CVEs published September 18, 2018
78 CVEs were published on September 18, 2018: 0 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 78
- Critical
- 0
- High
- 1
- Medium
- 6
- Low
- 0
- Unrated
- 71
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- 35
- Apache Software Foundation Apache Karaf · org.apache.karaf:…
- 2
- Atlassian Fisheye and Crucible
- 1
- Cloud Foundry Garden-runC
- 1
- Dell EMC Isilon OneFS · Dell EMC IsilonSD Edge
- 1
- Huawei Technologies Co. Mate RS
- 1
- Huawei Technologies Co. Mate10
- 1
- marshmallow
- 1
- matrix-synapse
- 1
- McAfee Application Control
- 1
High 1
Medium, low and unrated 77
- CVE-2017-3912McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypassMcAfee Application Control and Change Control
- CVE-2018-6690McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACCMcAfee Application Control
- CVE-2018-6693Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerabilityMcAfee Endpoint Security for Linux Threat Prevention
- CVE-2018-11084Garden-runC prevents deletion of some app environmentsCloud Foundry Garden-runC
- CVE-2018-13982Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template…smarty/smarty
- CVE-2018-15546Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file.
- CVE-2018-16225The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through…
- CVE-2018-16515Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper…matrix-synapse
- CVE-2018-16794Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail…
- CVE-2018-16819admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file=…
- CVE-2018-16820admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests.
- CVE-2018-17071The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value…
- CVE-2018-17111The onlyOwner modifier of a smart contract implementation for Coinlancer (CL), an Ethereum ERC20 token, has a potential access control…
- CVE-2017-6913Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web…
- CVE-2018-16668An issue was discovered in CIRCONTROL CirCarLife before 4.3.
- CVE-2018-16669An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other…
- CVE-2018-16670An issue was discovered in CIRCONTROL CirCarLife before 4.3.
- CVE-2018-16671An issue was discovered in CIRCONTROL CirCarLife before 4.3.
- CVE-2017-15818In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while loading a user…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15825In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a gpt update…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15828In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing the keystore…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15844In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the function…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11265In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possible buffer overflow while…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11270In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, memory allocated with…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11273In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, 'voice_svc_dev' is allocated…
Show all 77 entriesShow fewer entries
- CVE-2018-11274In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, buffer overflow may occur when…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11275In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when flashing image using…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11276In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, double free of memory…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11278In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11280In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing user-space…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11281In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while calling…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11286In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing global…
- CVE-2018-11293In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11294In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WLAN handler indication from…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11295In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WMA handler carries a fixed…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11296In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a message…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11297In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a buffer over-read can occur…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11298In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11299In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when WLAN FW has not filled…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11300In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, callback executed from the…
- CVE-2018-11301In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11302In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11818In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11826In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on integer…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11827In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper validation of array…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11832In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of input size validation…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11836In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check can lead…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11840In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the WLAN…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11842In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, during wlan association…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11843In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack fo check on return value…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11851In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on input…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11852In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper check In the WMA API…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11860In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a potential buffer over flow…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11863In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11868In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11869In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-17176A replay issue was discovered on Neato Botvac Connected 2.2.0 devices.
- CVE-2018-17177An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices.
- CVE-2018-17178An issue was discovered on Neato Botvac Connected 2.2.0 devices.
- CVE-2018-17175In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no…marshmallow
- CVE-2018-11786In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any…Apache Software Foundation Apache Karaf · org.apache.karaf:…
- CVE-2018-11787In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at…Apache Software Foundation Apache Karaf · org.apache.karaf:…
- CVE-2018-13398The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify…Atlassian Fisheye and Crucible
- CVE-2018-14641A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3…The Linux Foundation kernel
- CVE-2018-14642An information leak vulnerability was found in Undertow.Red Hat undertow · io.undertow:undertow-core
- CVE-2018-7929Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167(C786) have a lock-screen bypass vulnerability.Huawei Technologies Co. Mate RS
- CVE-2018-7991Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have a Factory Reset Protection (FRP) bypass vulnerability.Huawei Technologies Co. Mate10
- CVE-2018-16952The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design.
- CVE-2018-16953The AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to…
- CVE-2018-16954An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3.
- CVE-2018-16955The login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS).
- CVE-2018-16956The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename…
- CVE-2018-16957The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password.
- CVE-2018-16958An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3.
- CVE-2018-16959An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3.
- CVE-2018-1000802Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('C
- CVE-2018-17153It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability.