CVEs published June 6, 2018
27 CVEs were published on June 6, 2018: 0 critical, 1 high.
- Published
- 27
- Critical
- 0
- High
- 1
- Medium
- 3
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- 10
- IBM Security Access Manager
- 3
- Cloud Foundry Loggregator
- 2
- ICS-CERT ABB IP GATEWAY
- 2
- Cloud Foundry Diego
- 1
- ICS-CERT BeaconMedaes TotalAlert Scroll Medical Air Systems…
- 1
- Talos Ocularis
- 1
High 1
Medium, low and unrated 26
- CVE-2017-18154A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3562Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF (Android for MSM, Firefox OS for MQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3565While sending a probe request indication in lim_send_sme_probe_req_ind() in all Android releases from CAF (Android for MSM, Firefox OS for MQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3578Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading to a heap buffer overQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3580Stack-based buffer overflow can occur In the WLAN driver if the pmkid_count value is larger than the PMKIDCache size in all Android releasesQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5840Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (AndQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5841dcc_curr_list is initialized with a default invalid value that is expected to be programmed by the user through a sysfs node which could leaQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5845A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scenario in all Android rQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5846A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5850In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a bufferQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-7906In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which ICS-CERT ABB IP GATEWAY
- CVE-2017-7931In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to acceICS-CERT ABB IP GATEWAY
- CVE-2017-7933In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unaut
- CVE-2018-10198An issue was discovered in OTRS 6.0.x before 6.0.7.
- CVE-2018-1265Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers.Cloud Foundry Diego
- CVE-2018-1268Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior toCloud Foundry Loggregator
- CVE-2018-1269Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior toCloud Foundry Loggregator
- CVE-2018-7510In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords areICS-CERT BeaconMedaes TotalAlert Scroll Medical Air Systems…
- CVE-2018-1000203Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f (latest release as of Sept 2017) contain
- CVE-2017-1474IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorizeIBM Security Access Manager
- CVE-2017-1476IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitIBM Security Access Manager
- CVE-2017-1480IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log filesIBM Security Access Manager
- CVE-2018-1456IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML da
- CVE-2018-11553SGIN.CN xiangyun platform V9.4.10 has XSS via the login_url parameter to /login.php.
- CVE-2018-11808Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attack
- CVE-2018-11813libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.