# CVEs published 2018-09-13

104 CVEs were published on September 13, 2018: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2018-10637](https://cve.now/CVE-2018-10637.md): A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji Ele (no CVSS, Fuji Electric V-Server Lite)
- [CVE-2018-17024](https://cve.now/CVE-2018-17024.md): admin/index.php in Monstra CMS 3.0.4 allows XSS via the page\_meta\_title parameter in an add\_page action. (no CVSS)
- [CVE-2018-17025](https://cve.now/CVE-2018-17025.md): admin/index.php in Monstra CMS 3.0.4 allows XSS via the page\_meta\_title parameter in an edit\_page action for a page with no special role. (no CVSS)
- [CVE-2018-17026](https://cve.now/CVE-2018-17026.md): admin/index.php in Monstra CMS 3.0.4 allows XSS via the page\_meta\_title parameter in an edit\_page&name=error404 action, a different vulnerab (no CVSS)
- [CVE-2018-1330](https://cve.now/CVE-2018-1330.md): When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. (no CVSS, Apache Software Foundation Apache Mesos · org.apache.mesos:…)
- [CVE-2018-17019](https://cve.now/CVE-2018-17019.md): In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc. (no CVSS)
- [CVE-2018-17020](https://cve.now/CVE-2018-17020.md): ASUS GT-AC5300 devices with firmware through 3.0.0.4.384\_32738 allow remote attackers to cause a denial of service via a single "GET / HTTP/ (no CVSS)
- [CVE-2018-17021](https://cve.now/CVE-2018-17021.md): Cross-site scripting (XSS) vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.384\_32738 allows remote attackers to inject (no CVSS)
- [CVE-2018-17022](https://cve.now/CVE-2018-17022.md): Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.384\_32738 allows remote attackers to cause a denial of service (dev (no CVSS)
- [CVE-2018-17023](https://cve.now/CVE-2018-17023.md): Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384\_32738 allows remote attackers to (no CVSS)
- [CVE-2018-17004](https://cve.now/CVE-2018-17004.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17005](https://cve.now/CVE-2018-17005.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17006](https://cve.now/CVE-2018-17006.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17007](https://cve.now/CVE-2018-17007.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17008](https://cve.now/CVE-2018-17008.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17009](https://cve.now/CVE-2018-17009.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17010](https://cve.now/CVE-2018-17010.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17011](https://cve.now/CVE-2018-17011.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17012](https://cve.now/CVE-2018-17012.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17013](https://cve.now/CVE-2018-17013.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17014](https://cve.now/CVE-2018-17014.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17015](https://cve.now/CVE-2018-17015.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17016](https://cve.now/CVE-2018-17016.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17017](https://cve.now/CVE-2018-17017.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-17018](https://cve.now/CVE-2018-17018.md): An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. (no CVSS)
- [CVE-2018-16741](https://cve.now/CVE-2018-16741.md): An issue was discovered in mgetty before 1.2.1. (no CVSS)
- [CVE-2018-16742](https://cve.now/CVE-2018-16742.md): An issue was discovered in mgetty before 1.2.1. (no CVSS)
- [CVE-2018-16743](https://cve.now/CVE-2018-16743.md): An issue was discovered in mgetty before 1.2.1. (no CVSS)
- [CVE-2018-16744](https://cve.now/CVE-2018-16744.md): An issue was discovered in mgetty before 1.2.1. (no CVSS)
- [CVE-2018-16745](https://cve.now/CVE-2018-16745.md): An issue was discovered in mgetty before 1.2.1. (no CVSS)
- [CVE-2018-16796](https://cve.now/CVE-2018-16796.md): HiScout GRC Suite before 3.1.5 allows Unrestricted Upload of Files with Dangerous Types. (no CVSS)
- [CVE-2018-16999](https://cve.now/CVE-2018-16999.md): Netwide Assembler (NASM) 2.14rc15 has an invalid memory write (segmentation fault) in expand\_smacro in preproc.c, which allows attackers to (no CVSS)
- [CVE-2018-17000](https://cve.now/CVE-2018-17000.md): A NULL pointer dereference in the function \_TIFFmemcmp at tif\_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 al (no CVSS)
- [CVE-2018-1698](https://cve.now/CVE-2018-1698.md): IBM Maximo Asset Management 7.6 through 7.6.3 could allow an unauthenticated attacker to obtain sensitive information from error messages. (CVSS 5.3, IBM Maximo Asset Management)
- [CVE-2018-16987](https://cve.now/CVE-2018-16987.md): Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-p (no CVSS)
