# CVEs published 2018-09-12

69 CVEs were published on September 12, 2018: 0 critical, 1 high. Days are UTC.

- [CVE-2018-16977](https://cve.now/CVE-2018-16977.md): Monstra CMS V3.0.4 has an information leakage risk (e.g., PATH, DOCUMENT\_ROOT, and SERVER\_ADMIN) in libraries/Gelato/ErrorHandler/Resources/ (no CVSS)
- [CVE-2018-16978](https://cve.now/CVE-2018-16978.md): Monstra CMS V3.0.4 has XSS when ones tries to register an account with a crafted password parameter to users/registration, a different vulne (no CVSS)
- [CVE-2018-16979](https://cve.now/CVE-2018-16979.md): Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-294 (no CVSS)
- [CVE-2018-16980](https://cve.now/CVE-2018-16980.md): dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image\_tools/index.jsp fieldName and inode parameters. (no CVSS)
- [CVE-2018-16981](https://cve.now/CVE-2018-16981.md): stb stb\_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi\_\_out\_gif\_code function (no CVSS)
- [CVE-2018-16976](https://cve.now/CVE-2018-16976.md): Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in (no CVSS)
- [CVE-2018-15610](https://cve.now/CVE-2018-15610.md): Improper access controls in IP Office one-X Portal (CVSS 7.3, Avaya IP Office)
- [CVE-2018-16974](https://cve.now/CVE-2018-16974.md): An issue was discovered in Elefant CMS before 2.0.7. (no CVSS, elefant/cms)
- [CVE-2018-16975](https://cve.now/CVE-2018-16975.md): An issue was discovered in Elefant CMS before 2.0.7. (no CVSS, elefant/cms)
- [CVE-2018-16962](https://cve.now/CVE-2018-16962.md): Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges. (no CVSS)
- [CVE-2018-16970](https://cve.now/CVE-2018-16970.md): Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course fil (no CVSS)
- [CVE-2018-16971](https://cve.now/CVE-2018-16971.md): Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course conte (no CVSS)
- [CVE-2018-12148](https://cve.now/CVE-2018-12148.md): Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially (no CVSS, Intel(R) Driver & Support Assistant)
- [CVE-2018-12149](https://cve.now/CVE-2018-12149.md): Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny servic (no CVSS, Intel(R) Extreme Tuning Utility)
- [CVE-2018-12150](https://cve.now/CVE-2018-12150.md): Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute (no CVSS, Intel(R) Extreme Tuning Utility)
- [CVE-2018-12151](https://cve.now/CVE-2018-12151.md): Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer (no CVSS, Intel(R) Extreme Tuning Utility)
- [CVE-2018-12160](https://cve.now/CVE-2018-12160.md): DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated (no CVSS, Intel(R) Data Migration Software)
- [CVE-2018-12162](https://cve.now/CVE-2018-12162.md): Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially exe (no CVSS, Intel(R) OpenVINO(TM) Toolkit for Windows)
- [CVE-2018-12163](https://cve.now/CVE-2018-12163.md): A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileg (no CVSS, Intel IoT Developers Kit)
- [CVE-2018-12168](https://cve.now/CVE-2018-12168.md): Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user t (no CVSS, Intel(R) Computing Improvement Program)
- [CVE-2018-12171](https://cve.now/CVE-2018-12171.md): Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to (no CVSS, Intel(R) Baseboard Management Controller (BMC) firmware)
- [CVE-2018-12175](https://cve.now/CVE-2018-12175.md): Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privile (no CVSS, Intel(R) Distribution for Python)
- [CVE-2018-12176](https://cve.now/CVE-2018-12176.md): Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in info (no CVSS, Intel(R) NUC Kits and Intel(R) Compute Cards)
- [CVE-2018-3616](https://cve.now/CVE-2018-3616.md): Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unaut (no CVSS, Intel(R) Active Management Technology)
- [CVE-2018-3643](https://cve.now/CVE-2018-3643.md): A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) b (no CVSS, Intel(R) Converged Security and Management Engine (CSME) an…)
- [CVE-2018-3655](https://cve.now/CVE-2018-3655.md): A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Ex (no CVSS, Intel(R) CSME before)
- [CVE-2018-3657](https://cve.now/CVE-2018-3657.md): Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially exec (no CVSS, Intel(R) Active Management Technology)
- [CVE-2018-3658](https://cve.now/CVE-2018-3658.md): Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisione (no CVSS, Intel(R) Active Management Technology)
- [CVE-2018-3659](https://cve.now/CVE-2018-3659.md): A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unau (no CVSS, Intel(R) Platform Trust Technology)
- [CVE-2018-3669](https://cve.now/CVE-2018-3669.md): A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthent (no CVSS, Intel(R) Centrino(R) Wireless-N and Intel(R) Centrino(R) Ad…)
- [CVE-2018-3679](https://cve.now/CVE-2018-3679.md): Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated use (no CVSS, Intel(R) Data Center Manager SDK)
- [CVE-2018-3686](https://cve.now/CVE-2018-3686.md): Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbi (no CVSS, INTEL-SA-00086 Detection Tool)
- [CVE-2018-13411](https://cve.now/CVE-2018-13411.md): An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. (no CVSS)
- [CVE-2018-13412](https://cve.now/CVE-2018-13412.md): An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. (no CVSS)
