# CVEs published 2018-10-23

69 CVEs were published on October 23, 2018: 0 critical, 1 high. Days are UTC.

- [CVE-2018-12901](https://cve.now/CVE-2018-12901.md): A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 (19.49.9400.0) and earlier, could allow an unauthenticated att (no CVSS)
- [CVE-2018-15497](https://cve.now/CVE-2018-15497.md): The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. (no CVSS)
- [CVE-2018-16226](https://cve.now/CVE-2018-16226.md): A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an unauthentica (no CVSS)
- [CVE-2018-16235](https://cve.now/CVE-2018-16235.md): Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 has XSS via the Feed (no CVSS)
- [CVE-2018-17444](https://cve.now/CVE-2018-17444.md): A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. (no CVSS)
- [CVE-2018-17445](https://cve.now/CVE-2018-17445.md): A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. (no CVSS)
- [CVE-2018-17446](https://cve.now/CVE-2018-17446.md): A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. (no CVSS)
- [CVE-2018-17447](https://cve.now/CVE-2018-17447.md): An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x be (no CVSS)
- [CVE-2018-17448](https://cve.now/CVE-2018-17448.md): An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. (no CVSS)
- [CVE-2018-17873](https://cve.now/CVE-2018-17873.md): An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows a (no CVSS)
- [CVE-2018-17877](https://cve.now/CVE-2018-17877.md): A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an exter (no CVSS)
- [CVE-2018-17968](https://cve.now/CVE-2018-17968.md): A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an extern (no CVSS)
- [CVE-2018-18437](https://cve.now/CVE-2018-18437.md): In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error\_Desc parameter. (no CVSS)
- [CVE-2018-18467](https://cve.now/CVE-2018-18467.md): An issue was discovered in Daniel Gultsch Conversations 2.3.4. (no CVSS)
- [CVE-2018-18475](https://cve.now/CVE-2018-18475.md): Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload. (no CVSS)
- [CVE-2018-7427](https://cve.now/CVE-2018-7427.md): Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6 (no CVSS)
- [CVE-2018-7429](https://cve.now/CVE-2018-7429.md): Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and Splunk Light before 6.5.0 allow remote att (no CVSS)
- [CVE-2018-7431](https://cve.now/CVE-2018-7431.md): Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.1 (no CVSS)
- [CVE-2018-7432](https://cve.now/CVE-2018-7432.md): Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allow (no CVSS)
- [CVE-2017-18349](https://cve.now/CVE-2017-18349.md): parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbi (no CVSS, com.alibaba:fastjson · ro.pippo:pippo-fastjson)
- [CVE-2018-14806](https://cve.now/CVE-2018-14806.md): Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code. (no CVSS, Advantech WebAccess)
- [CVE-2018-14816](https://cve.now/CVE-2018-14816.md): Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an (no CVSS, Advantech WebAccess)
- [CVE-2018-14820](https://cve.now/CVE-2018-14820.md): Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which (no CVSS, Advantech WebAccess)
- [CVE-2018-14828](https://cve.now/CVE-2018-14828.md): Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files (no CVSS, Advantech WebAccess)
- [CVE-2018-18628](https://cve.now/CVE-2018-18628.md): An issue was discovered in Pippo 1.11.0. (no CVSS, ro.pippo:pippo-core)
- [CVE-2018-18626](https://cve.now/CVE-2018-18626.md): An issue was discovered in PHPYun V4.6. (no CVSS)
- [CVE-2018-18608](https://cve.now/CVE-2018-18608.md): DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the p (no CVSS)
- [CVE-2018-18622](https://cve.now/CVE-2018-18622.md): An issue was discovered in Waimai Super Cms 20150505. (no CVSS)
- [CVE-2018-18589](https://cve.now/CVE-2018-18589.md): MFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization Vulnerability (CVSS 6.3, Micro Focus Microfocus Real User Monitoring)
- [CVE-2018-18605](https://cve.now/CVE-2018-18605.md): A heap-based buffer over-read issue was discovered in the function sec\_merge\_hash\_lookup in merge.c in the Binary File Descriptor (BFD) libr (no CVSS)
- [CVE-2018-18606](https://cve.now/CVE-2018-18606.md): An issue was discovered in the merge\_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in (no CVSS)
- [CVE-2018-18607](https://cve.now/CVE-2018-18607.md): An issue was discovered in elf\_link\_input\_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B (no CVSS)
- [CVE-2018-8569](https://cve.now/CVE-2018-8569.md): A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content, aka "Yammer Desktop (no CVSS, Microsoft Yammer Desktop App)
- [CVE-2018-18599](https://cve.now/CVE-2018-18599.md): Stegdetect through 2018-05-26 has an out-of-bounds write in f5\_compress in the f5.c file. (no CVSS)
- [CVE-2018-18603](https://cve.now/CVE-2018-18603.md): 360 Total Security 3.5.0.1033 allows a Sandbox Escape via an "import os" statement, followed by os.system("CMD") or os.system("PowerShell"), (no CVSS)
