# CVEs published 2018-07-06

96 CVEs were published on July 6, 2018: 0 critical, 2 high. Days are UTC.

- [CVE-2016-6538](https://cve.now/CVE-2016-6538.md): TrackR Bravo mobile application stores account passwords in cleartext (no CVSS, TrackR Bravo Mobile Application)
- [CVE-2016-6539](https://cve.now/CVE-2016-6539.md): TrackR Bravo MAC address can be exposed in close proximity and used to obtain the device ID (no CVSS, TrackR Bravo Mobile Application)
- [CVE-2016-6540](https://cve.now/CVE-2016-6540.md): TrackR Bravo is missing authentication for the cloud service and allows querying or sending of GPS data from unauthenticated users (no CVSS, TrackR Bravo Mobile Application)
- [CVE-2016-6541](https://cve.now/CVE-2016-6541.md): TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes (no CVSS, TrackR Bravo Mobile Application)
- [CVE-2017-15851](https://cve.now/CVE-2017-15851.md): Lack of copy\_from\_user and information leak in function "msm\_ois\_subdev\_do\_ioctl, file msm\_ois.c can lead to a camera crash in all Android r (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-11304](https://cve.now/CVE-2018-11304.md): Possible buffer overflow in msm\_adsp\_stream\_callback\_put due to lack of input validation of user-provided data that leads to integer overflo (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-13410](https://cve.now/CVE-2018-13410.md): Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and applica (no CVSS)
- [CVE-2018-3570](https://cve.now/CVE-2018-3570.md): In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list\_fo (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3586](https://cve.now/CVE-2018-3586.md): An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android for MSM, Firefox OS (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3587](https://cve.now/CVE-2018-3587.md): In a firmware memory dump feature in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3608](https://cve.now/CVE-2018-3608.md): A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow (no CVSS, Trend Micro Maximum Security)
- [CVE-2018-5853](https://cve.now/CVE-2018-5853.md): A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Androi (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5855](https://cve.now/CVE-2018-5855.md): While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5858](https://cve.now/CVE-2018-5858.md): In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before secur (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5859](https://cve.now/CVE-2018-5859.md): Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5862](https://cve.now/CVE-2018-5862.md): In \_\_wlan\_hdd\_cfg80211\_vendor\_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Andro (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5864](https://cve.now/CVE-2018-5864.md): While processing a WMI\_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Androi (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5865](https://cve.now/CVE-2018-5865.md): While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MS (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5872](https://cve.now/CVE-2018-5872.md): While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5873](https://cve.now/CVE-2018-5873.md): An issue was discovered in the \_\_ns\_get\_path function in fs/nsfs.c in the Linux kernel before 4.11. (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5886](https://cve.now/CVE-2018-5886.md): A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5907](https://cve.now/CVE-2018-5907.md): Possible buffer overflow in msm\_adsp\_stream\_callback\_put due to lack of input validation of user-provided data that leads to integer overflo (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11088](https://cve.now/CVE-2017-11088.md): Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MS (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2017-14872](https://cve.now/CVE-2017-14872.md): While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Androi (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-14893](https://cve.now/CVE-2017-14893.md): While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-15824](https://cve.now/CVE-2017-15824.md): In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0 (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-15856](https://cve.now/CVE-2017-15856.md): Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases fr (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-18158](https://cve.now/CVE-2017-18158.md): Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-18159](https://cve.now/CVE-2017-18159.md): In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0 (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-11257](https://cve.now/CVE-2018-11257.md): Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11258](https://cve.now/CVE-2018-11258.md): In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM96 (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-11259](https://cve.now/CVE-2018-11259.md): Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-ba (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-13407](https://cve.now/CVE-2018-13407.md): A CSRF issue was discovered in Jirafeau before 3.4.1. (no CVSS)
- [CVE-2018-13408](https://cve.now/CVE-2018-13408.md): An issue was discovered in Jirafeau before 3.4.1. (no CVSS)
- [CVE-2018-13409](https://cve.now/CVE-2018-13409.md): An issue was discovered in Jirafeau before 3.4.1. (no CVSS)
- [CVE-2018-3564](https://cve.now/CVE-2018-3564.md): In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3569](https://cve.now/CVE-2018-3569.md): A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the linux kernel (Android (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3577](https://cve.now/CVE-2018-3577.md): While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in Androi (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3597](https://cve.now/CVE-2018-3597.md): In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before securit (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5829](https://cve.now/CVE-2018-5829.md): In wlan\_hdd\_cfg80211\_set\_privacy\_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Androi (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5830](https://cve.now/CVE-2018-5830.md): While processing the HTT\_T2H\_MSG\_TYPE\_MGMT\_TX\_COMPL\_IND message, a buffer overflow can potentially occur in Android releases from CAF using (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5831](https://cve.now/CVE-2018-5831.md): In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security pa (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5832](https://cve.now/CVE-2018-5832.md): Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS fo (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5834](https://cve.now/CVE-2018-5834.md): In \_\_wlan\_hdd\_cfg80211\_vendor\_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5835](https://cve.now/CVE-2018-5835.md): If the seq\_len is greater then CSR\_MAX\_RSC\_LEN, a buffer overflow in \_\_wlan\_hdd\_cfg80211\_add\_key() may occur when copying keyRSC in Android (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5836](https://cve.now/CVE-2018-5836.md): In wma\_nan\_rsp\_event\_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5838](https://cve.now/CVE-2018-5838.md): Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bo (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-5874](https://cve.now/CVE-2018-5874.md): While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-5875](https://cve.now/CVE-2018-5875.md): While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdr (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-5876](https://cve.now/CVE-2018-5876.md): While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-5878](https://cve.now/CVE-2018-5878.md): While sending the response to a RIL\_REQUEST\_GET\_SMSC\_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobil (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-5882](https://cve.now/CVE-2018-5882.md): While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapd (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-5884](https://cve.now/CVE-2018-5884.md): Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire per (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-5885](https://cve.now/CVE-2018-5885.md): While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-5887](https://cve.now/CVE-2018-5887.md): While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kern (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5888](https://cve.now/CVE-2018-5888.md): While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Fi (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5889](https://cve.now/CVE-2018-5889.md): While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5890](https://cve.now/CVE-2018-5890.md): If the fdt\_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases fr (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5891](https://cve.now/CVE-2018-5891.md): While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc\_dataHandle is no longer available. (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-5892](https://cve.now/CVE-2018-5892.md): The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear. (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-5893](https://cve.now/CVE-2018-5893.md): While processing a message from firmware in htt\_t2h\_msg\_handler\_fast() in Android releases from CAF using the linux kernel (Android for MSM, (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5894](https://cve.now/CVE-2018-5894.md): Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-5895](https://cve.now/CVE-2018-5895.md): Buffer over-read may happen in wma\_process\_utf\_event() due to improper buffer length validation before writing into param\_buf-\>num\_wow\_packe (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5896](https://cve.now/CVE-2018-5896.md): In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0 (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5897](https://cve.now/CVE-2018-5897.md): While reading the data from buffer in dci\_process\_ctrl\_status() there can be buffer over-read problem if the len is not checked correctly in (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5898](https://cve.now/CVE-2018-5898.md): Integer overflow can occur in msm\_pcm\_adsp\_stream\_cmd\_put() function if the user supplied data "param\_length" goes beyond certain limit in A (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5899](https://cve.now/CVE-2018-5899.md): In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0 (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-10892](https://cve.now/CVE-2018-10892.md): The default OCI linux spec in oci/defaults{\_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. (CVSS 6.3, \[UNKNOWN\] docker)
- [CVE-2017-1237](https://cve.now/CVE-2017-1237.md): IBM Jazz based applications are vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management · IBM Ra… +5)
- [CVE-2017-1238](https://cve.now/CVE-2017-1238.md): IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2017-1239](https://cve.now/CVE-2017-1239.md): IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses. (CVSS 4.3, IBM Rational Quality Manager)
- [CVE-2017-1242](https://cve.now/CVE-2017-1242.md): IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2017-1248](https://cve.now/CVE-2017-1248.md): IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2017-1329](https://cve.now/CVE-2017-1329.md): IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2017-1488](https://cve.now/CVE-2017-1488.md): An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. (CVSS 3.7, IBM Rational Engineering Lifecycle Manager · IBM Rationa… +5)
- [CVE-2017-1509](https://cve.now/CVE-2017-1509.md): IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid (CVSS 4.3, IBM Rational Rhapsody Design Manager · IBM Rational Soft… +5)
- [CVE-2017-1559](https://cve.now/CVE-2017-1559.md): Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. (CVSS 3.1, IBM Rational Rhapsody Design Manager · IBM Rational Soft… +5)
- [CVE-2017-1795](https://cve.now/CVE-2017-1795.md): IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSp (CVSS 4.4, IBM WebSphere MQ)
- [CVE-2018-11124](https://cve.now/CVE-2018-11124.md): Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to (no CVSS)
- [CVE-2018-13108](https://cve.now/CVE-2018-13108.md): All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers ar (no CVSS)
- [CVE-2018-13109](https://cve.now/CVE-2018-13109.md): All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers a (no CVSS)
- [CVE-2018-13110](https://cve.now/CVE-2018-13110.md): All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers ca (no CVSS)
- [CVE-2018-13405](https://cve.now/CVE-2018-13405.md): The inode\_init\_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group own (no CVSS)
- [CVE-2018-13406](https://cve.now/CVE-2018-13406.md): An integer overflow in the uvesafb\_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local (no CVSS)
- [CVE-2018-1494](https://cve.now/CVE-2018-1494.md): IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational DOORS Next Generation)
- [CVE-2018-1542](https://cve.now/CVE-2018-1542.md): IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 (CVSS 7.1, IBM FileNet P8 Platform)
- [CVE-2018-1546](https://cve.now/CVE-2018-1546.md): IBM API Connect information disclosure (CVSS 5.9, IBM API Connect)
- [CVE-2018-1555](https://cve.now/CVE-2018-1555.md): IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM FileNet P8 Platform)
- [CVE-2018-1556](https://cve.now/CVE-2018-1556.md): IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM FileNet P8 Platform)
- [CVE-2018-1621](https://cve.now/CVE-2018-1621.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by (CVSS 4.4, IBM WebSphere Application Server)
- [CVE-2018-1676](https://cve.now/CVE-2018-1676.md): IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. (CVSS 6.1, IBM Planning Analytics Local)
- [CVE-2017-2665](https://cve.now/CVE-2017-2665.md): The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring. (CVSS 4.8, \[UNKNOWN\] rhscon-core)
- [CVE-2018-8929](https://cve.now/CVE-2018-8929.md): Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Client before 1.2.4-022 (CVSS 7.3, Synology SSL VPN Client)
- [CVE-2018-13346](https://cve.now/CVE-2018-13346.md): The mpatch\_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of th (no CVSS, mercurial)
- [CVE-2018-13347](https://cve.now/CVE-2018-13347.md): mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002. (no CVSS, mercurial)
- [CVE-2018-13348](https://cve.now/CVE-2018-13348.md): The mpatch\_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remai (no CVSS, mercurial)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-07-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.