CVEs published September 23, 2018
16 CVEs were published on September 23, 2018: 0 critical, 0 high.
- Published
- 16
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- net.mingsoft:ms-mcms
- 1
Medium, low and unrated 16
- CVE-2018-17368An issue was discovered in PublicCMS V4.0.180825.
- CVE-2018-17369An issue was discovered in springboot_authority through 2017-03-06.
- CVE-2018-17400The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover atta
- CVE-2018-17401The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover atta
- CVE-2018-17402The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to discover the Credit/Debit car
- CVE-2018-17403The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to impersonate a user and set up
- CVE-2018-17404The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile
- CVE-2018-17407An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21.
- CVE-2018-17358An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.
- CVE-2018-17359An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.
- CVE-2018-17360An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.
- CVE-2018-17361Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.ph
- CVE-2018-17364OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.
- CVE-2018-17366An issue was discovered in MCMS 4.6.5.net.mingsoft:ms-mcms
- CVE-2018-17338An issue has been found in pdfalto through 0.2.
- CVE-2018-17341BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\ su