- [CVE-2018-15502](https://cve.now/CVE-2018-15502.md): Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https re (no CVSS)
- [CVE-2018-15834](https://cve.now/CVE-2018-15834.md): In radare2 before 2.9.0, a heap overflow vulnerability exists in the read\_module\_referenced\_functions function in libr/anal/flirt.c via a cr (no CVSS)
- [CVE-2018-16388](https://cve.now/CVE-2018-16388.md): e107\_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the im (no CVSS)
- [CVE-2018-16389](https://cve.now/CVE-2018-16389.md): e107\_admin/banlist.php in e107 2.1.8 allows SQL injection via the old\_ip parameter. (no CVSS)
- [CVE-2018-16605](https://cve.now/CVE-2018-16605.md): D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page. (no CVSS)
- [CVE-2018-16726](https://cve.now/CVE-2018-16726.md): razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component. (no CVSS)
- [CVE-2018-16727](https://cve.now/CVE-2018-16727.md): razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component. (no CVSS)
- [CVE-2018-16728](https://cve.now/CVE-2018-16728.md): feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new. (no CVSS)
- [CVE-2018-16729](https://cve.now/CVE-2018-16729.md): Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages-\>manage under admin.php?actio (no CVSS)
- [CVE-2018-7572](https://cve.now/CVE-2018-7572.md): Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to byp (no CVSS)
- [CVE-2017-18347](https://cve.now/CVE-2017-18347.md): Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the devi (no CVSS)
- [CVE-2018-6924](https://cve.now/CVE-2018-6924.md): In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF head (no CVSS, FreeBSD)
- [CVE-2018-7906](https://cve.now/CVE-2018-7906.md): Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerabil (no CVSS, Huawei Technologies Co. Leland-AL00, Leland-AL00A)
- [CVE-2018-7921](https://cve.now/CVE-2018-7921.md): Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. (no CVSS, Huawei Technologies Co. B315s-22)
- [CVE-2018-7922](https://cve.now/CVE-2018-7922.md): Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to la (no CVSS, Huawei Technologies Co. ALP-L09)
- [CVE-2018-7923](https://cve.now/CVE-2018-7923.md): Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to la (no CVSS, Huawei Technologies Co. ALP-L09)
- [CVE-2018-7939](https://cve.now/CVE-2018-7939.md): Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C6 (no CVSS, Huawei Technologies Co. G9 Lite, Honor 5A, Honor 6X, Honor)
- [CVE-2017-1082](https://cve.now/CVE-2017-1082.md): In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion pattern. (no CVSS, FreeBSD)
- [CVE-2017-1083](https://cve.now/CVE-2017-1083.md): In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. (no CVSS, FreeBSD)
- [CVE-2017-1084](https://cve.now/CVE-2017-1084.md): In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard (no CVSS, FreeBSD)
- [CVE-2017-1085](https://cve.now/CVE-2017-1085.md): In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT\_STACK may turn a read-only memory region below the (no CVSS, FreeBSD)
- [CVE-2018-13799](https://cve.now/CVE-2018-13799.md): A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions \< V3.14-P021). (no CVSS, Siemens AG SIMATIC WinCC OA V3.14 and prior)
- [CVE-2018-13806](https://cve.now/CVE-2018-13806.md): A vulnerability has been identified in SIEMENS TD Keypad Designer (All versions). (no CVSS, Siemens AG SIEMENS TD Keypad Designer)
- [CVE-2018-13807](https://cve.now/CVE-2018-13807.md): A vulnerability has been identified in SCALANCE X300 (All versions \< V4.0.0), SCALANCE X408 (All versions \< V4.0.0), SCALANCE X414 (All vers (no CVSS, Siemens AG SCALANCE X300, SCALANCE X408, SCALANCE X414)
- [CVE-2018-1773](https://cve.now/CVE-2018-1773.md): IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication mechanisms once the in (CVSS 4.3, IBM Datacap)
- [CVE-2018-3882](https://cve.now/CVE-2018-3882.md): An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. (CVSS 5.4)
- [CVE-2018-3883](https://cve.now/CVE-2018-3883.md): An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. (CVSS 5.4, Talos ERPNext)
- [CVE-2018-3884](https://cve.now/CVE-2018-3884.md): An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. (CVSS 5.4, Talos ERPNext)
- [CVE-2018-3885](https://cve.now/CVE-2018-3885.md): An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. (CVSS 5.4, Talos ERPNext)
- [CVE-2018-16950](https://cve.now/CVE-2018-16950.md): Inteno DG400 WU7U\_ELION3.11.6-170614\_1328 devices allow remote attackers to cause a denial of service (connectivity loss) via a series of pa (no CVSS)
- [CVE-2018-16946](https://cve.now/CVE-2018-16946.md): LG LNB\*, LND\*, LNU\*, and LNV\* smart network camera devices have broken access control. (no CVSS)
- [CVE-2018-16947](https://cve.now/CVE-2018-16947.md): An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. (no CVSS)
- [CVE-2018-16948](https://cve.now/CVE-2018-16948.md): An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. (no CVSS)
- [CVE-2018-16949](https://cve.now/CVE-2018-16949.md): An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. (no CVSS)
- [CVE-2018-16951](https://cve.now/CVE-2018-16951.md): xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-09-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.