- [CVE-2018-15310](https://cve.now/CVE-2018-15310.md): A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritt (no CVSS, F5 Networks BIG-IP APM)
- [CVE-2018-16985](https://cve.now/CVE-2018-16985.md): In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5\_compress\_continue in lz5\_compress.c, related to LZ5\_com (no CVSS)
- [CVE-2018-5545](https://cve.now/CVE-2018-5545.md): On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted (no CVSS, F5 Networks F5 WebSafe Alert Server)
- [CVE-2018-5548](https://cve.now/CVE-2018-5548.md): On BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig\_uri parameter in an undisclosed /vdesk link of APM virtual server con (no CVSS, F5 Networks BIG-IP APM)
- [CVE-2018-5549](https://cve.now/CVE-2018-5549.md): On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when processing SAML Assertion or response contai (no CVSS, F5 Networks BIG-IP APM)
- [CVE-2018-16983](https://cve.now/CVE-2018-16983.md): NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html (no CVSS)
- [CVE-2018-16982](https://cve.now/CVE-2018-16982.md): Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in Bi (no CVSS, opencc)
- [CVE-2018-0965](https://cve.now/CVE-2018-0965.md): A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8269](https://cve.now/CVE-2018-8269.md): A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." Th (no CVSS, Microsoft.Data.OData · Microsoft.AspNetCore.DataProtecti… +1)
- [CVE-2018-8271](https://cve.now/CVE-2018-8271.md): An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in (no CVSS, Microsoft Windows)
- [CVE-2018-8315](https://cve.now/CVE-2018-8315.md): An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting En (no CVSS, Microsoft ChakraCore · Microsoft Internet Explorer +2)
- [CVE-2018-8331](https://cve.now/CVE-2018-8331.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " (no CVSS, Microsoft Office)
- [CVE-2018-8332](https://cve.now/CVE-2018-8332.md): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k (no CVSS, Microsoft Windows · Microsoft Office)
- [CVE-2018-8335](https://cve.now/CVE-2018-8335.md): A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to th (no CVSS, Microsoft Windows Server 2012 R2 · Microsoft Windows RT +2)
- [CVE-2018-8336](https://cve.now/CVE-2018-8336.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8337](https://cve.now/CVE-2018-8337.md): A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem (no CVSS, Microsoft Windows)
- [CVE-2018-8354](https://cve.now/CVE-2018-8354.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8366](https://cve.now/CVE-2018-8366.md): An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsof (no CVSS, Microsoft Edge)
- [CVE-2018-8367](https://cve.now/CVE-2018-8367.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8391](https://cve.now/CVE-2018-8391.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft.ChakraCore)
- [CVE-2018-8392](https://cve.now/CVE-2018-8392.md): A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak (no CVSS, Microsoft Windows)
- [CVE-2018-8393](https://cve.now/CVE-2018-8393.md): A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak (no CVSS, Microsoft Windows)
- [CVE-2018-8409](https://cve.now/CVE-2018-8409.md): A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." (no CVSS, Microsoft System.IO.Pipelines · Microsoft .NET Core +4)
- [CVE-2018-8410](https://cve.now/CVE-2018-8410.md): An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Regis (no CVSS, Microsoft Windows)
- [CVE-2018-8419](https://cve.now/CVE-2018-8419.md): An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel In (no CVSS, Microsoft Windows)
- [CVE-2018-8420](https://cve.now/CVE-2018-8420.md): A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code (no CVSS, Microsoft Windows)
- [CVE-2018-8421](https://cve.now/CVE-2018-8421.md): A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execut (no CVSS, Microsoft .NET Framework)
- [CVE-2018-8422](https://cve.now/CVE-2018-8422.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows (no CVSS, Microsoft Windows)
- [CVE-2018-8424](https://cve.now/CVE-2018-8424.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows (no CVSS, Microsoft Windows)
- [CVE-2018-8425](https://cve.now/CVE-2018-8425.md): A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." T (no CVSS, Microsoft Edge)
- [CVE-2018-8426](https://cve.now/CVE-2018-8426.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (no CVSS, Microsoft SharePoint Server · Microsoft SharePoint)
- [CVE-2018-8428](https://cve.now/CVE-2018-8428.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t (no CVSS, Microsoft SharePoint)
- [CVE-2018-8429](https://cve.now/CVE-2018-8429.md): An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In (no CVSS, Microsoft Excel Viewer · Microsoft Office +1)
- [CVE-2018-8430](https://cve.now/CVE-2018-8430.md): A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execu (no CVSS, Microsoft Word · Microsoft Office)
- [CVE-2018-8431](https://cve.now/CVE-2018-8431.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t (no CVSS, Microsoft SharePoint Server · Microsoft SharePoint)
- [CVE-2018-8433](https://cve.now/CVE-2018-8433.md): An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft Grap (no CVSS, Microsoft Windows)
- [CVE-2018-8434](https://cve.now/CVE-2018-8434.md): An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an auth (no CVSS, Microsoft Windows)
- [CVE-2018-8435](https://cve.now/CVE-2018-8435.md): A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8436](https://cve.now/CVE-2018-8436.md): A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv (no CVSS, Microsoft Windows)
- [CVE-2018-8437](https://cve.now/CVE-2018-8437.md): A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv (no CVSS, Microsoft Windows)
- [CVE-2018-8438](https://cve.now/CVE-2018-8438.md): A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv (no CVSS, Microsoft Windows Server 2012 R2 · Microsoft Windows RT +2)
- [CVE-2018-8439](https://cve.now/CVE-2018-8439.md): A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us (no CVSS, Microsoft Windows Server 2012 R2 · Microsoft Windows RT +2)
- [CVE-2018-8440](https://cve.now/CVE-2018-8440.md): An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows A (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2018-8441](https://cve.now/CVE-2018-8441.md): An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows Subsystem for Linux E (no CVSS, Microsoft Windows)
- [CVE-2018-8442](https://cve.now/CVE-2018-8442.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2018-8443](https://cve.now/CVE-2018-8443.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2018-8444](https://cve.now/CVE-2018-8444.md): An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain request (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8445](https://cve.now/CVE-2018-8445.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2018-8446](https://cve.now/CVE-2018-8446.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2018-8447](https://cve.now/CVE-2018-8447.md): A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-8449](https://cve.now/CVE-2018-8449.md): A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulner (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8452](https://cve.now/CVE-2018-8452.md): An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, a (no CVSS, Microsoft ChakraCore · Microsoft Internet Explorer +2)
- [CVE-2018-8455](https://cve.now/CVE-2018-8455.md): An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation o (no CVSS, Microsoft Windows Server 2012 R2 · Microsoft Windows RT +2)
- [CVE-2018-8456](https://cve.now/CVE-2018-8456.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8457](https://cve.now/CVE-2018-8457.md): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting (no CVSS, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2018-8459](https://cve.now/CVE-2018-8459.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8461](https://cve.now/CVE-2018-8461.md): A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-8462](https://cve.now/CVE-2018-8462.md): An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2018-8463](https://cve.now/CVE-2018-8463.md): An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the (no CVSS, Microsoft Edge)
- [CVE-2018-8464](https://cve.now/CVE-2018-8464.md): An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF R (no CVSS, Microsoft Edge)
- [CVE-2018-8465](https://cve.now/CVE-2018-8465.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8466](https://cve.now/CVE-2018-8466.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8467](https://cve.now/CVE-2018-8467.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2018-8468](https://cve.now/CVE-2018-8468.md): An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." (no CVSS, Microsoft Windows)
- [CVE-2018-8469](https://cve.now/CVE-2018-8469.md): An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the (no CVSS, Microsoft Edge)
- [CVE-2018-8470](https://cve.now/CVE-2018-8470.md): A security feature bypass vulnerability exists in Internet Explorer due to how scripts are handled that allows a universal cross-site script (no CVSS, Microsoft Internet Explorer)
- [CVE-2018-8474](https://cve.now/CVE-2018-8474.md): A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for M (no CVSS, Microsoft Lync)
- [CVE-2018-8475](https://cve.now/CVE-2018-8475.md): A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code E (no CVSS, Microsoft Windows)
- [CVE-2018-8479](https://cve.now/CVE-2018-8479.md): A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform, aka (no CVSS, Microsoft C SDK)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-09-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.