# CVEs published 2018-11-06

47 CVEs were published on November 6, 2018: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2018-14667](https://cve.now/CVE-2018-14667.md): The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. (CVSS 9.8, KEV, \[UNKNOWN\] RichFaces · org.richfaces:richfaces-core)
- [CVE-2018-17186](https://cve.now/CVE-2018-17186.md): An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, (no CVSS, Apache Software Foundation Apache Syncope · org.apache.sync…)
- [CVE-2018-16473](https://cve.now/CVE-2018-16473.md): A path traversal in takeapeek module versions \<=0.2.2 allows an attacker to list directory and files. (no CVSS, npm takeapeek · takeapeek)
- [CVE-2018-16474](https://cve.now/CVE-2018-16474.md): A stored xss in tianma-static module versions \<=1.0.4 allows an attacker to execute arbitrary javascript. (no CVSS, npm tianma-static · tianma-static)
- [CVE-2018-16475](https://cve.now/CVE-2018-16475.md): A Path Traversal in Knightjs versions \<= 0.0.1 allows an attacker to read content of arbitrary files on a remote server. (no CVSS, npm knightjs · knightjs)
- [CVE-2018-17184](https://cve.now/CVE-2018-17184.md): A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names (no CVSS, Apache Software Foundation Apache Syncope · org.apache.sync…)
- [CVE-2018-9355](https://cve.now/CVE-2018-9355.md): In bta\_dm\_sdp\_result of bta\_dm\_act.cc, there is a possible out of bounds stack write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9356](https://cve.now/CVE-2018-9356.md): In bnep\_data\_ind of bnep\_main.c, there is a possible remote code execution due to a double free. (no CVSS, Google Android)
- [CVE-2018-9357](https://cve.now/CVE-2018-9357.md): In BNEP\_Write of bnep\_api.cc, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2018-9358](https://cve.now/CVE-2018-9358.md): In gatts\_process\_attribute\_req of gatt\_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9359](https://cve.now/CVE-2018-9359.md): In process\_l2cap\_cmd of l2c\_main.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9360](https://cve.now/CVE-2018-9360.md): In process\_l2cap\_cmd of l2c\_main.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS)
- [CVE-2018-9361](https://cve.now/CVE-2018-9361.md): In process\_l2cap\_cmd of l2c\_main.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9362](https://cve.now/CVE-2018-9362.md): In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. (no CVSS, Google Android)
- [CVE-2018-9363](https://cve.now/CVE-2018-9363.md): In the hidp\_process\_report in bluetooth, there is an integer overflow. (no CVSS, Google Android)
- [CVE-2018-9385](https://cve.now/CVE-2018-9385.md): In driver\_override\_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2018-9415](https://cve.now/CVE-2018-9415.md): In driver\_override\_store and driver\_override\_show of bus.c, there is a possible double free due to improper locking. (no CVSS, Google Android)
- [CVE-2018-9422](https://cve.now/CVE-2018-9422.md): In get\_futex\_key of futex.c, there is a use-after-free due to improper locking. (no CVSS, Google Android)
- [CVE-2018-9427](https://cve.now/CVE-2018-9427.md): In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2018-9436](https://cve.now/CVE-2018-9436.md): In bnep\_data\_ind of bnep\_main.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9437](https://cve.now/CVE-2018-9437.md): In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9438](https://cve.now/CVE-2018-9438.md): When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. (no CVSS, Google Android)
- [CVE-2018-9444](https://cve.now/CVE-2018-9444.md): In ih264d\_video\_decode of ih264d\_api.c there is a possible resource exhaustion due to an infinite loop. (no CVSS, Google Android)
- [CVE-2018-9445](https://cve.now/CVE-2018-9445.md): In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. (no CVSS, Google Android)
- [CVE-2018-9446](https://cve.now/CVE-2018-9446.md): In smp\_br\_state\_machine\_event of smp\_br\_main.cc, there is a possible out of bounds write due to memory corruption. (no CVSS, Google Android)
- [CVE-2018-9448](https://cve.now/CVE-2018-9448.md): In avct\_bcb\_msg\_ind of avct\_bcb\_act.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9450](https://cve.now/CVE-2018-9450.md): In avrc\_proc\_vendor\_command of avrc\_api.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9451](https://cve.now/CVE-2018-9451.md): In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9453](https://cve.now/CVE-2018-9453.md): In avdt\_msg\_prs\_cfg of avdt\_msg.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9454](https://cve.now/CVE-2018-9454.md): In bnep\_data\_ind of bnep\_main.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9455](https://cve.now/CVE-2018-9455.md): In sdpu\_extract\_attr\_seq of sdp\_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2018-9458](https://cve.now/CVE-2018-9458.md): In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being (no CVSS, Google Android)
- [CVE-2018-9459](https://cve.now/CVE-2018-9459.md): In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path tra (no CVSS, Google Android)
- [CVE-2018-9465](https://cve.now/CVE-2018-9465.md): In task\_get\_unused\_fd\_flags of binder.c, there is a possible memory corruption due to a use after free. (no CVSS, Google Android)
- [CVE-2018-9488](https://cve.now/CVE-2018-9488.md): In the SELinux permissions of crash\_dump.te, there is a permissions bypass due to a missing restriction. (no CVSS, Google Android)
- [CVE-2018-9489](https://cve.now/CVE-2018-9489.md): When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi networ (no CVSS, Google Android)
- [CVE-2018-9516](https://cve.now/CVE-2018-9516.md): In hid\_debug\_events\_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2014-10077](https://cve.now/CVE-2014-10077.md): Hash#slice in lib/i18n/core\_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (applicat (no CVSS, i18n)
- [CVE-2018-1606](https://cve.now/CVE-2018-1606.md): IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next (CVSS 4.3, IBM Rational Team Concert · IBM Rational Software Archit… +5)
- [CVE-2018-1694](https://cve.now/CVE-2018-1694.md): IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Gener (CVSS 5.9, IBM Rational Team Concert · IBM Rational Software Archit… +5)
- [CVE-2018-16986](https://cve.now/CVE-2018-16986.md): Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malforme (no CVSS)
- [CVE-2018-18963](https://cve.now/CVE-2018-18963.md): Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI. (no CVSS)
- [CVE-2018-18964](https://cve.now/CVE-2018-18964.md): osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. (no CVSS)
- [CVE-2018-18965](https://cve.now/CVE-2018-18965.md): osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. (no CVSS)
- [CVE-2018-18966](https://cve.now/CVE-2018-18966.md): osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. (no CVSS)
- [CVE-2018-18980](https://cve.now/CVE-2018-18980.md): An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 (no CVSS)
- [CVE-2018-16472](https://cve.now/CVE-2018-16472.md): A prototype pollution attack in cached-path-relative versions \<=1.0.1 allows an attacker to inject properties on Object.prototype which are (no CVSS, npm cached-path-relative · cached-path-relative)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-11-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.