CVEs published October 21, 2018
4 CVEs were published on October 21, 2018: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- topthink/framework
- 1
Medium, low and unrated 4
- CVE-2018-18550ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user.
- CVE-2018-18544There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coder
- CVE-2018-18545Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.
- CVE-2018-18546ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the ketopthink/framework