CVEs published September 18, 2018
78 CVEs were published on September 18, 2018: 0 critical, 1 high.
- Published
- 78
- Critical
- 0
- High
- 1
- Medium
- 6
- Low
- 0
- Unrated
- 71
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- 35
- Apache Software Foundation Apache Karaf · org.apache.karaf:…
- 2
- Atlassian Fisheye and Crucible
- 1
- Cloud Foundry Garden-runC
- 1
- Dell EMC Isilon OneFS · Dell EMC IsilonSD Edge
- 1
- Huawei Technologies Co. Mate RS
- 1
- Huawei Technologies Co. Mate10
- 1
- marshmallow
- 1
- matrix-synapse
- 1
- McAfee Application Control
- 1
High 1
Medium, low and unrated 77
- CVE-2017-3912McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypassMcAfee Application Control and Change Control
- CVE-2018-6690McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACCMcAfee Application Control
- CVE-2018-6693Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerabilityMcAfee Endpoint Security for Linux Threat Prevention
- CVE-2018-11084Garden-runC prevents deletion of some app environmentsCloud Foundry Garden-runC
- CVE-2018-13982Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template codesmarty/smarty
- CVE-2018-15546Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file.
- CVE-2018-16225The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5
- CVE-2018-16515Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper trmatrix-synapse
- CVE-2018-16794Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail par
- CVE-2018-16819admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= req
- CVE-2018-16820admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests.
- CVE-2018-17071The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value wi
- CVE-2018-17111The onlyOwner modifier of a smart contract implementation for Coinlancer (CL), an Ethereum ERC20 token, has a potential access control vulne
- CVE-2017-6913Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web scri
- CVE-2018-16668An issue was discovered in CIRCONTROL CirCarLife before 4.3.
- CVE-2018-16669An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products
- CVE-2018-16670An issue was discovered in CIRCONTROL CirCarLife before 4.3.
- CVE-2018-16671An issue was discovered in CIRCONTROL CirCarLife before 4.3.
- CVE-2017-15818In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while loading a user applicationQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15825In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a gpt update, aQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15828In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing the keystore in Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15844In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the function foQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11265In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possible buffer overflow while iQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11270In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, memory allocated with devm_kzallQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11273In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, 'voice_svc_dev' is allocated as
- CVE-2018-11274In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, buffer overflow may occur when pQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11275In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when flashing image using FastboQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11276In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, double free of memory allocationQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11278In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start codeQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11280In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing user-space therQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11281In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while calling IPA_IOC_MDFY_RT_RUQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11286In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing global variable
- CVE-2018-11293In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handlerQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11294In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WLAN handler indication from theQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11295In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WMA handler carries a fixed evenQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11296In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a message from Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11297In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a buffer over-read can occur In Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11298In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing SET_PASSPOINT_LQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11299In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when WLAN FW has not filled the Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11300In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, callback executed from the other
- CVE-2018-11301In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length wQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11302In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11818In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed downQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11826In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on integer overfloQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11827In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper validation of array indQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11832In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of input size validation beQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11836In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check can lead tQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11840In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the WLAN driverQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11842In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, during wlan association, driver Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11843In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack fo check on return value inQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11851In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on input received Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11852In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper check In the WMA API foQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11860In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a potential buffer over flow couQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11863In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11868In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11869In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-17176A replay issue was discovered on Neato Botvac Connected 2.2.0 devices.
- CVE-2018-17177An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices.
- CVE-2018-17178An issue was discovered on Neato Botvac Connected 2.2.0 devices.
- CVE-2018-17175In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "onmarshmallow
- CVE-2018-11786In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any useApache Software Foundation Apache Karaf · org.apache.karaf:…
- CVE-2018-11787In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/consoApache Software Foundation Apache Karaf · org.apache.karaf:…
- CVE-2018-13398The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-comAtlassian Fisheye and Crucible
- CVE-2018-14641A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive,The Linux Foundation kernel
- CVE-2018-14642An information leak vulnerability was found in Undertow.Red Hat undertow · io.undertow:undertow-core
- CVE-2018-7929Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167(C786) have a lock-screen bypass vulnerability.Huawei Technologies Co. Mate RS
- CVE-2018-7991Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have a Factory Reset Protection (FRP) bypass vulnerability.Huawei Technologies Co. Mate10
- CVE-2018-16952The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design.
- CVE-2018-16953The AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to refl
- CVE-2018-16954An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3.
- CVE-2018-16955The login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS).
- CVE-2018-16956The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename req
- CVE-2018-16957The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password.
- CVE-2018-16958An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3.
- CVE-2018-16959An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3.
- CVE-2018-1000802Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('C
- CVE-2018-17153It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability.