# CVEs published 2018-09-10

47 CVEs were published on September 10, 2018: 3 critical, 4 high. Days are UTC.

- [CVE-2018-16805](https://cve.now/CVE-2018-16805.md): In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows (no CVSS)
- [CVE-2018-16806](https://cve.now/CVE-2018-16806.md): A Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 ciphe (no CVSS)
- [CVE-2018-11775](https://cve.now/CVE-2018-11775.md): TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM a (no CVSS, Apache Software Foundation Apache ActiveMQ · org.apache.act…)
- [CVE-2018-3875](https://cve.now/CVE-2018-3875.md): An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ET (CVSS 9.9, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2018-14620](https://cve.now/CVE-2018-14620.md): The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq\_clusterer component over HTTP during the build stage. (CVSS 4.7, Red Hat openstack-rabbitmq-container)
- [CVE-2018-14635](https://cve.now/CVE-2018-14635.md): When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassi (CVSS 6.5, The Openstack Project openstack-neutron · neutron)
- [CVE-2018-14636](https://cve.now/CVE-2018-14636.md): Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. (CVSS 5.3, The Openstack Project openstack-neutron · neutron)
- [CVE-2016-7072](https://cve.now/CVE-2016-7072.md): An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated attacker to cause a deni (CVSS 5.3, Open-Xchange pdns)
- [CVE-2018-12608](https://cve.now/CVE-2018-12608.md): An issue was discovered in Docker Moby before 17.06.0. (no CVSS, github.com/docker/docker)
- [CVE-2018-16591](https://cve.now/CVE-2018-16591.md): FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the (no CVSS)
- [CVE-2018-16705](https://cve.now/CVE-2018-16705.md): FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and p (no CVSS)
- [CVE-2016-7035](https://cve.now/CVE-2016-7035.md): An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. (CVSS 8.8, ClusterLabs pacemaker)
- [CVE-2016-7041](https://cve.now/CVE-2016-7041.md): Drools Workbench contains a path traversal vulnerability. (CVSS 6.5, Red Hat Drools Workbench)
- [CVE-2016-7056](https://cve.now/CVE-2016-7056.md): A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 priva (CVSS 5.5, The OpenSSL Project openssl)
- [CVE-2016-7061](https://cve.now/CVE-2016-7061.md): An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. (CVSS 3.5, Red Hat EAP)
- [CVE-2016-9048](https://cve.now/CVE-2016-9048.md): Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. (CVSS 7.4, ProcessMaker Enterprise)
- [CVE-2018-16802](https://cve.now/CVE-2018-16802.md): An issue was discovered in Artifex Ghostscript before 9.25. (no CVSS)
- [CVE-2016-7071](https://cve.now/CVE-2016-7071.md): It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. (CVSS 8.8, Red Hat CFME)
- [CVE-2016-7077](https://cve.now/CVE-2016-7077.md): foreman before 1.14.0 is vulnerable to an information leak. (CVSS 4.3, foreman)
- [CVE-2016-7078](https://cve.now/CVE-2016-7078.md): foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. (CVSS 4.3, foreman)
- [CVE-2018-3896](https://cve.now/CVE-2018-3896.md): An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings H (CVSS 9.9, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2018-3897](https://cve.now/CVE-2018-3897.md): An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings H (CVSS 9.9, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2016-7067](https://cve.now/CVE-2016-7067.md): Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. (CVSS 6.5, Tildeslash monit)
- [CVE-2016-7075](https://cve.now/CVE-2016-7075.md): It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fi (CVSS 7.5, Red Hat OpenShift)
- [CVE-2017-1679](https://cve.now/CVE-2017-1679.md): IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. (CVSS 6.2, IBM OpenPages GRC Platform)
- [CVE-2018-14625](https://cve.now/CVE-2018-14625.md): A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. (CVSS 5.3, \[UNKNOWN\] kernel)
- [CVE-2018-15886](https://cve.now/CVE-2018-15886.md): Monstra CMS 3.0.4 does not properly restrict modified Snippet content, as demonstrated by the admin/index.php?id=snippets&action=edit\_snippe (no CVSS)
- [CVE-2018-16608](https://cve.now/CVE-2018-16608.md): In Monstra CMS 3.0.4, an attacker with 'Editor' privileges can change the password of the administrator via an admin/index.php?id=users&acti (no CVSS)
- [CVE-2018-16797](https://cve.now/CVE-2018-16797.md): A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file wi (no CVSS)
- [CVE-2018-16790](https://cve.now/CVE-2018-16790.md): \_bson\_iter\_next\_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer ove (no CVSS)
- [CVE-2018-16764](https://cve.now/CVE-2018-16764.md): In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss (no CVSS)
- [CVE-2018-16765](https://cve.now/CVE-2018-16765.md): In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss (no CVSS)
- [CVE-2018-16766](https://cve.now/CVE-2018-16766.md): In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss (no CVSS)
- [CVE-2018-16767](https://cve.now/CVE-2018-16767.md): In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss (no CVSS)
- [CVE-2018-16768](https://cve.now/CVE-2018-16768.md): In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss (no CVSS)
- [CVE-2018-16769](https://cve.now/CVE-2018-16769.md): In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss (no CVSS)
- [CVE-2018-16770](https://cve.now/CVE-2018-16770.md): In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss (no CVSS)
- [CVE-2018-16771](https://cve.now/CVE-2018-16771.md): Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php. (no CVSS)
- [CVE-2018-16772](https://cve.now/CVE-2018-16772.md): Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new. (no CVSS)
- [CVE-2018-16773](https://cve.now/CVE-2018-16773.md): EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field. (no CVSS)
- [CVE-2018-16774](https://cve.now/CVE-2018-16774.md): HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete. (no CVSS)
- [CVE-2018-16775](https://cve.now/CVE-2018-16775.md): An issue was discovered in Victor CMS through 2018-05-10. (no CVSS)
- [CVE-2018-16776](https://cve.now/CVE-2018-16776.md): wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page. (no CVSS)
- [CVE-2018-16779](https://cve.now/CVE-2018-16779.md): BlogCMS through 2016-10-25 has XSS via a comment. (no CVSS)
- [CVE-2018-16780](https://cve.now/CVE-2018-16780.md): Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment. (no CVSS)
- [CVE-2018-16781](https://cve.now/CVE-2018-16781.md): ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that la (no CVSS)
- [CVE-2018-16782](https://cve.now/CVE-2018-16782.md): libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr\_read\_rle\_internal function in imagew-bmp.c. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-09-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.