# CVEs published 2018-11-26

60 CVEs were published on November 26, 2018: 0 critical, 2 high. Days are UTC.

- [CVE-2018-13308](https://cve.now/CVE-2018-13308.md): Cross-site scripting in notice\_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the " (no CVSS)
- [CVE-2018-13309](https://cve.now/CVE-2018-13309.md): Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's passw (no CVSS)
- [CVE-2018-13310](https://cve.now/CVE-2018-13310.md): Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's usern (no CVSS)
- [CVE-2018-13311](https://cve.now/CVE-2018-13311.md): System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "sambaUser" POST (no CVSS)
- [CVE-2018-13312](https://cve.now/CVE-2018-13312.md): Cross-site scripting in notice\_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the " (no CVSS)
- [CVE-2018-13315](https://cve.now/CVE-2018-13315.md): Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an (no CVSS)
- [CVE-2018-13317](https://cve.now/CVE-2018-13317.md): Password disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to obtain the plaintext password for the admin user b (no CVSS)
- [CVE-2018-13318](https://cve.now/CVE-2018-13318.md): System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the (no CVSS)
- [CVE-2018-13319](https://cve.now/CVE-2018-13319.md): Incorrect access control in get\_portal\_info in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device informat (no CVSS)
- [CVE-2018-13320](https://cve.now/CVE-2018-13320.md): System Command Injection in network.set\_auth\_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands v (no CVSS)
- [CVE-2018-13321](https://cve.now/CVE-2018-13321.md): Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "m (no CVSS)
- [CVE-2018-13322](https://cve.now/CVE-2018-13322.md): Directory traversal in list\_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "pat (no CVSS)
- [CVE-2018-13323](https://cve.now/CVE-2018-13323.md): Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cooki (no CVSS)
- [CVE-2018-13324](https://cve.now/CVE-2018-13324.md): Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified (no CVSS)
- [CVE-2018-14663](https://cve.now/CVE-2018-14663.md): An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the ad (CVSS 5.9, \[UNKNOWN\] dnsdist)
- [CVE-2018-11066](https://cve.now/CVE-2018-11066.md): Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution Vulnerability (no CVSS, Dell EMC Avamar · Dell EMC Integrated Data Protection Appli…)
- [CVE-2018-11067](https://cve.now/CVE-2018-11067.md): Dell EMC Avamar and Integrated Data Protection Appliance Open Redirection Vulnerability (no CVSS, Dell EMC Avamar · Dell EMC Integrated Data Protection Appli…)
- [CVE-2018-11076](https://cve.now/CVE-2018-11076.md): Dell EMC Avamar and Integrated Data Protection Appliance Information Exposure Vulnerability (no CVSS, Dell EMC Avamar · Dell EMC Integrated Data Protection Appli…)
- [CVE-2018-11077](https://cve.now/CVE-2018-11077.md): Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability (no CVSS, Dell EMC Avamar · Dell EMC Integrated Data Protection Appli…)
- [CVE-2018-18807](https://cve.now/CVE-2018-18807.md): TIBCO Statistica Server Vulnerable to Cross Site Scripting (CVSS 7.6, TIBCO Software TIBCO Statistica Server)
- [CVE-2018-19565](https://cve.now/CVE-2018-19565.md): A buffer over-read in crop\_masked\_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an applica (no CVSS)
- [CVE-2018-19566](https://cve.now/CVE-2018-19566.md): A heap buffer over-read in parse\_tiff\_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an applic (no CVSS)
- [CVE-2018-19567](https://cve.now/CVE-2018-19567.md): A floating point exception in parse\_tiff\_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an app (no CVSS)
- [CVE-2018-19568](https://cve.now/CVE-2018-19568.md): A floating point exception in kodak\_radc\_load\_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash a (no CVSS)
- [CVE-2018-14646](https://cve.now/CVE-2018-14646.md): The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the \_\_netlink\_ns\_capable() function in the (CVSS 5.5, \[UNKNOWN\] kernel:)
- [CVE-2018-16862](https://cve.now/CVE-2018-16862.md): A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (remova (CVSS 5.3, \[UNKNOWN\] kernel:)
- [CVE-2018-19564](https://cve.now/CVE-2018-19564.md): Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. (no CVSS)
- [CVE-2017-1418](https://cve.now/CVE-2017-1418.md): IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure per (CVSS 4.0, IBM Integration Bus · IBM WebSphere Message Broker)
