# CVEs published 2018-10-29

54 CVEs were published on October 29, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-17615](https://cve.now/CVE-2018-17615.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-17616](https://cve.now/CVE-2018-17616.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-17617](https://cve.now/CVE-2018-17617.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-17618](https://cve.now/CVE-2018-17618.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-17619](https://cve.now/CVE-2018-17619.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-17620](https://cve.now/CVE-2018-17620.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-17621](https://cve.now/CVE-2018-17621.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-17622](https://cve.now/CVE-2018-17622.md): This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.1.0.5096. (no CVSS, Foxit Reader)
- [CVE-2018-17623](https://cve.now/CVE-2018-17623.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. (no CVSS, Foxit Reader)
- [CVE-2018-17624](https://cve.now/CVE-2018-17624.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. (no CVSS, Foxit Reader)
- [CVE-2018-17706](https://cve.now/CVE-2018-17706.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. (no CVSS, Foxit PhantomPDF)
- [CVE-2017-18281](https://cve.now/CVE-2017-18281.md): A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-11856](https://cve.now/CVE-2018-11856.md): Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, S (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11857](https://cve.now/CVE-2018-11857.md): Improper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mobile in version SD 835, SD 845, SD 850 (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11858](https://cve.now/CVE-2018-11858.md): When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11859](https://cve.now/CVE-2018-11859.md): Buffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850. (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11861](https://cve.now/CVE-2018-11861.md): Buffer overflow can happen in WLAN function due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SD (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11862](https://cve.now/CVE-2018-11862.md): Buffer overflow can happen in WLAN module due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SDA6 (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11865](https://cve.now/CVE-2018-11865.md): Integer overflow may happen when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-11866](https://cve.now/CVE-2018-11866.md): Integer overflow may happen in WLAN when calculating an internal structure size due to lack of validation of the input length in Snapdragon (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2018-11867](https://cve.now/CVE-2018-11867.md): Lack of buffer length check before copying in WLAN function while processing FIPS event, can lead to a buffer overflow in Snapdragon Mobile (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11870](https://cve.now/CVE-2018-11870.md): Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in S (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-11871](https://cve.now/CVE-2018-11871.md): Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Autom (no CVSS, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…)
- [CVE-2018-11872](https://cve.now/CVE-2018-11872.md): Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 845, S (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11873](https://cve.now/CVE-2018-11873.md): Improper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam buffer in Snapdragon Mobile in version SD 84 (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11874](https://cve.now/CVE-2018-11874.md): Buffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Snapdragon Mobile in version SD 835, SD (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11875](https://cve.now/CVE-2018-11875.md): Lack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in Snapdragon Mobile in version SD 845, SD 850. (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11876](https://cve.now/CVE-2018-11876.md): Lack of input validation while copying to buffer in WLAN will lead to a buffer overflow in Snapdragon Mobile in version SD 835, SD 845, SD 8 (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11877](https://cve.now/CVE-2018-11877.md): When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobi (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11879](https://cve.now/CVE-2018-11879.md): When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in ve (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11880](https://cve.now/CVE-2018-11880.md): Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11882](https://cve.now/CVE-2018-11882.md): Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA6 (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-11884](https://cve.now/CVE-2018-11884.md): Improper input validation leads to buffer overflow while processing network list offload command in WLAN function in Snapdragon Mobile in ve (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2018-17908](https://cve.now/CVE-2018-17908.md): WebAccess Versions 8.3.2 and prior. (no CVSS, WebAccess Versions 8.3.2 and prior.)
- [CVE-2018-17910](https://cve.now/CVE-2018-17910.md): WebAccess Versions 8.3.2 and prior. (no CVSS, WebAccess Versions 8.3.2 and prior.)
- [CVE-2018-18387](https://cve.now/CVE-2018-18387.md): playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse. (no CVSS)
- [CVE-2018-1380](https://cve.now/CVE-2018-1380.md): IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to ch (CVSS 2.7, IBM InfoSphere Master Data Management Collaboration Server)
- [CVE-2018-1766](https://cve.now/CVE-2018-1766.md): IBM Team Concert (RTC) 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Team Concert)
- [CVE-2018-1767](https://cve.now/CVE-2018-1767.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Cachemonitor is vulnerable to cross-site scripting. (CVSS 6.1, IBM WebSphere Application Server)
- [CVE-2018-0735](https://cve.now/CVE-2018-0735.md): Timing attack against ECDSA signature generation (no CVSS, OpenSSL)
- [CVE-2018-18781](https://cve.now/CVE-2018-18781.md): DedeCMS 5.7 SP2 allows XSS via the /member/uploads\_select.php f or keyword parameter. (no CVSS)
- [CVE-2018-18782](https://cve.now/CVE-2018-18782.md): Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter. (no CVSS)
- [CVE-2018-18783](https://cve.now/CVE-2018-18783.md): XSS was discovered in SEMCMS V3.4 via the semcms\_remail.php?type=ok umail parameter. (no CVSS)
- [CVE-2018-18784](https://cve.now/CVE-2018-18784.md): An issue was discovered in zzcms 8.3. (no CVSS)
- [CVE-2018-18785](https://cve.now/CVE-2018-18785.md): An issue was discovered in zzcms 8.3. (no CVSS)
- [CVE-2018-18786](https://cve.now/CVE-2018-18786.md): An issue was discovered in zzcms 8.3. (no CVSS)
- [CVE-2018-18787](https://cve.now/CVE-2018-18787.md): An issue was discovered in zzcms 8.3. (no CVSS)
- [CVE-2018-18788](https://cve.now/CVE-2018-18788.md): An issue was discovered in zzcms 8.3. (no CVSS)
- [CVE-2018-18789](https://cve.now/CVE-2018-18789.md): An issue was discovered in zzcms 8.3. (no CVSS)
- [CVE-2018-18790](https://cve.now/CVE-2018-18790.md): An issue was discovered in zzcms 8.3. (no CVSS)
- [CVE-2018-18791](https://cve.now/CVE-2018-18791.md): An issue was discovered in zzcms 8.3. (no CVSS)
- [CVE-2018-18792](https://cve.now/CVE-2018-18792.md): An issue was discovered in zzcms 8.3. (no CVSS)
- [CVE-2018-18771](https://cve.now/CVE-2018-18771.md): An issue was discovered in LuLu CMS through 2015-05-14. (no CVSS)
- [CVE-2018-18778](https://cve.now/CVE-2018-18778.md): ACME mini\_httpd before 1.30 lets remote users read arbitrary files. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-10-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.