# CVEs published 2018-11-07 50 CVEs were published on November 7, 2018: 1 critical, 7 high. Days are UTC. - [CVE-2018-16149](https://cve.now/CVE-2018-16149.md): In sig\_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification blindly trusts the declared lengths in t (no CVSS) - [CVE-2018-16150](https://cve.now/CVE-2018-16150.md): In sig\_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not reject excess data after the ha (no CVSS) - [CVE-2018-16253](https://cve.now/CVE-2018-16253.md): In sig\_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not properly verify the ASN.1 metad (no CVSS) - [CVE-2018-19089](https://cve.now/CVE-2018-19089.md): tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save\_role name parameter, which is mishandled in tian (no CVSS) - [CVE-2018-19090](https://cve.now/CVE-2018-19090.md): tianti 2.3 has stored XSS in the article management module via an article title. (no CVSS) - [CVE-2018-19091](https://cve.now/CVE-2018-19091.md): tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter. (no CVSS) - [CVE-2018-19092](https://cve.now/CVE-2018-19092.md): An issue was discovered in YzmCMS v5.2. (no CVSS) - [CVE-2018-19093](https://cve.now/CVE-2018-19093.md): An issue has been found in libIEC61850 v1.3. (CVSS 7.5) - [CVE-2018-19063](https://cve.now/CVE-2018-19063.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19064](https://cve.now/CVE-2018-19064.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19065](https://cve.now/CVE-2018-19065.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19066](https://cve.now/CVE-2018-19066.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19067](https://cve.now/CVE-2018-19067.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19068](https://cve.now/CVE-2018-19068.md): An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. (no CVSS) - [CVE-2018-19069](https://cve.now/CVE-2018-19069.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19070](https://cve.now/CVE-2018-19070.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19071](https://cve.now/CVE-2018-19071.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19072](https://cve.now/CVE-2018-19072.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19073](https://cve.now/CVE-2018-19073.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19074](https://cve.now/CVE-2018-19074.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19075](https://cve.now/CVE-2018-19075.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19076](https://cve.now/CVE-2018-19076.md): An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S (no CVSS) - [CVE-2018-19077](https://cve.now/CVE-2018-19077.md): An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. (no CVSS) - [CVE-2018-19078](https://cve.now/CVE-2018-19078.md): An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. (no CVSS) - [CVE-2018-19079](https://cve.now/CVE-2018-19079.md): An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. (no CVSS) - [CVE-2018-19080](https://cve.now/CVE-2018-19080.md): An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. (no CVSS) - [CVE-2018-19081](https://cve.now/CVE-2018-19081.md): An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. (no CVSS) - [CVE-2018-19082](https://cve.now/CVE-2018-19082.md): An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. (no CVSS) - [CVE-2018-19083](https://cve.now/CVE-2018-19083.md): WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialchars\_decode function via the /?/publish/ajax/p (no CVSS) - [CVE-2018-19061](https://cve.now/CVE-2018-19061.md): DedeCMS 5.7 SP2 has SQL Injection via the dede\\co\_do.php ids parameter. (no CVSS) - [CVE-2018-18590](https://cve.now/CVE-2018-18590.md): MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution (CVSS 9.6, Micro Focus Operation Bridge Containerized Suite) - [CVE-2018-19058](https://cve.now/CVE-2018-19058.md): An issue was discovered in Poppler 0.71.0. (no CVSS) - [CVE-2018-19059](https://cve.now/CVE-2018-19059.md): An issue was discovered in Poppler 0.71.0. (no CVSS) - [CVE-2018-19060](https://cve.now/CVE-2018-19060.md): An issue was discovered in Poppler 0.71.0. (no CVSS) - [CVE-2018-19056](https://cve.now/CVE-2018-19056.md): pandao Editor.md 1.5.0 has DOM XSS via input starting with a "\<\<" substring, which is mishandled during construction of an A element. (no CVSS, editor.md) - [CVE-2018-19057](https://cve.now/CVE-2018-19057.md): SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with \[ and ( characters, which is mishandle (no CVSS, simplemde) - [CVE-2018-16843](https://cve.now/CVE-2018-16843.md): nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. (CVSS 5.3, \[UNKNOWN\] nginx) - [CVE-2018-16844](https://cve.now/CVE-2018-16844.md): nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. (CVSS 5.3, \[UNKNOWN\] nginx) - [CVE-2018-16845](https://cve.now/CVE-2018-16845.md): nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx\_http\_mp4\_module, which might allow an attacker to cause infinite loop in (CVSS 8.2, \[UNKNOWN\] nginx) - [CVE-2018-8021](https://cve.now/CVE-2018-8021.md): Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code ex (no CVSS, Superset) - [CVE-2018-19047](https://cve.now/CVE-2018-19047.md): mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '\