# CVEs published 2018-12-06

75 CVEs were published on December 6, 2018: 0 critical, 3 high. Days are UTC.

- [CVE-2018-16522](https://cve.now/CVE-2018-16522.md): Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS\_SetSockOpt. (no CVSS)
- [CVE-2018-16523](https://cve.now/CVE-2018-16523.md): Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP (no CVSS)
- [CVE-2018-16524](https://cve.now/CVE-2018-16524.md): Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP (no CVSS)
- [CVE-2018-16525](https://cve.now/CVE-2018-16525.md): Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP (no CVSS)
- [CVE-2018-16526](https://cve.now/CVE-2018-16526.md): Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP (no CVSS)
- [CVE-2018-16527](https://cve.now/CVE-2018-16527.md): Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP (no CVSS)
- [CVE-2018-16528](https://cve.now/CVE-2018-16528.md): Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corrupt (no CVSS)
- [CVE-2018-16598](https://cve.now/CVE-2018-16598.md): An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHI (no CVSS)
- [CVE-2018-16599](https://cve.now/CVE-2018-16599.md): An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHI (no CVSS)
- [CVE-2018-16600](https://cve.now/CVE-2018-16600.md): An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHI (no CVSS)
- [CVE-2018-16601](https://cve.now/CVE-2018-16601.md): An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHI (no CVSS)
- [CVE-2018-16602](https://cve.now/CVE-2018-16602.md): An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHI (no CVSS)
- [CVE-2018-16603](https://cve.now/CVE-2018-16603.md): An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHI (no CVSS)
- [CVE-2018-19659](https://cve.now/CVE-2018-19659.md): An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmw (no CVSS)
- [CVE-2018-19660](https://cve.now/CVE-2018-19660.md): An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmw (no CVSS)
- [CVE-2018-19665](https://cve.now/CVE-2018-19665.md): The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption. (no CVSS)
- [CVE-2018-19923](https://cve.now/CVE-2018-19923.md): An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. (no CVSS)
- [CVE-2018-19924](https://cve.now/CVE-2018-19924.md): An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. (no CVSS)
- [CVE-2018-19925](https://cve.now/CVE-2018-19925.md): An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. (no CVSS)
- [CVE-2018-19926](https://cve.now/CVE-2018-19926.md): Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH\_INFO. (no CVSS)
- [CVE-2018-19927](https://cve.now/CVE-2018-19927.md): Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the go (no CVSS)
- [CVE-2018-6755](https://cve.now/CVE-2018-6755.md): True Key (TK) Windows Client - Weak Directory Permission Vulnerability (CVSS 7.2, McAfee True Key)
- [CVE-2018-6756](https://cve.now/CVE-2018-6756.md): True Key (TK) Windows Client - Authentication Abuse vulnerability (CVSS 7.8, McAfee True Key)
- [CVE-2018-6757](https://cve.now/CVE-2018-6757.md): True Key (TK) Windows Client - Privilege Escalation vulnerability (CVSS 7.5, McAfee True Key)
- [CVE-2018-19921](https://cve.now/CVE-2018-19921.md): Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller. (no CVSS)
- [CVE-2018-19922](https://cve.now/CVE-2018-19922.md): Persistent Cross-Site Scripting (XSS) in the advancedsetup\_websiteblocking.html Website Blocking page of the Actiontec C1000A router with fi (no CVSS)
- [CVE-2018-19919](https://cve.now/CVE-2018-19919.md): Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data\[title\] parameter, as demonstrated by a crafted onload attribute of an SVG (no CVSS)
- [CVE-2018-18362](https://cve.now/CVE-2018-18362.md): Norton Password Manager for Android (formerly Norton Identity Safe) may be susceptible to a cross site scripting (XSS) exploit, which is a t (no CVSS, Symantec Norton Password Manager)
- [CVE-2018-19913](https://cve.now/CVE-2018-19913.md): DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field. (no CVSS)
- [CVE-2018-19914](https://cve.now/CVE-2018-19914.md): DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field. (no CVSS)
- [CVE-2018-19915](https://cve.now/CVE-2018-19915.md): DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field. (no CVSS)
- [CVE-2018-19911](https://cve.now/CVE-2018-19911.md): FreeSWITCH through 1.8.2, when mod\_xml\_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/sy (no CVSS)
- [CVE-2018-19908](https://cve.now/CVE-2018-19908.md): An issue was discovered in MISP 2.4.9x before 2.4.99. (no CVSS)
- [CVE-2018-1504](https://cve.now/CVE-2018-1504.md): IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking action of the victim. (CVSS 6.1, IBM i2 Enterprise Insight Analysis)
- [CVE-2018-1505](https://cve.now/CVE-2018-1505.md): IBM i2 Enterprise Insight Analysis 2.1.7 allows web pages to be stored locally which can be read by another user on the system. (CVSS 4.0, IBM i2 Enterprise Insight Analysis)
- [CVE-2018-1525](https://cve.now/CVE-2018-1525.md): IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly en (CVSS 5.9, IBM i2 Enterprise Insight Analysis)
- [CVE-2018-15332](https://cve.now/CVE-2018-15332.md): The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an un (no CVSS, F5 Networks BIG-IP (APM), BIG-IP APM Clients, BIG-IP Edge C…)
- [CVE-2018-1871](https://cve.now/CVE-2018-1871.md): IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.0, 3.0.2, and 3.0.5 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Financial Transaction Manager)
- [CVE-2018-1935](https://cve.now/CVE-2018-1935.md): IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. (CVSS 4.3, IBM Connections)
