# CVEs published 2018-09-17

38 CVEs were published on September 17, 2018: 2 critical, 8 high. Days are UTC.

- [CVE-2017-2854](https://cve.now/CVE-2017-2854.md): An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2 (CVSS 8.1, Foscam Indoor IP Camera C1 Series)
- [CVE-2017-2856](https://cve.now/CVE-2017-2856.md): An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2 (CVSS 8.1, Foscam Indoor IP Camera C1 Series)
- [CVE-2017-2857](https://cve.now/CVE-2017-2857.md): An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2 (CVSS 8.1, Foscam Indoor IP Camera C1 Series)
- [CVE-2017-2872](https://cve.now/CVE-2017-2872.md): Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. (CVSS 9.9, Foscam Indoor IP Camera C1 Series)
- [CVE-2018-14631](https://cve.now/CVE-2018-14631.md): moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. (CVSS 8.8, \[UNKNOWN\] moodle · moodle/moodle)
- [CVE-2017-2874](https://cve.now/CVE-2017-2874.md): An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firm (CVSS 7.5, Foscam Indoor IP Camera C1 Series)
- [CVE-2018-14320](https://cve.now/CVE-2018-14320.md): This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. (no CVSS, PoDoFo PoDoFo)
- [CVE-2018-14630](https://cve.now/CVE-2018-14630.md): moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. (CVSS 8.8, \[UNKNOWN\] moodle · moodle/moodle)
- [CVE-2017-14443](https://cve.now/CVE-2017-14443.md): An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012. (CVSS 9.6)
- [CVE-2017-2777](https://cve.now/CVE-2017-2777.md): An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. (CVSS 8.8, Iceni Argus)
- [CVE-2018-11086](https://cve.now/CVE-2018-11086.md): Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains (no CVSS, Pivotal Application Service)
- [CVE-2018-11088](https://cve.now/CVE-2018-11088.md): Pivotal Applications Manager in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, co (no CVSS, Pivotal Application Service)
- [CVE-2018-1198](https://cve.now/CVE-2018-1198.md): Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs. (no CVSS, Pivotal Cloud Cache)
- [CVE-2018-1223](https://cve.now/CVE-2018-1223.md): Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. (no CVSS, Cloud Foundry Container Runtime)
- [CVE-2016-9045](https://cve.now/CVE-2016-9045.md): A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. (CVSS 8.8, ProcessMaker Enterprise)
- [CVE-2017-15705](https://cve.now/CVE-2017-15705.md): A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. (no CVSS, Apache Software Foundation Apache SpamAssassin)
- [CVE-2018-11780](https://cve.now/CVE-2018-11780.md): A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2. (no CVSS, Apache Software Foundation Apache SpamAssassin)
- [CVE-2018-11781](https://cve.now/CVE-2018-11781.md): Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax. (no CVSS, Apache Software Foundation Apache SpamAssassin)
- [CVE-2018-17142](https://cve.now/CVE-2018-17142.md): The html package (aka x/net/html) through 2018-09-17 in Go mishandles \<math\>\<template\>\<mo\>\<template\>, leading to a "panic: runtime error" in (no CVSS, golang.org/x/net)
- [CVE-2018-17143](https://cve.now/CVE-2018-17143.md): The html package (aka x/net/html) through 2018-09-17 in Go mishandles \<template\>\<tBody\>\<isindex/action=0\>, leading to a "panic: runtime erro (no CVSS, golang.org/x/net)
- [CVE-2018-8041](https://cve.now/CVE-2018-8041.md): Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal. (no CVSS, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2018-17136](https://cve.now/CVE-2018-17136.md): zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header. (no CVSS)
- [CVE-2018-17137](https://cve.now/CVE-2018-17137.md): Prezi Next 1.3.101.11 has a documented purpose of creating HTML5 presentations but has SE\_DEBUG\_PRIVILEGE on Windows, which might allow atta (no CVSS)
- [CVE-2018-17138](https://cve.now/CVE-2018-17138.md): The Jibu Pro plugin through 1.7 for WordPress is prone to Stored XSS via the wp-content/plugins/jibu-pro/quiz\_action.php name (aka Quiz Name (no CVSS)
- [CVE-2018-17139](https://cve.now/CVE-2018-17139.md): UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code (no CVSS)
- [CVE-2018-17140](https://cve.now/CVE-2018-17140.md): The Quizlord plugin through 2.0 for WordPress is prone to Stored XSS via the title parameter in a ql\_insert action to wp-admin/admin.php. (no CVSS)
- [CVE-2018-17110](https://cve.now/CVE-2018-17110.md): Simple POS 4.0.24 allows SQL Injection via a products/get\_products/ columns\[0\]\[search\]\[value\] parameter in the management panel, as demonstr (no CVSS)
- [CVE-2018-17113](https://cve.now/CVE-2018-17113.md): App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, (no CVSS)
- [CVE-2018-17125](https://cve.now/CVE-2018-17125.md): CScms 4.1 allows arbitrary directory deletion via a dir=..\\\\ substring to plugins\\sys\\admin\\Plugins.php. (no CVSS)
- [CVE-2018-17126](https://cve.now/CVE-2018-17126.md): CScms 4.1 allows remote code execution, as demonstrated by 1');eval($\_POST\[cmd\]);# in Web Name to upload\\plugins\\sys\\Install.php. (no CVSS)
- [CVE-2018-17127](https://cve.now/CVE-2018-17127.md): blocking\_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384\_32738 allows remote attackers to cause a denial of service (NULL pointer (no CVSS)
- [CVE-2018-17128](https://cve.now/CVE-2018-17128.md): A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode. (no CVSS)
- [CVE-2018-17129](https://cve.now/CVE-2018-17129.md): MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback\_admin.class.php via the class1 field. (no CVSS)
- [CVE-2018-17130](https://cve.now/CVE-2018-17130.md): PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header, (no CVSS)
- [CVE-2018-17131](https://cve.now/CVE-2018-17131.md): admin/web\_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the varvalue field. (no CVSS)
- [CVE-2018-17132](https://cve.now/CVE-2018-17132.md): admin/goods\_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue\[\] array parameter. (no CVSS)
- [CVE-2018-17133](https://cve.now/CVE-2018-17133.md): admin/web\_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the rewrite url setting. (no CVSS)
- [CVE-2018-17134](https://cve.now/CVE-2018-17134.md): admin/web\_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the cfg\_author field in conjunction with a crafted cf (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-09-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.