# CVEs published 2018-11-12 43 CVEs were published on November 12, 2018: 0 critical, 0 high. Days are UTC. - [CVE-2018-19220](https://cve.now/CVE-2018-19220.md): An issue was discovered in LAOBANCMS 2.0. (no CVSS) - [CVE-2018-19221](https://cve.now/CVE-2018-19221.md): An issue was discovered in LAOBANCMS 2.0. (no CVSS) - [CVE-2018-19222](https://cve.now/CVE-2018-19222.md): An issue was discovered in LAOBANCMS 2.0. (no CVSS) - [CVE-2018-19223](https://cve.now/CVE-2018-19223.md): An issue was discovered in LAOBANCMS 2.0. (no CVSS) - [CVE-2018-19224](https://cve.now/CVE-2018-19224.md): An issue was discovered in LAOBANCMS 2.0. (no CVSS) - [CVE-2018-19225](https://cve.now/CVE-2018-19225.md): An issue was discovered in LAOBANCMS 2.0. (no CVSS) - [CVE-2018-19226](https://cve.now/CVE-2018-19226.md): An issue was discovered in LAOBANCMS 2.0. (no CVSS) - [CVE-2018-19227](https://cve.now/CVE-2018-19227.md): An issue was discovered in LAOBANCMS 2.0. (no CVSS) - [CVE-2018-19228](https://cve.now/CVE-2018-19228.md): An issue was discovered in LAOBANCMS 2.0. (no CVSS) - [CVE-2018-19229](https://cve.now/CVE-2018-19229.md): An issue was discovered in LAOBANCMS 2.0. (no CVSS) - [CVE-2018-19208](https://cve.now/CVE-2018-19208.md): In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will le (no CVSS) - [CVE-2018-19209](https://cve.now/CVE-2018-19209.md): Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find\_label in asm/labels.c that will lead to a DoS attack. (no CVSS) - [CVE-2018-19210](https://cve.now/CVE-2018-19210.md): In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif\_dirwrite.c that will lead to a denial of (no CVSS) - [CVE-2018-19211](https://cve.now/CVE-2018-19211.md): In ncurses 6.1, there is a NULL pointer dereference at function \_nc\_parse\_entry in parse\_entry.c that will lead to a denial of service attac (no CVSS) - [CVE-2018-19212](https://cve.now/CVE-2018-19212.md): In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack. (no CVSS) - [CVE-2018-19213](https://cve.now/CVE-2018-19213.md): Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm\_malloc in nasmlib/malloc.c. (no CVSS) - [CVE-2018-19214](https://cve.now/CVE-2018-19214.md): Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand\_mmac\_params in asm/preproc.c for insufficient input. (no CVSS) - [CVE-2018-19215](https://cve.now/CVE-2018-19215.md): Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand\_mmac\_params in asm/preproc.c for the special cases of the % an (no CVSS) - [CVE-2018-19216](https://cve.now/CVE-2018-19216.md): Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c. (no CVSS) - [CVE-2018-19217](https://cve.now/CVE-2018-19217.md): In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function \_nc\_name\_match that will lead to a denial of service (no CVSS) - [CVE-2018-19218](https://cve.now/CVE-2018-19218.md): In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse\_css\_variable\_value\_token that will lead to a DoS attack. (no CVSS) - [CVE-2018-19219](https://cve.now/CVE-2018-19219.md): In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack. (no CVSS) - [CVE-2018-19205](https://cve.now/CVE-2018-19205.md): Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive informati (no CVSS) - [CVE-2018-19206](https://cve.now/CVE-2018-19206.md): steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of \\, as demonstrated by an onload attribute in a BODY elem (no CVSS) - [CVE-2018-19207](https://cve.now/CVE-2018-19207.md): The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2018-1786](https://cve.now/CVE-2018-1786.md): IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE\_WAIT state. (CVSS 5.3, IBM Spectrum Protect) - [CVE-2018-1798](https://cve.now/CVE-2018-1798.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. (CVSS 6.1, IBM WebSphere Application Server) - [CVE-2018-1884](https://cve.now/CVE-2018-1884.md): IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a re (CVSS 4.8, IBM Case Manager) - [CVE-2018-19203](https://cve.now/CVE-2018-19203.md): PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTT (no CVSS) - [CVE-2018-19204](https://cve.now/CVE-2018-19204.md): PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and O (no CVSS) - [CVE-2018-19198](https://cve.now/CVE-2018-19198.md): An issue was discovered in uriparser before 0.9.0. (no CVSS) - [CVE-2018-19199](https://cve.now/CVE-2018-19199.md): An issue was discovered in uriparser before 0.9.0. (no CVSS) - [CVE-2018-19200](https://cve.now/CVE-2018-19200.md): An issue was discovered in uriparser before 0.9.0. (no CVSS) - [CVE-2018-19185](https://cve.now/CVE-2018-19185.md): An issue has been found in libIEC61850 v1.3. (no CVSS) - [CVE-2018-19192](https://cve.now/CVE-2018-19192.md): An issue was discovered in XiaoCms 20141229. (no CVSS) - [CVE-2018-19193](https://cve.now/CVE-2018-19193.md): An issue was discovered in XiaoCms 20141229. (no CVSS) - [CVE-2018-19194](https://cve.now/CVE-2018-19194.md): An issue was discovered in XiaoCms 20141229. (no CVSS) - [CVE-2018-19195](https://cve.now/CVE-2018-19195.md): An issue was discovered in XiaoCms 20141229. (no CVSS) - [CVE-2018-19196](https://cve.now/CVE-2018-19196.md): An issue was discovered in XiaoCms 20141229. (no CVSS) - [CVE-2018-19197](https://cve.now/CVE-2018-19197.md): An issue was discovered in XiaoCms 20141229. (no CVSS) - [CVE-2018-18920](https://cve.now/CVE-2018-18920.md): Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute\_bytecode call that triggers computation.\_stack.values with '"stack": \[100, 100, (no CVSS, py-evm ยท evm-py) - [CVE-2018-19184](https://cve.now/CVE-2018-19184.md): cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode. (no CVSS, github.com/ethereum/go-ethereum) - [CVE-2018-19183](https://cve.now/CVE-2018-19183.md): ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my\_code, 'hex')" (no CVSS, ethereumjs-vm) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-11-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.