CVEs published July 6, 2018
96 CVEs were published on July 6, 2018: 0 critical, 2 high.
- Published
- 96
- Critical
- 0
- High
- 2
- Medium
- 16
- Low
- 2
- Unrated
- 76
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- 43
- Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- 9
- IBM Rational Quality Manager
- 5
- Qualcomm Snapdragon Mobile, Snapdragon Wear
- 5
- TrackR Bravo Mobile Application
- 4
- IBM FileNet P8 Platform
- 3
- mercurial
- 3
- IBM Rational Rhapsody Design Manager · IBM Rational Soft… +5
- 2
- [UNKNOWN] docker
- 1
- [UNKNOWN] rhscon-core
- 1
High 2
- CVE-2018-1542IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1IBM FileNet P8 Platform
- CVE-2018-8929Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Client before 1.2.4-022Synology SSL VPN Client
Medium, low and unrated 94
- CVE-2016-6538TrackR Bravo mobile application stores account passwords in cleartextTrackR Bravo Mobile Application
- CVE-2016-6539TrackR Bravo MAC address can be exposed in close proximity and used to obtain the device IDTrackR Bravo Mobile Application
- CVE-2016-6540TrackR Bravo is missing authentication for the cloud service and allows querying or sending of GPS data from unauthenticated usersTrackR Bravo Mobile Application
- CVE-2016-6541TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributesTrackR Bravo Mobile Application
- CVE-2017-15851Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android rQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11304Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overfloQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-13410Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and applica
- CVE-2018-3570In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_foQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3586An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android for MSM, Firefox OS Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3587In a firmware memory dump feature in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android)Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3608A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow Trend Micro Maximum Security
- CVE-2018-5853A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD AndroiQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5855While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM,Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5858In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before securQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5859Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM,Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5862In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD AndroQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5864While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD AndroiQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5865While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5872While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSMQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5873An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11.Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5886A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5907Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overfloQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-11088Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2017-14872While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in AndroiQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-14893While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15824In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15856Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases frQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-18158Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-18159In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11257Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versionsQualcomm Snapdragon Mobile
- CVE-2018-11258In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM96Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11259Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-baQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-13407A CSRF issue was discovered in Jirafeau before 3.4.1.
- CVE-2018-13408An issue was discovered in Jirafeau before 3.4.1.
- CVE-2018-13409An issue was discovered in Jirafeau before 3.4.1.
- CVE-2018-3564In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before securityQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3569A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the linux kernel (AndroidQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3577While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in AndroiQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3597In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before securitQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5829In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD AndroiQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5830While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android releases from CAF using Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5831In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security paQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5832Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS foQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5834In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5835If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copying keyRSC in Android Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5836In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) beforeQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5838Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-boQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-5874While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-5875While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and SnapdrQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-5876While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-5878While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon MobilQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-5882While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and SnapdQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-5884Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire perQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2018-5885While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile andQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2018-5887While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5888While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, FiQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5889While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSMQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5890If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases frQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5891While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available.Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2018-5892The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2018-5893While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM,Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5894Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-5895Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into param_buf->num_wow_packeQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5896In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5897While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly inQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5898Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyond certain limit in AQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5899In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-10892The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames.[UNKNOWN] docker
- CVE-2017-1237IBM Jazz based applications are vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management · IBM Ra… +5
- CVE-2017-1238IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2017-1239IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses.IBM Rational Quality Manager
- CVE-2017-1242IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.IBM Rational Quality Manager
- CVE-2017-1248IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.IBM Rational Quality Manager
- CVE-2017-1329IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.IBM Rational Quality Manager
- CVE-2017-1488An undisclosed vulnerability in Jazz common products exists with potential for information disclosure.IBM Rational Engineering Lifecycle Manager · IBM Rationa… +5
- CVE-2017-1509IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid IBM Rational Rhapsody Design Manager · IBM Rational Soft… +5
- CVE-2017-1559Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests.IBM Rational Rhapsody Design Manager · IBM Rational Soft… +5
- CVE-2017-1795IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSpIBM WebSphere MQ
- CVE-2018-11124Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to
- CVE-2018-13108All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers ar
- CVE-2018-13109All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers a
- CVE-2018-13110All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers ca
- CVE-2018-13405The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group own
- CVE-2018-13406An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local
- CVE-2018-1494IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting.IBM Rational DOORS Next Generation
- CVE-2018-1546IBM API Connect information disclosureIBM API Connect
- CVE-2018-1555IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting.IBM FileNet P8 Platform
- CVE-2018-1556IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting.IBM FileNet P8 Platform
- CVE-2018-1621IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused byIBM WebSphere Application Server
- CVE-2018-1676IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting.IBM Planning Analytics Local
- CVE-2017-2665The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.[UNKNOWN] rhscon-core
- CVE-2018-13346The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of thmercurial
- CVE-2018-13347mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.mercurial
- CVE-2018-13348The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaimercurial