# CVEs published 2018-09-16 26 CVEs were published on September 16, 2018: 0 critical, 0 high. Days are UTC. - [CVE-2018-17108](https://cve.now/CVE-2018-17108.md): The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by interce (no CVSS) - [CVE-2018-17090](https://cve.now/CVE-2018-17090.md): An issue was discovered in DonLinkage 6.6.8. (no CVSS) - [CVE-2018-17091](https://cve.now/CVE-2018-17091.md): An issue was discovered in DonLinkage 6.6.8. (no CVSS) - [CVE-2018-17092](https://cve.now/CVE-2018-17092.md): An issue was discovered in DonLinkage 6.6.8. (no CVSS) - [CVE-2018-17095](https://cve.now/CVE-2018-17095.md): An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. (no CVSS) - [CVE-2018-17096](https://cve.now/CVE-2018-17096.md): The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of servi (no CVSS) - [CVE-2018-17097](https://cve.now/CVE-2018-17097.md): The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or (no CVSS) - [CVE-2018-17098](https://cve.now/CVE-2018-17098.md): The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption (no CVSS) - [CVE-2018-17100](https://cve.now/CVE-2018-17100.md): An issue was discovered in LibTIFF 4.0.9. (no CVSS) - [CVE-2018-17101](https://cve.now/CVE-2018-17101.md): An issue was discovered in LibTIFF 4.0.9. (no CVSS) - [CVE-2018-17102](https://cve.now/CVE-2018-17102.md): An issue was discovered in QuickAppsCMS (aka QACMS) through 2.0.0-beta2. (no CVSS, quickapps/cms) - [CVE-2018-17103](https://cve.now/CVE-2018-17103.md): An issue was discovered in GetSimple CMS v3.3.13. (no CVSS) - [CVE-2018-17104](https://cve.now/CVE-2018-17104.md): An issue was discovered in Microweber 1.0.7. (no CVSS) - [CVE-2018-17106](https://cve.now/CVE-2018-17106.md): In Tinyftp Tinyftpd 1.1, a buffer overflow exists in the text variable of the do\_mkd function in the ftpproto.c file. (no CVSS) - [CVE-2018-17062](https://cve.now/CVE-2018-17062.md): An issue was discovered in SeaCMS 6.64. (no CVSS) - [CVE-2018-17085](https://cve.now/CVE-2018-17085.md): An issue was discovered in OTCMS 3.61. (no CVSS) - [CVE-2018-17086](https://cve.now/CVE-2018-17086.md): An issue was discovered in OTCMS 3.61. (no CVSS) - [CVE-2018-17088](https://cve.now/CVE-2018-17088.md): The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecifi (no CVSS) - [CVE-2018-17082](https://cve.now/CVE-2018-17082.md): The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a " (no CVSS) - [CVE-2018-16554](https://cve.now/CVE-2018-16554.md): The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecifi (no CVSS) - [CVE-2018-17072](https://cve.now/CVE-2018-17072.md): JSON++ through 2016-06-15 has a buffer over-read in yyparse() in json.y. (no CVSS) - [CVE-2018-17073](https://cve.now/CVE-2018-17073.md): wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image. (no CVSS) - [CVE-2018-17074](https://cve.now/CVE-2018-17074.md): The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter. (no CVSS) - [CVE-2018-17075](https://cve.now/CVE-2018-17075.md): The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for h (no CVSS, golang.org/x/net) - [CVE-2018-17076](https://cve.now/CVE-2018-17076.md): GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified o (no CVSS) - [CVE-2018-17077](https://cve.now/CVE-2018-17077.md): An issue was discovered in yiqicms through 2016-11-20. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-09-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.