# CVEs published 2018-09-21

63 CVEs were published on September 21, 2018: 6 critical, 9 high. Days are UTC.

- [CVE-2018-14889](https://cve.now/CVE-2018-14889.md): CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability. (no CVSS)
- [CVE-2018-14890](https://cve.now/CVE-2018-14890.md): Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS) vulnerability in the Web Management Console. (no CVSS)
- [CVE-2018-14891](https://cve.now/CVE-2018-14891.md): Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability. (no CVSS)
- [CVE-2018-12169](https://cve.now/CVE-2018-12169.md): Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Process (no CVSS)
- [CVE-2018-15612](https://cve.now/CVE-2018-15612.md): Orchestration Designer Runtime Config CSRF (CVSS 8.3, Avaya Orchestration Designer)
- [CVE-2018-15613](https://cve.now/CVE-2018-15613.md): Orchestration Designer Runtime Config XSS (CVSS 8.3, Avaya Orchestration Designer)
- [CVE-2018-17317](https://cve.now/CVE-2018-17317.md): FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the io\_mode, (no CVSS)
- [CVE-2018-17320](https://cve.now/CVE-2018-17320.md): An issue was discovered in UCMS 1.4.6. (no CVSS)
- [CVE-2013-4451](https://cve.now/CVE-2013-4451.md): gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when (no CVSS)
- [CVE-2013-7203](https://cve.now/CVE-2013-7203.md): gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when ru (no CVSS)
- [CVE-2018-12511](https://cve.now/CVE-2018-12511.md): In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mi (no CVSS)
- [CVE-2018-13111](https://cve.now/CVE-2018-13111.md): There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. (no CVSS)
- [CVE-2018-14730](https://cve.now/CVE-2018-14730.md): An issue was discovered in Browserify-HMR. (no CVSS, browserify-hmr)
- [CVE-2018-14731](https://cve.now/CVE-2018-14731.md): An issue was discovered in HMRServer.js in Parcel parcel-bundler. (no CVSS, parcel-bundler)
- [CVE-2018-14732](https://cve.now/CVE-2018-14732.md): An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6. (no CVSS, webpack-dev-server)
- [CVE-2018-16821](https://cve.now/CVE-2018-16821.md): SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin\_template.php?path=../templets/../../ requests. (no CVSS)
- [CVE-2018-16822](https://cve.now/CVE-2018-16822.md): SeaCMS 6.64 allows SQL Injection via the upload/admin/admin\_video.php order parameter. (no CVSS)
- [CVE-2018-16833](https://cve.now/CVE-2018-16833.md): Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI. (no CVSS)
- [CVE-2018-16965](https://cve.now/CVE-2018-16965.md): In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contrac (no CVSS)
- [CVE-2018-17001](https://cve.now/CVE-2018-17001.md): On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the e (no CVSS)
- [CVE-2018-17002](https://cve.now/CVE-2018-17002.md): On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the ent (no CVSS)
- [CVE-2018-17003](https://cve.now/CVE-2018-17003.md): In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveyls\_title parameter to /index.php?r=ad (no CVSS)
- [CVE-2018-17050](https://cve.now/CVE-2018-17050.md): The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner (no CVSS)
- [CVE-2018-17141](https://cve.now/CVE-2018-17141.md): HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JP (no CVSS)
- [CVE-2018-17173](https://cve.now/CVE-2018-17173.md): LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr\_server/device/getThumbnail. (no CVSS)
- [CVE-2018-17174](https://cve.now/CVE-2018-17174.md): A stack-based buffer overflow was discovered in the xtimor NMEA library (aka nmealib) 0.5.3. (no CVSS)
- [CVE-2018-11352](https://cve.now/CVE-2018-11352.md): The Wallabag application 2.2.3 to 2.3.2 is affected by one cross-site scripting (XSS) vulnerability that is stored within the configuration (no CVSS, wallabag/wallabag)
- [CVE-2018-14688](https://cve.now/CVE-2018-14688.md): An issue was discovered in Subsonic 6.1.1. (no CVSS)
- [CVE-2018-14689](https://cve.now/CVE-2018-14689.md): An issue was discovered in Subsonic 6.1.1. (no CVSS)
- [CVE-2018-14690](https://cve.now/CVE-2018-14690.md): An issue was discovered in Subsonic 6.1.1. (no CVSS)
- [CVE-2018-14691](https://cve.now/CVE-2018-14691.md): An issue was discovered in Subsonic 6.1.1. (no CVSS)
- [CVE-2018-16281](https://cve.now/CVE-2018-16281.md): The DEISER "Profields - Project Custom Fields" app before 6.0.2 for Jira has Incorrect Access Control. (no CVSS)
- [CVE-2018-16597](https://cve.now/CVE-2018-16597.md): An issue was discovered in the Linux kernel before 4.8. (no CVSS)
- [CVE-2018-16793](https://cve.now/CVE-2018-16793.md): Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/log (no CVSS)
- [CVE-2018-9282](https://cve.now/CVE-2018-9282.md): An XSS issue was discovered in Subsonic Media Server 6.1.1. (no CVSS)
- [CVE-2018-11240](https://cve.now/CVE-2018-11240.md): An issue was discovered on SoftCase T-Router build 20112017 devices. (no CVSS)
- [CVE-2018-11241](https://cve.now/CVE-2018-11241.md): An issue was discovered on SoftCase T-Router build 20112017 devices. (no CVSS)
- [CVE-2018-16784](https://cve.now/CVE-2018-16784.md): DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "\<file type='file' name='../" substring. (no CVSS)
- [CVE-2018-16786](https://cve.now/CVE-2018-16786.md): DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedback\_ajax.php. (no CVSS)
- [CVE-2018-3894](https://cve.now/CVE-2018-3894.md): An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hu (CVSS 9.9, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2018-3906](https://cve.now/CVE-2018-3906.md): An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung (CVSS 7.5, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2018-3913](https://cve.now/CVE-2018-3913.md): An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Sam (CVSS 7.5)
- [CVE-2018-3914](https://cve.now/CVE-2018-3914.md): An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Sam (CVSS 7.5, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2018-3915](https://cve.now/CVE-2018-3915.md): An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Sam (CVSS 7.5, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2018-3873](https://cve.now/CVE-2018-3873.md): An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ET (CVSS 9.9, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2018-3874](https://cve.now/CVE-2018-3874.md): An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ET (CVSS 9.9, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2018-3876](https://cve.now/CVE-2018-3876.md): An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ET (CVSS 9.9, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2018-3877](https://cve.now/CVE-2018-3877.md): An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ET (CVSS 9.9, Samsung SmartThings Hub STH-ETH-250)
- [CVE-2018-14643](https://cve.now/CVE-2018-14643.md): An authentication bypass flaw was found in the smart\_proxy\_dynflow component used by Foreman. (CVSS 9.8, \[UNKNOWN\] smart\_proxy\_dynflow · smart\_proxy\_dynflow)
- [CVE-2018-14645](https://cve.now/CVE-2018-14645.md): A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. (CVSS 7.5, \[UNKNOWN\] haproxy)
- [CVE-2018-1685](https://cve.now/CVE-2018-1685.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability in db2cacpy that could (no CVSS)
- [CVE-2018-1710](https://cve.now/CVE-2018-1710.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerabi (CVSS 8.4, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2018-1711](https://cve.now/CVE-2018-1711.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges d (CVSS 8.4, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2018-8023](https://cve.now/CVE-2018-8023.md): Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT). (no CVSS, Apache Software Foundation Apache Mesos · org.apache.mesos:…)
- [CVE-2018-17292](https://cve.now/CVE-2018-17292.md): An issue was discovered in WAVM before 2018-09-16. (no CVSS)
- [CVE-2018-17293](https://cve.now/CVE-2018-17293.md): An issue was discovered in WAVM before 2018-09-16. (no CVSS)
- [CVE-2018-17294](https://cve.now/CVE-2018-17294.md): The matchCurrentInput function inside lou\_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing atta (no CVSS)
- [CVE-2018-17297](https://cve.now/CVE-2018-17297.md): The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequ (no CVSS, cn.hutool:hutool-parent · cn.hutool:hutool-all +1)
- [CVE-2018-17298](https://cve.now/CVE-2018-17298.md): An issue was discovered in Enalean Tuleap before 10.5. (no CVSS)
- [CVE-2018-17300](https://cve.now/CVE-2018-17300.md): Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator/#/component/table\_manager/view/cu\_menus section name. (no CVSS)
- [CVE-2018-17301](https://cve.now/CVE-2018-17301.md): Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel. (no CVSS)
- [CVE-2018-17302](https://cve.now/CVE-2018-17302.md): Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message. (no CVSS)
- [CVE-2018-17283](https://cve.now/CVE-2018-17283.md): Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /opu (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-09-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.