- [CVE-2018-16837](https://cve.now/CVE-2018-16837.md): Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. (CVSS 7.8, \[UNKNOWN\] Ansible · ansible)
- [CVE-2018-13400](https://cve.now/CVE-2018-13400.md): Several administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before (no CVSS, Atlassian Jira)
- [CVE-2018-13401](https://cve.now/CVE-2018-13401.md): The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before vers (no CVSS, Atlassian Jira)
- [CVE-2018-13402](https://cve.now/CVE-2018-13402.md): Many resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, fro (no CVSS, Atlassian Jira)
- [CVE-2018-15366](https://cve.now/CVE-2018-15366.md): A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and abo (no CVSS, Trend Micro Antivirus for Mac)
- [CVE-2018-15367](https://cve.now/CVE-2018-15367.md): A ctl\_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) (no CVSS, Trend Micro Antivirus for Mac)
- [CVE-2018-18327](https://cve.now/CVE-2018-18327.md): A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and abo (no CVSS, Trend Micro Antivirus for Mac)
- [CVE-2018-18328](https://cve.now/CVE-2018-18328.md): A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and abo (no CVSS, Trend Micro Antivirus for Mac)
- [CVE-2018-18329](https://cve.now/CVE-2018-18329.md): A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and abo (no CVSS, Trend Micro Antivirus for Mac)
- [CVE-2018-7911](https://cve.now/CVE-2018-7911.md): Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00 (no CVSS, Huawei Technologies Co. ALP-AL00B, ALP-AL00B-RSC, BLA-TL00B…)
- [CVE-2017-18170](https://cve.now/CVE-2017-18170.md): Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, S (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2017-18171](https://cve.now/CVE-2017-18171.md): Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdrago (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2017-18172](https://cve.now/CVE-2017-18172.md): In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflo (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile)
- [CVE-2017-18277](https://cve.now/CVE-2017-18277.md): When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memo (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2017-18282](https://cve.now/CVE-2017-18282.md): Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version M (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2017-18283](https://cve.now/CVE-2017-18283.md): Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212 (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2017-18292](https://cve.now/CVE-2017-18292.md): Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2017-18293](https://cve.now/CVE-2017-18293.md): When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using th (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2017-18294](https://cve.now/CVE-2017-18294.md): While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size (no CVSS, Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon…)
- [CVE-2017-18295](https://cve.now/CVE-2017-18295.md): Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2017-18296](https://cve.now/CVE-2017-18296.md): Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snap (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2017-18297](https://cve.now/CVE-2017-18297.md): Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2017-18298](https://cve.now/CVE-2017-18298.md): Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in vers (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2017-18299](https://cve.now/CVE-2017-18299.md): Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and S (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2017-18300](https://cve.now/CVE-2017-18300.md): Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdrag (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2017-18303](https://cve.now/CVE-2017-18303.md): While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2017-18304](https://cve.now/CVE-2017-18304.md): Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon (no CVSS, Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon…)
- [CVE-2017-18305](https://cve.now/CVE-2017-18305.md): XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdrag (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2017-18312](https://cve.now/CVE-2017-18312.md): While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile)
- [CVE-2017-18313](https://cve.now/CVE-2017-18313.md): Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-18587](https://cve.now/CVE-2018-18587.md): BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash. (no CVSS)
- [CVE-2018-18586](https://cve.now/CVE-2018-18586.md): chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pat (no CVSS)
- [CVE-2018-18584](https://cve.now/CVE-2018-18584.md): In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Qua (no CVSS)
- [CVE-2018-18585](https://cve.now/CVE-2018-18585.md): chmd\_read\_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\\0' as its first or second character (such as t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-10-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.