# CVEs published 2018-06-06

27 CVEs were published on June 6, 2018: 0 critical, 1 high. Days are UTC.

- [CVE-2017-18154](https://cve.now/CVE-2017-18154.md): A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3562](https://cve.now/CVE-2018-3562.md): Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF (Android for MSM, Firefox OS for M (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3565](https://cve.now/CVE-2018-3565.md): While sending a probe request indication in lim\_send\_sme\_probe\_req\_ind() in all Android releases from CAF (Android for MSM, Firefox OS for M (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3578](https://cve.now/CVE-2018-3578.md): Type mismatch for ie\_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading to a heap buffer over (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3580](https://cve.now/CVE-2018-3580.md): Stack-based buffer overflow can occur In the WLAN driver if the pmkid\_count value is larger than the PMKIDCache size in all Android releases (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3852](https://cve.now/CVE-2018-3852.md): An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. (CVSS 7.5, Talos Ocularis)
- [CVE-2018-5840](https://cve.now/CVE-2018-5840.md): Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (And (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5841](https://cve.now/CVE-2018-5841.md): dcc\_curr\_list is initialized with a default invalid value that is expected to be programmed by the user through a sysfs node which could lea (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5845](https://cve.now/CVE-2018-5845.md): A race condition in drm\_atomic\_nonblocking\_commit() in the display driver can potentially lead to a Use After Free scenario in all Android r (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5846](https://cve.now/CVE-2018-5846.md): A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA\_IOC\_NOTIFY\_WAN\_UPSTREAM\_ROUTE\_ADD/IPA\_IOC\_NOTIFY\_WAN\_UPST (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5850](https://cve.now/CVE-2018-5850.md): In the function csr\_update\_fils\_params\_rso(), insufficient validation on a key length can result in an integer underflow leading to a buffer (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-7906](https://cve.now/CVE-2017-7906.md): In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which (no CVSS, ICS-CERT ABB IP GATEWAY)
- [CVE-2017-7931](https://cve.now/CVE-2017-7931.md): In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to acce (no CVSS, ICS-CERT ABB IP GATEWAY)
- [CVE-2017-7933](https://cve.now/CVE-2017-7933.md): In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unaut (no CVSS)
- [CVE-2018-10198](https://cve.now/CVE-2018-10198.md): An issue was discovered in OTRS 6.0.x before 6.0.7. (no CVSS)
- [CVE-2018-1265](https://cve.now/CVE-2018-1265.md): Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. (no CVSS, Cloud Foundry Diego)
- [CVE-2018-1268](https://cve.now/CVE-2018-1268.md): Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to (no CVSS, Cloud Foundry Loggregator)
- [CVE-2018-1269](https://cve.now/CVE-2018-1269.md): Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to (no CVSS, Cloud Foundry Loggregator)
- [CVE-2018-7510](https://cve.now/CVE-2018-7510.md): In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords are (no CVSS, ICS-CERT BeaconMedaes TotalAlert Scroll Medical Air Systems…)
- [CVE-2018-1000203](https://cve.now/CVE-2018-1000203.md): Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f (latest release as of Sept 2017) contain (no CVSS)
- [CVE-2017-1474](https://cve.now/CVE-2017-1474.md): IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorize (CVSS 5.3, IBM Security Access Manager)
- [CVE-2017-1476](https://cve.now/CVE-2017-1476.md): IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensit (CVSS 5.9, IBM Security Access Manager)
- [CVE-2017-1480](https://cve.now/CVE-2017-1480.md): IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files (CVSS 4.3, IBM Security Access Manager)
- [CVE-2018-1456](https://cve.now/CVE-2018-1456.md): IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML da (no CVSS)
- [CVE-2018-11553](https://cve.now/CVE-2018-11553.md): SGIN.CN xiangyun platform V9.4.10 has XSS via the login\_url parameter to /login.php. (no CVSS)
- [CVE-2018-11808](https://cve.now/CVE-2018-11808.md): Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attack (no CVSS)
- [CVE-2018-11813](https://cve.now/CVE-2018-11813.md): libjpeg 9c has a large loop because read\_pixel in rdtarga.c mishandles EOF. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-06-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.