CVEs published September 16, 2018
26 CVEs were published on September 16, 2018: 0 critical, 0 high.
- Published
- 26
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- golang.org/x/net
- 1
- quickapps/cms
- 1
Medium, low and unrated 26
- CVE-2018-17108The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by interce
- CVE-2018-17090An issue was discovered in DonLinkage 6.6.8.
- CVE-2018-17091An issue was discovered in DonLinkage 6.6.8.
- CVE-2018-17092An issue was discovered in DonLinkage 6.6.8.
- CVE-2018-17095An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0.
- CVE-2018-17096The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of servi
- CVE-2018-17097The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or
- CVE-2018-17098The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption
- CVE-2018-17100An issue was discovered in LibTIFF 4.0.9.
- CVE-2018-17101An issue was discovered in LibTIFF 4.0.9.
- CVE-2018-17102An issue was discovered in QuickAppsCMS (aka QACMS) through 2.0.0-beta2.quickapps/cms
- CVE-2018-17103An issue was discovered in GetSimple CMS v3.3.13.
- CVE-2018-17104An issue was discovered in Microweber 1.0.7.
- CVE-2018-17106In Tinyftp Tinyftpd 1.1, a buffer overflow exists in the text variable of the do_mkd function in the ftpproto.c file.
- CVE-2018-17062An issue was discovered in SeaCMS 6.64.
- CVE-2018-17085An issue was discovered in OTCMS 3.61.
- CVE-2018-17086An issue was discovered in OTCMS 3.61.
- CVE-2018-17088The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecifi
- CVE-2018-17082The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "
- CVE-2018-16554The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecifi
- CVE-2018-17072JSON++ through 2016-06-15 has a buffer over-read in yyparse() in json.y.
- CVE-2018-17073wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image.
- CVE-2018-17074The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter.
- CVE-2018-17075The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for hgolang.org/x/net
- CVE-2018-17076GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified o
- CVE-2018-17077An issue was discovered in yiqicms through 2016-11-20.