# CVEs published 2018-10-26

37 CVEs were published on October 26, 2018: 0 critical, 4 high. Days are UTC.

- [CVE-2018-18694](https://cve.now/CVE-2018-18694.md): admin/index.php?id=filesmanager in Monstra CMS 3.0.4 allows remote authenticated administrators to trigger stored XSS via JavaScript content (no CVSS)
- [CVE-2018-18690](https://cve.now/CVE-2018-18690.md): In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational unt (no CVSS)
- [CVE-2018-4022](https://cve.now/CVE-2018-4022.md): A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV (matroska) file format. (CVSS 7.3, MKVToolNix)
- [CVE-2018-6559](https://cve.now/CVE-2018-6559.md): The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally (no CVSS, Canonical Linux kernel, as used in Ubuntu 18.04 LTS and Ubu…)
- [CVE-2018-15686](https://cve.now/CVE-2018-15686.md): systemd: reexec state injection: fgets() on overlong lines leads to line splitting (CVSS 7.0, systemd)
- [CVE-2018-15687](https://cve.now/CVE-2018-15687.md): systemd: chown\_one() can dereference symlinks (CVSS 7.8, systemd)
- [CVE-2018-15688](https://cve.now/CVE-2018-15688.md): Out-of-Bounds write in systemd-networkd dhcpv6 option handling (CVSS 8.8, systemd)
- [CVE-2017-18124](https://cve.now/CVE-2017-18124.md): During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mob (no CVSS, Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon…)
- [CVE-2017-18308](https://cve.now/CVE-2017-18308.md): Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM960 (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2017-18309](https://cve.now/CVE-2017-18309.md): A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2017-18310](https://cve.now/CVE-2017-18310.md): ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/ (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2017-18311](https://cve.now/CVE-2017-18311.md): XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration port (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-11305](https://cve.now/CVE-2018-11305.md): When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snap (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-11821](https://cve.now/CVE-2018-11821.md): Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-11822](https://cve.now/CVE-2018-11822.md): A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11824](https://cve.now/CVE-2018-11824.md): A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-11828](https://cve.now/CVE-2018-11828.md): When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11846](https://cve.now/CVE-2018-11846.md): The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11849](https://cve.now/CVE-2018-11849.md): Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapd (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-11850](https://cve.now/CVE-2018-11850.md): Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-11853](https://cve.now/CVE-2018-11853.md): Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdrago (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-11854](https://cve.now/CVE-2018-11854.md): Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11950](https://cve.now/CVE-2018-11950.md): Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850 (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11951](https://cve.now/CVE-2018-11951.md): Improper access control in core module lead XBL\_LOADER performs the ZI region clear for QTEE instead of XBL\_SEC in Snapdragon Mobile in vers (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-18657](https://cve.now/CVE-2018-18657.md): An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. (no CVSS)
- [CVE-2018-18658](https://cve.now/CVE-2018-18658.md): An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. (no CVSS)
- [CVE-2018-18659](https://cve.now/CVE-2018-18659.md): An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. (no CVSS)
- [CVE-2018-18660](https://cve.now/CVE-2018-18660.md): An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. (no CVSS)
- [CVE-2018-18661](https://cve.now/CVE-2018-18661.md): An issue was discovered in LibTIFF 4.0.9. (no CVSS)
- [CVE-2018-18662](https://cve.now/CVE-2018-18662.md): There is an out-of-bounds read in fz\_run\_t3\_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool. (no CVSS)
- [CVE-2018-3588](https://cve.now/CVE-2018-3588.md): There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-5866](https://cve.now/CVE-2018-5866.md): While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9 (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-5914](https://cve.now/CVE-2018-5914.md): Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in S (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-18656](https://cve.now/CVE-2018-18656.md): The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. (no CVSS)
- [CVE-2018-18653](https://cve.now/CVE-2018-18653.md): The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Se (no CVSS)
- [CVE-2018-18654](https://cve.now/CVE-2018-18654.md): Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. (no CVSS)
- [CVE-2018-18655](https://cve.now/CVE-2018-18655.md): Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-10-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.