CVEs published December 7, 2018
57 CVEs were published on December 7, 2018: 0 critical, 5 high.
- Published
- 57
- Critical
- 0
- High
- 5
- Medium
- 3
- Low
- 0
- Unrated
- 49
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- LibRaw
- 17
- Google Android
- 12
- Hewlett Packard Enterprise Aruba ClearPass Policy Manager
- 5
- Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- 3
- IBM Marketing Platform
- 2
- GE Proficy Cimplicity GDS
- 1
- Hewlett Packard Enterprise Aruba Access Points
- 1
- IBM Connections
- 1
- IBM DataPower Gateways
- 1
- IBM MQ
- 1
High 5
- CVE-2018-16861A cross-site scripting (XSS) flaw was found in the foreman component of satellite.The Foreman Project foreman
- CVE-2018-1424IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.IBM Marketing Platform
- CVE-2018-1920IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.IBM Marketing Platform
- CVE-2018-17924Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could sRockwell Automation
- CVE-2018-7364All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability.ZTE ZXIN10-European region
Medium, low and unrated 52
- CVE-2018-9517In pppol2tp_connect, there is possible memory corruption due to a use after free.Google Android
- CVE-2018-9518In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2018-9519In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition.Google Android
- CVE-2018-9569In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect bounds check.Google Android
- CVE-2018-9570In impd_parse_drc_ext_v1 of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check.Google Android
- CVE-2018-9571In impd_parse_loud_eq_instructions of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check.Google Android
- CVE-2018-9572In impd_drc_parse_coeff of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check.
- CVE-2018-9573In impd_parse_filt_block of impd_drc_dynamic_payload.c there is a possible out of bounds write due to missing bounds check.Google Android
- CVE-2018-9574In impd_parse_split_drc_characteristic of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check.Google Android
- CVE-2018-9575In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check.Google Android
- CVE-2018-9576In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check.Google Android
- CVE-2018-9577In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds checGoogle Android
- CVE-2018-9578In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2017-16909An error related to the "LibRaw::panasonic_load_raw()" function (dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to caLibRaw
- CVE-2017-16910An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited LibRaw
- CVE-2018-5800An off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.7 can LibRaw
- CVE-2018-5801An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pLibRaw
- CVE-2018-5802An error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the "buf" variable in LibRaw versions prior to 0LibRaw
- CVE-2018-5804A type confusion error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to tLibRaw
- CVE-2018-5805A boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploiLibRaw
- CVE-2018-5806An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to triggeLibRaw
- CVE-2018-5807An error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause aLibRaw
- CVE-2018-5808An error within the "find_green()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a stackLibRaw
- CVE-2018-5809An error within the "LibRaw::parse_exif()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to causeLibRaw
- CVE-2018-5810An error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a LibRaw
- CVE-2018-5811An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to LibRaw
- CVE-2018-5812An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to LibRaw
- CVE-2018-5813An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite lLibRaw
- CVE-2018-5815An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited LibRaw
- CVE-2018-5816An integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited LibRaw
- CVE-2018-18311Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
- CVE-2018-18313Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process me
- CVE-2018-18314Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
- CVE-2018-7063In Aruba ClearPass, disabled API admins can still perform read/write operations.Hewlett Packard Enterprise Aruba ClearPass Policy Manager
- CVE-2018-7065An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation.Hewlett Packard Enterprise Aruba ClearPass Policy Manager
- CVE-2018-7066An unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices.Hewlett Packard Enterprise Aruba ClearPass Policy Manager
- CVE-2018-7067A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise.Hewlett Packard Enterprise Aruba ClearPass Policy Manager
- CVE-2018-7079Aruba ClearPass Policy Manager guest authorization failure.Hewlett Packard Enterprise Aruba ClearPass Policy Manager
- CVE-2018-7080A vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access points.Hewlett Packard Enterprise Aruba Access Points
- CVE-2018-15362XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0GE Proficy Cimplicity GDS
- CVE-2018-1663IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failuIBM DataPower Gateways
- CVE-2018-1883A problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow attackers to execute a denial of service atIBM MQ
- CVE-2018-1896IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domaiIBM Connections
- CVE-2018-19960The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for
- CVE-2017-14888In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Userspace can pass IEs to the hosQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15835In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, While processing the RIC Data DesQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11905In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in WLAN Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-19001Philips HealthSuite Health Android App, all versions.Philips HealthSuite Health Android App
- CVE-2018-19935ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and appli
- CVE-2018-19939The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devi
- CVE-2018-19931An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31.
- CVE-2018-19932An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31.