# CVEs published 2018-09-06 51 CVEs were published on September 6, 2018: 0 critical, 3 high. Days are UTC. - [CVE-2018-12234](https://cve.now/CVE-2018-12234.md): A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. (no CVSS) - [CVE-2018-14366](https://cve.now/CVE-2018-14366.md): download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5. (no CVSS) - [CVE-2018-15726](https://cve.now/CVE-2018-15726.md): The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability. (no CVSS) - [CVE-2018-15749](https://cve.now/CVE-2018-15749.md): The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability. (no CVSS) - [CVE-2018-15865](https://cve.now/CVE-2018-15865.md): The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability. (no CVSS) - [CVE-2018-16261](https://cve.now/CVE-2018-16261.md): In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Tr (no CVSS) - [CVE-2018-16285](https://cve.now/CVE-2018-16285.md): The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro\_shortcode\_template action to wp-admin/ad (no CVSS) - [CVE-2018-16310](https://cve.now/CVE-2018-16310.md): Technicolor TG588V V2 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, a (no CVSS) - [CVE-2018-16517](https://cve.now/CVE-2018-16517.md): asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a (no CVSS) - [CVE-2018-16590](https://cve.now/CVE-2018-16590.md): FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication. (no CVSS) - [CVE-2018-16646](https://cve.now/CVE-2018-16646.md): In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. (no CVSS) - [CVE-2018-16647](https://cve.now/CVE-2018-16647.md): In Artifex MuPDF 1.13.0, the pdf\_get\_xref\_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentatio (no CVSS) - [CVE-2018-16648](https://cve.now/CVE-2018-16648.md): In Artifex MuPDF 1.13.0, the fz\_append\_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fau (no CVSS) - [CVE-2018-6320](https://cve.now/CVE-2018-6320.md): A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and P (no CVSS) - [CVE-2018-16640](https://cve.now/CVE-2018-16640.md): ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c. (no CVSS) - [CVE-2018-16641](https://cve.now/CVE-2018-16641.md): ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c. (no CVSS) - [CVE-2018-16642](https://cve.now/CVE-2018-16642.md): The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file (no CVSS) - [CVE-2018-16643](https://cve.now/CVE-2018-16643.md): The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c (no CVSS) - [CVE-2018-16644](https://cve.now/CVE-2018-16644.md): There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11 (no CVSS) - [CVE-2018-16645](https://cve.now/CVE-2018-16645.md): There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick (no CVSS) - [CVE-2018-5389](https://cve.now/CVE-2018-5389.md): CVE-2018-5389 (no CVSS, Strongswan) - [CVE-2018-5391](https://cve.now/CVE-2018-5391.md): The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets (no CVSS, Linux Kernel) - [CVE-2017-14026](https://cve.now/CVE-2017-14026.md): In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may all (no CVSS, Ice Qube Thermal Management Center) - [CVE-2017-16714](https://cve.now/CVE-2017-16714.md): In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without (no CVSS, Ice Qube Thermal Management Center) - [CVE-2018-1000669](https://cve.now/CVE-2018-1000669.md): KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Request Forgery (CSRF) vulnera (no CVSS) - [CVE-2018-1000670](https://cve.now/CVE-2018-1000670.md): KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting (XSS) vulnerability (no CVSS) - [CVE-2018-16622](https://cve.now/CVE-2018-16622.md): Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web (no CVSS) - [CVE-2018-5005](https://cve.now/CVE-2018-5005.md): Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. (no CVSS, Adobe Experience Manager) - [CVE-2018-1000671](https://cve.now/CVE-2018-1000671.md): sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The "referer" parame (no CVSS) - [CVE-2018-1000801](https://cve.now/CVE-2018-1000801.md): okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp (no CVSS) - [CVE-2018-1000658](https://cve.now/CVE-2018-1000658.md): LimeSurvey version prior to 3.14.4 contains a file upload vulnerability in upload functionality that can result in an attacker gaining code (no CVSS) - [CVE-2018-1000659](https://cve.now/CVE-2018-1000659.md): LimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows upload of webshell vulnerability in file upl (no CVSS) - [CVE-2018-1000660](https://cve.now/CVE-2018-1000660.md): TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb26605feed. (no CVSS) - [CVE-2018-1000661](https://cve.now/CVE-2018-1000661.md): jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi\_LogMsg (jsiUtils.c:196) that can result in Crash due (no CVSS) - [CVE-2018-1000663](https://cve.now/CVE-2018-1000663.md): jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function \_jsi\_evalcode from jsiEval.c that can result in Crash due to (no CVSS) - [CVE-2018-1000664](https://cve.now/CVE-2018-1000664.md): daneren2005 DSub for Subsonic (Android client) version 5.4.1 contains a CWE-295: Improper Certificate Validation vulnerability in HTTPS Clie (no CVSS) - [CVE-2018-1000665](https://cve.now/CVE-2018-1000665.md): Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDO (no CVSS, org.dojotoolkit:dojo) - [CVE-2018-1000666](https://cve.now/CVE-2018-1000666.md): GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralizati (no CVSS) - [CVE-2018-1000667](https://cve.now/CVE-2018-1000667.md): NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file du (no CVSS) - [CVE-2018-1000668](https://cve.now/CVE-2018-1000668.md): jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi\_ObjArrayLookup (jsiObj.c:274) that can resul (no CVSS) - [CVE-2018-1000800](https://cve.now/CVE-2018-1000800.md): zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys\_ring\_buf\_put(), sys\_ring\_buf\_get() that can result in (no CVSS) - [CVE-2018-1000773](https://cve.now/CVE-2018-1000773.md): WordPress version 4.9.8 and earlier contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remote code (no CVSS) - [CVE-2018-16604](https://cve.now/CVE-2018-16604.md): An issue was discovered in Nibbleblog v4.0.5. (no CVSS) - [CVE-2018-16606](https://cve.now/CVE-2018-16606.md): In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted papers (Title and Abstrac (no CVSS) - [CVE-2018-11263](https://cve.now/CVE-2018-11263.md): In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio\_id is received from the FW (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2018-1695](https://cve.now/CVE-2018-1695.md): IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to conduct spoofing attack (CVSS 7.3, IBM WebSphere Application Server) - [CVE-2018-14624](https://cve.now/CVE-2018-14624.md): A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. (CVSS 7.5, \[UNKNOWN\] 389-ds-base) - [CVE-2018-14632](https://cve.now/CVE-2018-14632.md): An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before (CVSS 7.7, Red Hat atomic-openshift · github.com/evanphx/json-patch) - [CVE-2018-16459](https://cve.now/CVE-2018-16459.md): An unescaped payload in exceljs \