# CVEs published 2018-10-09

58 CVEs were published on October 9, 2018: 1 critical, 1 high. Days are UTC.

- [CVE-2018-18201](https://cve.now/CVE-2018-18201.md): qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account. (no CVSS)
- [CVE-2018-11796](https://cve.now/CVE-2018-11796.md): In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing. (no CVSS, Apache Software Foundation Apache Tika · org.apache.tika:ti…)
- [CVE-2018-17866](https://cve.now/CVE-2018-17866.md): Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membershi (no CVSS)
- [CVE-2018-17958](https://cve.now/CVE-2018-17958.md): Qemu has a Buffer Overflow in rtl8139\_do\_receive in hw/net/rtl8139.c because an incorrect integer data type is used. (CVSS 7.5)
- [CVE-2018-17962](https://cve.now/CVE-2018-17962.md): Qemu has a Buffer Overflow in pcnet\_receive in hw/net/pcnet.c because an incorrect integer data type is used. (no CVSS)
- [CVE-2018-17963](https://cve.now/CVE-2018-17963.md): qemu\_deliver\_packet\_iov in net/net.c in Qemu accepts packet sizes greater than INT\_MAX, which allows attackers to cause a denial of service (no CVSS)
- [CVE-2018-18198](https://cve.now/CVE-2018-18198.md): The $opener\_input\_field variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to t (no CVSS)
- [CVE-2018-18199](https://cve.now/CVE-2018-18199.md): Mediamanager in REDAXO before 5.6.4 has XSS. (no CVSS)
- [CVE-2018-18200](https://cve.now/CVE-2018-18200.md): There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4. (no CVSS)
- [CVE-2018-7631](https://cve.now/CVE-2018-7631.md): Buffer Overflow in httpd in EpiCentro E\_7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leadi (no CVSS)
- [CVE-2018-7632](https://cve.now/CVE-2018-7632.md): Buffer Overflow in httpd in EpiCentro E\_7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET req (no CVSS)
- [CVE-2018-7633](https://cve.now/CVE-2018-7633.md): Code injection in the /ui/login form Language parameter in Epicentro E\_7.3.2+ allows attackers to execute JavaScript code by making a user i (no CVSS)
- [CVE-2018-10610](https://cve.now/CVE-2018-10610.md): An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted (no CVSS, WECON Technology Co. LeviStudioU)
- [CVE-2018-10614](https://cve.now/CVE-2018-10614.md): An XXE vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project XM (no CVSS, WECON Technology Co. LeviStudioU)
- [CVE-2018-17855](https://cve.now/CVE-2018-17855.md): An issue was discovered in Joomla! before 3.8.13. (no CVSS)
- [CVE-2018-17856](https://cve.now/CVE-2018-17856.md): An issue was discovered in Joomla! before 3.8.13. (no CVSS, joomla/framework)
- [CVE-2018-17857](https://cve.now/CVE-2018-17857.md): An issue was discovered in Joomla! before 3.8.13. (no CVSS)
- [CVE-2018-17858](https://cve.now/CVE-2018-17858.md): An issue was discovered in Joomla! before 3.8.13. (no CVSS)
- [CVE-2018-17859](https://cve.now/CVE-2018-17859.md): An issue was discovered in Joomla! before 3.8.13. (no CVSS)
- [CVE-2018-18086](https://cve.now/CVE-2018-18086.md): EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users. (no CVSS)
- [CVE-2018-18087](https://cve.now/CVE-2018-18087.md): The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privilege can inject arbitrary web scr (no CVSS)
- [CVE-2018-18088](https://cve.now/CVE-2018-18088.md): OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c (no CVSS)
- [CVE-2018-18190](https://cve.now/CVE-2018-18190.md): An issue was discovered in GoPro gpmf-parser before 1.2.1. (no CVSS)
- [CVE-2018-18191](https://cve.now/CVE-2018-18191.md): Cross-site request forgery (CSRF) vulnerability in /admin.php?c=member&m=edit&uid=1 in dayrui FineCms 5.4 allows remote attackers to change (no CVSS)
- [CVE-2018-18192](https://cve.now/CVE-2018-18192.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-18193](https://cve.now/CVE-2018-18193.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-18194](https://cve.now/CVE-2018-18194.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-18195](https://cve.now/CVE-2018-18195.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-18196](https://cve.now/CVE-2018-18196.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-18197](https://cve.now/CVE-2018-18197.md): An issue was discovered in libgig 4.1.0. (no CVSS)
