# CVEs published 2018-09-23

16 CVEs were published on September 23, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-17368](https://cve.now/CVE-2018-17368.md): An issue was discovered in PublicCMS V4.0.180825. (no CVSS)
- [CVE-2018-17369](https://cve.now/CVE-2018-17369.md): An issue was discovered in springboot\_authority through 2017-03-06. (no CVSS)
- [CVE-2018-17400](https://cve.now/CVE-2018-17400.md): The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover atta (no CVSS)
- [CVE-2018-17401](https://cve.now/CVE-2018-17401.md): The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover atta (no CVSS)
- [CVE-2018-17402](https://cve.now/CVE-2018-17402.md): The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to discover the Credit/Debit car (no CVSS)
- [CVE-2018-17403](https://cve.now/CVE-2018-17403.md): The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to impersonate a user and set up (no CVSS)
- [CVE-2018-17404](https://cve.now/CVE-2018-17404.md): The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile (no CVSS)
- [CVE-2018-17407](https://cve.now/CVE-2018-17407.md): An issue was discovered in t1\_check\_unusual\_charstring functions in writet1.c files in TeX Live before 2018-09-21. (no CVSS)
- [CVE-2018-17358](https://cve.now/CVE-2018-17358.md): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. (no CVSS)
- [CVE-2018-17359](https://cve.now/CVE-2018-17359.md): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. (no CVSS)
- [CVE-2018-17360](https://cve.now/CVE-2018-17360.md): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. (no CVSS)
- [CVE-2018-17361](https://cve.now/CVE-2018-17361.md): Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH\_INFO to index.ph (no CVSS)
- [CVE-2018-17364](https://cve.now/CVE-2018-17364.md): OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter. (no CVSS)
- [CVE-2018-17366](https://cve.now/CVE-2018-17366.md): An issue was discovered in MCMS 4.6.5. (no CVSS, net.mingsoft:ms-mcms)
- [CVE-2018-17338](https://cve.now/CVE-2018-17338.md): An issue has been found in pdfalto through 0.2. (no CVSS)
- [CVE-2018-17341](https://cve.now/CVE-2018-17341.md): BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\\ su (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-09-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.