CVE-2018-16403.md): libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf\_getabbrev in dwarf\_getabbrev.c and dwarf\_hasattr in dwarf (no CVSS)
- [CVE-2018-16405](https://cve.now/CVE-2018-16405.md): An issue was discovered in Mayan EDMS before 3.0.2. (no CVSS, mayan-edms · mayan-edms-ng)
- [CVE-2018-16406](https://cve.now/CVE-2018-16406.md): An issue was discovered in Mayan EDMS before 3.0.2. (no CVSS, mayan-edms)
- [CVE-2018-16407](https://cve.now/CVE-2018-16407.md): An issue was discovered in Mayan EDMS before 3.0.3. (no CVSS, mayan-edms)
- [CVE-2018-16408](https://cve.now/CVE-2018-16408.md): D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings requ (no CVSS)
- [CVE-2018-16409](https://cve.now/CVE-2018-16409.md): In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF. (no CVSS)
- [CVE-2018-16410](https://cve.now/CVE-2018-16410.md): Vanilla before 2.6.1 allows SQL injection via an invitationID array to /profile/deleteInvitation, related to applications/dashboard/models/c (no CVSS)
- [CVE-2018-16412](https://cve.now/CVE-2018-16412.md): ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function. (no CVSS)
- [CVE-2018-16413](https://cve.now/CVE-2018-16413.md): ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the (no CVSS)
- [CVE-2018-16416](https://cve.now/CVE-2018-16416.md): Cross-site request forgery (CSRF) vulnerability in my\_profile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrat (no CVSS)
- [CVE-2018-16397](https://cve.now/CVE-2018-16397.md): In LimeSurvey before 3.14.7, an admin user can leverage a "file upload" question to read an arbitrary file, (no CVSS)
- [CVE-2018-16391](https://cve.now/CVE-2018-16391.md): Several buffer overflows when handling responses from a Muscle Card in muscle\_list\_files in libopensc/card-muscle.c in OpenSC before 0.19.0- (no CVSS)
- [CVE-2018-16392](https://cve.now/CVE-2018-16392.md): Several buffer overflows when handling responses from a TCOS Card in tcos\_select\_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 c (no CVSS)
- [CVE-2018-16393](https://cve.now/CVE-2018-16393.md): Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe\_get\_cert\_len in libopensc/pkcs15-gemsafeV1.c in Open (no CVSS)
- [CVE-2018-16382](https://cve.now/CVE-2018-16382.md): Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regflags.c. (no CVSS)
- [CVE-2018-16385](https://cve.now/CVE-2018-16385.md): ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string. (no CVSS, topthink/framework)
- [CVE-2018-16387](https://cve.now/CVE-2018-16387.md): An issue was discovered in Elefant CMS before 2.0.5. (no CVSS, elefant/cms)
- [CVE-2018-16368](https://cve.now/CVE-2018-16368.md): SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over (no CVSS)
- [CVE-2018-16369](https://cve.now/CVE-2018-16369.md): XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related (no CVSS)
- [CVE-2018-16370](https://cve.now/CVE-2018-16370.md): In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file (no CVSS)
- [CVE-2018-16371](https://cve.now/CVE-2018-16371.md): PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=User\_group&a=index&keyword= (no CVSS)
- [CVE-2018-16372](https://cve.now/CVE-2018-16372.md): The issue was discovered in IdeaCMS through 2016-04-30. (no CVSS)
- [CVE-2018-16373](https://cve.now/CVE-2018-16373.md): Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file\_manager/save. (no CVSS)
- [CVE-2018-16374](https://cve.now/CVE-2018-16374.md): Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings. (no CVSS)
- [CVE-2018-16375](https://cve.now/CVE-2018-16375.md): An issue was discovered in OpenJPEG 2.3.0. (no CVSS)
- [CVE-2018-16376](https://cve.now/CVE-2018-16376.md): An issue was discovered in OpenJPEG 2.3.0. (no CVSS)
- [CVE-2018-16379](https://cve.now/CVE-2018-16379.md): Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen. (no CVSS)
- [CVE-2018-16380](https://cve.now/CVE-2018-16380.md): An issue was discovered in Ogma CMS 0.4 Beta. (no CVSS)
- [CVE-2018-16384](https://cve.now/CVE-2018-16384.md): A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through v3.1.0-rc3 via {\`a\`b} wher (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-09-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.