# CVEs published 2018-10-25

7 CVEs were published on October 25, 2018: 1 critical, 0 high. Days are UTC.

- [CVE-2018-18652](https://cve.now/CVE-2018-18652.md): A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrar (no CVSS)
- [CVE-2018-17904](https://cve.now/CVE-2018-17904.md): Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. (no CVSS, GEOVAP Reliance 4 SCADA/HMI)
- [CVE-2018-14665](https://cve.now/CVE-2018-14665.md): A flaw was found in xorg-x11-server before 1.20.3. (no CVSS)
- [CVE-2018-3970](https://cve.now/CVE-2018-3970.md): An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. (CVSS 4.0, Talos Sophos)
- [CVE-2018-3971](https://cve.now/CVE-2018-3971.md): An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. (CVSS 9.3, Talos Sophos)
- [CVE-2018-18650](https://cve.now/CVE-2018-18650.md): An issue was discovered in Xpdf 4.00. (no CVSS)
- [CVE-2018-18651](https://cve.now/CVE-2018-18651.md): An issue was discovered in Xpdf 4.00. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-10-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.