- [CVE-2018-6977](https://cve.now/CVE-2018-6977.md): VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infi (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2018-18082](https://cve.now/CVE-2018-18082.md): XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI. (no CVSS)
- [CVE-2018-18083](https://cve.now/CVE-2018-18083.md): An issue was discovered in DuomiCMS 3.0. (no CVSS)
- [CVE-2018-18084](https://cve.now/CVE-2018-18084.md): An issue was discovered in DuomiCMS 3.0. (no CVSS)
- [CVE-2018-14649](https://cve.now/CVE-2018-14649.md): It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. (CVSS 9.8, \[UNKNOWN\] ceph-iscsi-cli)
- [CVE-2018-18075](https://cve.now/CVE-2018-18075.md): WikidForum 2.20 has SQL Injection via the rpc.php parent\_post\_id or num\_records parameter, or the index.php?action=search select\_sort parame (no CVSS)
- [CVE-2018-14080](https://cve.now/CVE-2018-14080.md): An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. (no CVSS)
- [CVE-2018-14081](https://cve.now/CVE-2018-14081.md): An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. (no CVSS)
- [CVE-2018-15542](https://cve.now/CVE-2018-15542.md): An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. (no CVSS)
- [CVE-2018-15543](https://cve.now/CVE-2018-15543.md): An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. (no CVSS)
- [CVE-2018-18029](https://cve.now/CVE-2018-18029.md): Navigate CMS has Stored XSS via the navigate.php Title field in an edit action. (no CVSS)
- [CVE-2018-18074](https://cve.now/CVE-2018-18074.md): The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http (no CVSS, requests)
- [CVE-2018-7928](https://cve.now/CVE-2018-7928.md): There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before 8.1. (no CVSS, Huawei Technologies Co. MyCloud)
- [CVE-2018-12474](https://cve.now/CVE-2018-12474.md): Crafted service parameters allows to induce unexpected behaviour in obs-service-tar\_scm (CVSS 5.4, openSUSE Open Build Service)
- [CVE-2018-12477](https://cve.now/CVE-2018-12477.md): obs-service-refresh\_patches can be tricked into deleting '..' or other unrelated directories (CVSS 3.5, openSUSE Open Build Service)
- [CVE-2018-12478](https://cve.now/CVE-2018-12478.md): obs-service-replace\_using\_package\_version allows to specify arbitrary input files (CVSS 4.8, openSUSE Open Build Service)
- [CVE-2018-12479](https://cve.now/CVE-2018-12479.md): Request controller allows to create requests with arbitrary request IDs (CVSS 6.5, openSUSE Open Build Service)
- [CVE-2018-2466](https://cve.now/CVE-2018-2466.md): In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inpu (no CVSS, SAP Data Services)
- [CVE-2018-2467](https://cve.now/CVE-2018-2467.md): In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web B (no CVSS, SAP BusinessObjects BI Platform Servers)
- [CVE-2018-2468](https://cve.now/CVE-2018-2468.md): Under certain conditions the backup server in SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to access inf (no CVSS, SAP Adaptive Server Enterprise)
- [CVE-2018-2469](https://cve.now/CVE-2018-2469.md): Under certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to access information which would (no CVSS, SAP Adaptive Server Enterprise)
- [CVE-2018-2470](https://cve.now/CVE-2018-2470.md): In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently enc (no CVSS, SAP NetWeaver Application Server for ABAP)
- [CVE-2018-2471](https://cve.now/CVE-2018-2471.md): Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which wou (no CVSS, SAP BusinessObjects Business Intelligence Platform)
- [CVE-2018-2472](https://cve.now/CVE-2018-2472.md): SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client) does not sufficiently encode user-controlle (no CVSS, SAP BusinessObjects Business Intelligence Platform)
- [CVE-2018-2474](https://cve.now/CVE-2018-2474.md): SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unint (no CVSS, SAP Fiori 1.0 for SAP ERP HCM)
- [CVE-2018-2475](https://cve.now/CVE-2018-2475.md): Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster. (no CVSS, SAP project “Gardener”)
- [CVE-2018-18070](https://cve.now/CVE-2018-18070.md): An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. (no CVSS)
- [CVE-2018-18071](https://cve.now/CVE-2018-18071.md): An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-10-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.