# CVEs published 2018-11-08

38 CVEs were published on November 8, 2018: 3 critical, 0 high. Days are UTC.

- [CVE-2018-7718](https://cve.now/CVE-2018-7718.md): An issue was discovered in Telexy QPath 5.4.462. (no CVSS)
- [CVE-2018-15450](https://cve.now/CVE-2018-15450.md): Cisco Prime Collaboration Assurance File Overwrite Vulnerability (CVSS 6.5, Cisco Prime Collaboration Assurance)
- [CVE-2018-15451](https://cve.now/CVE-2018-15451.md): Cisco Prime Service Catalog Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Prime Service Catalog)
- [CVE-2018-19044](https://cve.now/CVE-2018-19044.md): keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. (no CVSS)
- [CVE-2018-19045](https://cve.now/CVE-2018-19045.md): keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive info (no CVSS)
- [CVE-2018-19046](https://cve.now/CVE-2018-19046.md): keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats. (no CVSS)
- [CVE-2018-19115](https://cve.now/CVE-2018-19115.md): keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impac (no CVSS)
- [CVE-2018-15447](https://cve.now/CVE-2018-15447.md): Cisco Integrated Management Controller Supervisor SQL Injection Vulnerability (CVSS 6.5, Cisco Integrated Management Controller (IMC) Supervisor)
- [CVE-2018-15448](https://cve.now/CVE-2018-15448.md): Cisco Registered Envelope Service Information Disclosure Vulnerability (CVSS 5.3, Cisco Registered Envelope Service)
- [CVE-2018-15449](https://cve.now/CVE-2018-15449.md): Cisco Video Surveillance Media Server Denial of Service Vulnerability (CVSS 4.3, Cisco Video Surveillance Media Server Software)
- [CVE-2018-6436](https://cve.now/CVE-2018-6436.md): A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4 (no CVSS, Brocade Communications Systems Brocade Fabric OS)
- [CVE-2018-6437](https://cve.now/CVE-2018-6437.md): A Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could al (no CVSS, Brocade Communications Systems Brocade Fabric OS)
- [CVE-2018-6438](https://cve.now/CVE-2018-6438.md): A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d c (no CVSS, Brocade Communications Systems Brocade Fabric OS)
- [CVE-2018-15444](https://cve.now/CVE-2018-15444.md): Cisco Energy Management Suite XML External Entity Vulnerability (CVSS 6.3, Cisco Energy Management Suite)
- [CVE-2018-15445](https://cve.now/CVE-2018-15445.md): Cisco Energy Management Suite Cross-Site Request Forgery Vulnerability (CVSS 6.3, Cisco Energy Management Suite)
- [CVE-2018-15446](https://cve.now/CVE-2018-15446.md): Cisco Meeting Server Information Disclosure Vulnerability (CVSS 5.3, Cisco Meeting Server)
- [CVE-2018-19114](https://cve.now/CVE-2018-19114.md): An issue was discovered in MinDoc through v1.0.2. (no CVSS)
- [CVE-2018-15381](https://cve.now/CVE-2018-15381.md): Cisco Unity Express Arbitrary Command Execution Vulnerability (CVSS 9.8, Cisco Unity Express)
- [CVE-2018-15393](https://cve.now/CVE-2018-15393.md): Cisco Content Security Management Appliance (SMA) Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Content Security Management Appliance)
- [CVE-2018-15394](https://cve.now/CVE-2018-15394.md): Cisco Stealthwatch Management Console Authentication Bypass Vulnerability (CVSS 9.8, Cisco Stealthwatch Enterprise)
- [CVE-2018-15437](https://cve.now/CVE-2018-15437.md): Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability (CVSS 5.5, Cisco AMP for Endpoints)
- [CVE-2018-15439](https://cve.now/CVE-2018-15439.md): Cisco Small Business Switches Privileged Access Vulnerability (CVSS 9.8, Cisco Small Business 300 Series Managed Switches)
- [CVE-2018-15443](https://cve.now/CVE-2018-15443.md): Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass Vulnerability (CVSS 5.8, Cisco Firepower Management Center)
- [CVE-2018-0284](https://cve.now/CVE-2018-0284.md): Cisco Meraki Local Status Page Privilege Escalation Vulnerability (no CVSS, Cisco Meraki MR · Cisco Meraki M5 +3)
- [CVE-2018-11777](https://cve.now/CVE-2018-11777.md): In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger (no CVSS, Apache Software Foundation Apache Hive · org.apache.hive:hi…)
- [CVE-2018-1314](https://cve.now/CVE-2018-1314.md): In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a query (no CVSS, Apache Software Foundation Apache Hive · org.apache.hive:hi…)
- [CVE-2018-6433](https://cve.now/CVE-2018-6433.md): A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local att (no CVSS, Brocade Communications Systems Brocade Fabric OS)
- [CVE-2018-6434](https://cve.now/CVE-2018-6434.md): A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to (no CVSS, Brocade Communications Systems Brocade Fabric OS)
- [CVE-2018-6435](https://cve.now/CVE-2018-6435.md): A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d c (no CVSS, Brocade Communications Systems Brocade Fabric OS)
- [CVE-2018-6441](https://cve.now/CVE-2018-6441.md): A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attack (no CVSS, Brocade Communications Systems Brocade Fabric OS)
- [CVE-2018-6442](https://cve.now/CVE-2018-6442.md): A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote (no CVSS, Brocade Communications Systems Brocade Fabric OS)
- [CVE-2018-19104](https://cve.now/CVE-2018-19104.md): In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges. (no CVSS)
- [CVE-2018-19105](https://cve.now/CVE-2018-19105.md): LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and application crash) or possibly ha (no CVSS)
- [CVE-2018-19109](https://cve.now/CVE-2018-19109.md): tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list dire (no CVSS)
- [CVE-2018-19110](https://cve.now/CVE-2018-19110.md): The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-mo (no CVSS)
- [CVE-2018-19111](https://cve.now/CVE-2018-19111.md): The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web s (no CVSS)
- [CVE-2018-19107](https://cve.now/CVE-2018-19107.md): In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (no CVSS)
- [CVE-2018-19108](https://cve.now/CVE-2018-19108.md): In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) cau (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-11-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.