# CVEs published 2018-10-27

15 CVEs were published on October 27, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-18706](https://cve.now/CVE-2018-18706.md): An issue was discovered on Tenda AC7 V15.03.06.44\_CN, AC9 V15.03.05.19(6318)\_CN, AC10 V15.03.06.23\_CN, AC15 V15.03.05.19\_CN, and AC18 V15.03 (no CVSS)
- [CVE-2018-18707](https://cve.now/CVE-2018-18707.md): An issue was discovered on Tenda AC7 V15.03.06.44\_CN, AC9 V15.03.05.19(6318)\_CN, AC10 V15.03.06.23\_CN, AC15 V15.03.05.19\_CN, and AC18 V15.03 (no CVSS)
- [CVE-2018-18708](https://cve.now/CVE-2018-18708.md): An issue was discovered on Tenda AC7 V15.03.06.44\_CN, AC9 V15.03.05.19(6318)\_CN, AC10 V15.03.06.23\_CN, AC15 V15.03.05.19\_CN, and AC18 V15.03 (no CVSS)
- [CVE-2018-18709](https://cve.now/CVE-2018-18709.md): An issue was discovered on Tenda AC7 V15.03.06.44\_CN, AC9 V15.03.05.19(6318)\_CN, AC10 V15.03.06.23\_CN, AC15 V15.03.05.19\_CN, and AC18 V15.03 (no CVSS)
- [CVE-2018-18710](https://cve.now/CVE-2018-18710.md): An issue was discovered in the Linux kernel through 4.19. (no CVSS)
- [CVE-2018-18711](https://cve.now/CVE-2018-18711.md): An issue was discovered in WUZHI CMS 4.1.0. (no CVSS)
- [CVE-2018-18712](https://cve.now/CVE-2018-18712.md): An issue was discovered in WUZHI CMS 4.1.0. (no CVSS)
- [CVE-2018-18713](https://cve.now/CVE-2018-18713.md): The function down\_sql\_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via director (no CVSS)
- [CVE-2018-18702](https://cve.now/CVE-2018-18702.md): spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import\_rule because the upfile content is base64 decod (no CVSS)
- [CVE-2018-18703](https://cve.now/CVE-2018-18703.md): PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow (no CVSS)
- [CVE-2018-18704](https://cve.now/CVE-2018-18704.md): PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter. (no CVSS)
- [CVE-2018-18705](https://cve.now/CVE-2018-18705.md): PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LO (no CVSS)
- [CVE-2018-18699](https://cve.now/CVE-2018-18699.md): An issue was discovered in GoPro gpmf-parser 1.2.1. (no CVSS)
- [CVE-2018-18700](https://cve.now/CVE-2018-18700.md): An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. (no CVSS)
- [CVE-2018-18701](https://cve.now/CVE-2018-18701.md): An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-10-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.