- [CVE-2018-16854](https://cve.now/CVE-2018-16854.md): A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. (CVSS 6.5, \[UNKNOWN\] moodle · moodle/moodle)
- [CVE-2018-1905](https://cve.now/CVE-2018-1905.md): IBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML d (CVSS 7.1, IBM WebSphere Application Server)
- [CVE-2018-19544](https://cve.now/CVE-2018-19544.md): JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news. (no CVSS)
- [CVE-2018-19545](https://cve.now/CVE-2018-19545.md): JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user. (no CVSS)
- [CVE-2018-19546](https://cve.now/CVE-2018-19546.md): JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content para (no CVSS)
- [CVE-2018-19547](https://cve.now/CVE-2018-19547.md): JTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter. (no CVSS)
- [CVE-2018-19548](https://cve.now/CVE-2018-19548.md): index.php?r=site%2Flogin in EduSec through 4.2.6 does not restrict sending a series of LoginForm\[username\] and LoginForm\[password\] parameter (no CVSS)
- [CVE-2018-19549](https://cve.now/CVE-2018-19549.md): Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php. (no CVSS)
- [CVE-2018-19550](https://cve.now/CVE-2018-19550.md): Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys\_submit.php "create survey and submit survey" operation, w (no CVSS)
- [CVE-2018-19551](https://cve.now/CVE-2018-19551.md): Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php. (no CVSS)
- [CVE-2018-19552](https://cve.now/CVE-2018-19552.md): Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid\[\] request to Dynamiccontenttags.php. (no CVSS)
- [CVE-2018-19553](https://cve.now/CVE-2018-19553.md): Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php (no CVSS)
- [CVE-2018-19554](https://cve.now/CVE-2018-19554.md): An issue was discovered in Dotcms through 5.0.3. (no CVSS)
- [CVE-2018-19555](https://cve.now/CVE-2018-19555.md): tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password. (no CVSS)
- [CVE-2018-19556](https://cve.now/CVE-2018-19556.md): zb\_system/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. (no CVSS)
- [CVE-2018-19557](https://cve.now/CVE-2018-19557.md): An issue was discovered in arcms through 2018-03-19. (no CVSS)
- [CVE-2018-19558](https://cve.now/CVE-2018-19558.md): An issue was discovered in arcms through 2018-03-19. (no CVSS)
- [CVE-2018-19559](https://cve.now/CVE-2018-19559.md): CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the reference\_id parameter. (no CVSS)
- [CVE-2018-19560](https://cve.now/CVE-2018-19560.md): BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account. (no CVSS)
- [CVE-2018-19561](https://cve.now/CVE-2018-19561.md): sikcms 1.1 has CSRF via admin.php?m=Admin&c=Users&a=userAdd to add an administrator account. (no CVSS)
- [CVE-2018-19562](https://cve.now/CVE-2018-19562.md): An issue was discovered in PHPok 4.9.015. (no CVSS)
- [CVE-2018-19537](https://cve.now/CVE-2018-19537.md): TP-Link Archer C5 devices through V2\_160201\_US allow remote command execution via shell metacharacters on the wan\_dyn\_hostname line of a con (no CVSS)
- [CVE-2018-19539](https://cve.now/CVE-2018-19539.md): An issue was discovered in JasPer 2.0.14. (no CVSS)
- [CVE-2018-19540](https://cve.now/CVE-2018-19540.md): An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18 (no CVSS)
- [CVE-2018-19541](https://cve.now/CVE-2018-19541.md): An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18 (no CVSS)
- [CVE-2018-19542](https://cve.now/CVE-2018-19542.md): An issue was discovered in JasPer 2.0.14. (no CVSS)
- [CVE-2018-19543](https://cve.now/CVE-2018-19543.md): An issue was discovered in JasPer 2.0.14. (no CVSS)
- [CVE-2018-19528](https://cve.now/CVE-2018-19528.md): TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load Exception) via crafted DNS packets to port (no CVSS)
- [CVE-2018-19530](https://cve.now/CVE-2018-19530.md): HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses XStream unsafely (no CVSS)
- [CVE-2018-19531](https://cve.now/CVE-2018-19531.md): HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses java.beans.XMLEnc (no CVSS)
- [CVE-2018-19532](https://cve.now/CVE-2018-19532.md): A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creat (no CVSS)
- [CVE-2018-19535](https://cve.now/CVE-2018-19535.md): In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk\_int.cpp may cause a denial of service (application crash due to a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-11-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.