# CVEs published 2018-11-10

8 CVEs were published on November 10, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2017-17550](https://cve.now/CVE-2017-17550.md): ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi-bin/zysh-cgi cmd action to add a user acco (no CVSS)
- [CVE-2018-19148](https://cve.now/CVE-2018-19148.md): Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames. (no CVSS, github.com/caddyserver/caddy)
- [CVE-2018-19149](https://cve.now/CVE-2018-19149.md): Poppler before 0.70.0 has a NULL pointer dereference in \_poppler\_attachment\_new when called from poppler\_annot\_file\_attachment\_get\_attachmen (no CVSS)
- [CVE-2018-19150](https://cve.now/CVE-2018-19150.md): Memory corruption in PDMODELProvidePDModelHFT in pdmodel.dll in pdfforge PDF Architect 6 allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2018-19084](https://cve.now/CVE-2018-19084.md): RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E05C with a siz (no CVSS)
- [CVE-2018-19085](https://cve.now/CVE-2018-19085.md): RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a siz (no CVSS)
- [CVE-2018-19086](https://cve.now/CVE-2018-19086.md): RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E040 with a siz (no CVSS)
- [CVE-2018-19087](https://cve.now/CVE-2018-19087.md): RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E044 with a siz (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-11-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.