- [CVE-2018-9538](https://cve.now/CVE-2018-9538.md): In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2\_slice\_video\_decode\_accelerator.cc, there is a possible out of bounds read of a function (no CVSS, Google Android)
- [CVE-2018-9547](https://cve.now/CVE-2018-9547.md): In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. (no CVSS, Google Android)
- [CVE-2018-9548](https://cve.now/CVE-2018-9548.md): In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. (no CVSS, Google Android)
- [CVE-2018-9549](https://cve.now/CVE-2018-9549.md): In lppTransposer of lpp\_tran.cpp there is a possible out of bounds write due to missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9550](https://cve.now/CVE-2018-9550.md): In CAacDecoder\_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9551](https://cve.now/CVE-2018-9551.md): In CAacDecoder\_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9552](https://cve.now/CVE-2018-9552.md): In ihevcd\_sao\_shift\_ctb of ihevcd\_sao.c there is a possible out of bounds write due to missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9553](https://cve.now/CVE-2018-9553.md): In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. (no CVSS, Google Android)
- [CVE-2018-9554](https://cve.now/CVE-2018-9554.md): In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. (no CVSS, Google Android)
- [CVE-2018-9555](https://cve.now/CVE-2018-9555.md): In l2c\_lcc\_proc\_pdu of l2c\_fcr.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9556](https://cve.now/CVE-2018-9556.md): In ParsePayloadHeader of payload\_metadata.cc, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2018-9557](https://cve.now/CVE-2018-9557.md): In really\_install\_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. (no CVSS, Google Android)
- [CVE-2018-9558](https://cve.now/CVE-2018-9558.md): In rw\_t2t\_handle\_tlv\_detect of rw\_t2t\_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9559](https://cve.now/CVE-2018-9559.md): In persist\_set\_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error. (no CVSS, Google Android)
- [CVE-2018-9560](https://cve.now/CVE-2018-9560.md): In HID\_DevAddRecord of hidd\_api.cc, there is a possible out-of-bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9562](https://cve.now/CVE-2018-9562.md): In bta\_ag\_do\_disc of bta\_ag\_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. (no CVSS, Google Android)
- [CVE-2018-9565](https://cve.now/CVE-2018-9565.md): In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. (no CVSS, Google Android)
- [CVE-2018-9566](https://cve.now/CVE-2018-9566.md): In process\_service\_search\_rsp of sdp\_discovery.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2018-9567](https://cve.now/CVE-2018-9567.md): On Pixel devices there is a bug causing verified boot to show the same certificate fingerprint despite using different signing keys. (no CVSS, Google Android)
- [CVE-2018-9568](https://cve.now/CVE-2018-9568.md): In sk\_clone\_lock of sock.c, there is a possible memory corruption due to type confusion. (no CVSS, Google Android)
- [CVE-2018-19907](https://cve.now/CVE-2018-19907.md): A Server-Side Template Injection issue was discovered in Crafter CMS 3.0.18. (no CVSS, org.craftercms:crafter-studio)
- [CVE-2018-19894](https://cve.now/CVE-2018-19894.md): ThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in CommentadminController.class.php and is exploitable with the man (no CVSS)
- [CVE-2018-19895](https://cve.now/CVE-2018-19895.md): ThinkCMF X2.2.2 has SQL Injection via the function edit\_post() in NavController.class.php and is exploitable with the manager privilege via (no CVSS)
- [CVE-2018-19896](https://cve.now/CVE-2018-19896.md): ThinkCMF X2.2.2 has SQL Injection via the function delete() in SlideController.class.php and is exploitable with the manager privilege via t (no CVSS)
- [CVE-2018-19897](https://cve.now/CVE-2018-19897.md): ThinkCMF X2.2.2 has SQL Injection via the function \_listorders() in AdminbaseController.class.php and is exploitable with the manager privil (no CVSS)
- [CVE-2018-19898](https://cve.now/CVE-2018-19898.md): ThinkCMF X2.2.2 has SQL Injection via the method edit\_post in ArticleController.class.php and is exploitable by normal authenticated users v (no CVSS)
- [CVE-2018-19892](https://cve.now/CVE-2018-19892.md): DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field. (no CVSS)
- [CVE-2018-19893](https://cve.now/CVE-2018-19893.md): SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string. (no CVSS)
- [CVE-2018-19881](https://cve.now/CVE-2018-19881.md): In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service (recursive calls followed by a fitz/xml.c fz\_xml (no CVSS)
- [CVE-2018-19882](https://cve.now/CVE-2018-19882.md): In Artifex MuPDF 1.14.0, the svg\_run\_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href\_att NULL poi (no CVSS)
- [CVE-2018-19886](https://cve.now/CVE-2018-19886.md): An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29 (no CVSS)
- [CVE-2018-19887](https://cve.now/CVE-2018-19887.md): An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29 (no CVSS)
- [CVE-2018-19888](https://cve.now/CVE-2018-19888.md): An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29 (no CVSS)
- [CVE-2018-19889](https://cve.now/CVE-2018-19889.md): An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29 (no CVSS)
- [CVE-2018-19890](https://cve.now/CVE-2018-19890.md): An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29 (no CVSS)
- [CVE-2018-19891](https://cve.now/CVE-2018-19891.md): An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-12-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.