CVEs published October 26, 2018
37 CVEs were published on October 26, 2018: 0 critical, 4 high.
- Published
- 37
- Critical
- 0
- High
- 4
- Medium
- 0
- Low
- 0
- Unrated
- 33
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Qualcomm Snapdragon Mobile
- 7
- Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- 6
- Qualcomm Snapdragon Mobile, Snapdragon Wear
- 6
- systemd
- 3
- Canonical Linux kernel, as used in Ubuntu 18.04 LTS and Ubu…
- 1
- MKVToolNix
- 1
- Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon…
- 1
High 4
- CVE-2018-4022A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV (matroska) file format.MKVToolNix
- CVE-2018-15686systemd: reexec state injection: fgets() on overlong lines leads to line splittingsystemd
- CVE-2018-15687systemd: chown_one() can dereference symlinkssystemd
- CVE-2018-15688Out-of-Bounds write in systemd-networkd dhcpv6 option handlingsystemd
Medium, low and unrated 33
- CVE-2018-18694admin/index.php?id=filesmanager in Monstra CMS 3.0.4 allows remote authenticated administrators to trigger stored XSS via JavaScript content
- CVE-2018-18690In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational unt
- CVE-2018-6559The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normallyCanonical Linux kernel, as used in Ubuntu 18.04 LTS and Ubu…
- CVE-2017-18124During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon MobQualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon…
- CVE-2017-18308Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM960Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2017-18309A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, Qualcomm Snapdragon Mobile
- CVE-2017-18310ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2017-18311XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration portQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11305When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, SnapQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11821Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDMQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11822A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660Qualcomm Snapdragon Mobile
- CVE-2018-11824A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SDQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11828When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying Qualcomm Snapdragon Mobile
- CVE-2018-11846The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SDQualcomm Snapdragon Mobile
- CVE-2018-11849Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, SnapdQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11850Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, SnapdragonQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11853Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, SnapdragoQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11854Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, Qualcomm Snapdragon Mobile
- CVE-2018-11950Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850Qualcomm Snapdragon Mobile
- CVE-2018-11951Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobile in versQualcomm Snapdragon Mobile
- CVE-2018-18657An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.
- CVE-2018-18658An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.
- CVE-2018-18659An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.
- CVE-2018-18660An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.
- CVE-2018-18661An issue was discovered in LibTIFF 4.0.9.
- CVE-2018-18662There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool.
- CVE-2018-3588There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-5866While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2018-5914Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in SQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2018-18656The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext.
- CVE-2018-18653The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Se
- CVE-2018-18654Crossroads 2.81 does not properly handle the /tmp directory during a build of xr.
- CVE-2018-18655Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lack