deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-9279
Published: 2018-10-24
Description: An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user's password. The web page displayed by the appliance contains the password in cleartext. Passwords could be retrieved by browsing the source code of the webpage.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522
References: https://www.bishopfox.com/news/2018/10/eaton-ups-9px-8000-sp-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/eaton-ups-9px-8000-sp-multiple-vulnerabilities/
CVE: CVE-2018-9280
Published: 2018-10-24
Description: An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user's password. The web page displayed by the appliance contains the password in cleartext. Passwords of the read and write users could be retrieved by browsing the source code of the webpage.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522
References: https://www.bishopfox.com/news/2018/10/eaton-ups-9px-8000-sp-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/eaton-ups-9px-8000-sp-multiple-vulnerabilities/
CVE: CVE-2018-9281
Published: 2018-10-24
Description: An issue was discovered on Eaton UPS 9PX 8000 SP devices. The administration panel is vulnerable to a CSRF attack on the change-password functionality. This vulnerability could be used to force a logged-in administrator to perform a silent password update. The affected forms are also vulnerable to Reflected Cross-Site Scripting vulnerabilities. This flaw could be triggered by driving an administrator logged into the Eaton application to a specially crafted web page. This attack could be done silently.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352
References: https://www.bishopfox.com/news/2018/10/eaton-ups-9px-8000-sp-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/eaton-ups-9px-8000-sp-multiple-vulnerabilities/
CVE: CVE-2018-13342
Published: 2018-10-24
Description: The server API in the Anda app relies on hardcoded credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://gustavosilva.me/blog/2018/10/23/How-I-hacked-Anda-the-public-transportation-app-of-Porto-CVE-2018-13342.html; https://gustavosilva.me/blog/2018/10/23/How-I-hacked-Anda-the-public-transportation-app-of-Porto-CVE-2018-13342.html
CVE: CVE-2018-15750
Published: 2018-10-24
Description: Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html; https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html; https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
CVE: CVE-2018-15751
Published: 2018-10-24
Description: SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html; https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html; https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
CVE: CVE-2018-17903
Published: 2018-10-24
Description: SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-294, CWE-294
References: http://www.securityfocus.com/bid/105729; https://ics-cert.us-cert.gov/advisories/ICSA-18-296-02; http://www.securityfocus.com/bid/105729
CVE: CVE-2018-17921
Published: 2018-10-24
Description: SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that may allow an attacker to force-pair the device without human interaction.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/105729; https://ics-cert.us-cert.gov/advisories/ICSA-18-296-02; http://www.securityfocus.com/bid/105729
CVE: CVE-2018-17923
Published: 2018-10-24
Description: SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/105729; https://ics-cert.us-cert.gov/advisories/ICSA-18-296-02; http://www.securityfocus.com/bid/105729
CVE: CVE-2018-18551
Published: 2018-10-24
Description: ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors.html status parameter, sensors.html type parameter, sensors.html device parameter, report.html location parameter, group_delete.html group parameter, report_save.html query parameter, sensors.html location parameter, or group_delete.html group parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://hyp3rlinx.altervista.org/advisories/CVE-2018-18551-SERVERSCHECK-MONITORING-SOFTWARE-CROSS-SITE-SCRIPTING.txt; http://packetstormsecurity.com/files/149914/ServersCheck-Monitoring-Software-14.3.3-Cross-Site-Scripting.html; http://hyp3rlinx.altervista.org/advisories/CVE-2018-18551-SERVERSCHECK-MONITORING-SOFTWARE-CROSS-SITE-SCRIPTING.txt
CVE: CVE-2018-18552
Published: 2018-10-24
Description: ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality loss) by creating an LNK file that points to a second LNK file, if this second LNK file is associated with a Start menu. Ultimately, this behavior comes from a Directory Traversal bug (via the sensor_details.html id parameter) that allows creating empty files in arbitrary directories.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://hyp3rlinx.altervista.org/advisories/CVE-2018-18552-SERVERSCHECK-MONITORING-SOFTWARE-ARBITRARY-FILE-WRITE-DOS.txt; http://packetstormsecurity.com/files/149907/ServersCheck-Monitoring-Software-14.3.3-Arbitrary-File-Write-DoS.html; http://hyp3rlinx.altervista.org/advisories/CVE-2018-18552-SERVERSCHECK-MONITORING-SOFTWARE-ARBITRARY-FILE-WRITE-DOS.txt
CVE: CVE-2018-18566
Published: 2018-10-24
Description: The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105746; https://seclists.org/bugtraq/2018/Oct/33; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-028.txt
CVE: CVE-2018-18567
Published: 2018-10-24
Description: AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.securitytracker.com/id/1041956; https://seclists.org/bugtraq/2018/Oct/32; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-026.txt
CVE: CVE-2018-18568
Published: 2018-10-24
Description: Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://seclists.org/bugtraq/2018/Oct/36; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-027.txt; https://seclists.org/bugtraq/2018/Oct/36
CVE: CVE-2018-18621
Published: 2018-10-24
Description: CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link (in .txt format) is modified and then renamed with a .html or .wssp extension.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149916/CommuniGatePro-Pronto-Webmail-6.2-Cross-Site-Scripting.html; https://drive.google.com/drive/folders/1irWaVi-AySHFFMap5pF1_7hk6mTeemDT; http://packetstormsecurity.com/files/149916/CommuniGatePro-Pronto-Webmail-6.2-Cross-Site-Scripting.html
CVE: CVE-2018-18638
Published: 2018-10-24
Description: A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execute arbitrary commands via shell metacharacters in the ntp field within JSON data to the /robot/initialize endpoint.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2018/march/security-in-a-vacuum-hacking-the-neato-botvac-connected-part-1/; https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2018/march/security-in-a-vacuum-hacking-the-neato-botvac-connected-part-1/
CVE: CVE-2018-8955
Published: 2018-10-24
Description: The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitrary code by changing the filename while leaving the file's digital signature unchanged.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: http://packetstormsecurity.com/files/149900/Bitdefender-GravityZone-Installer-Signature-Bypass-Code-Execution.html; http://seclists.org/fulldisclosure/2018/Oct/44; http://www.securitytracker.com/id/1041940
CVE: CVE-2018-18650
Published: 2018-10-25
Description: An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch a denial of service (Integer Overflow) via a crafted /Size value in a pdf file, as demonstrated by pdftohtml. This is mainly caused by the program attempting a malloc operation for a large amount of memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41219&p=41747#p41747; https://exchange.xforce.ibmcloud.com/vulnerabilities/152006; https://forum.xpdfreader.com/viewtopic.php?f=3&t=41219&p=41747#p41747
CVE: CVE-2018-18651
Published: 2018-10-25
Description: An issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to launch a denial of service (hang caused by large loop) via a specific pdf file, as demonstrated by pdftohtml. This is mainly caused by a large number after the /Count field in the file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41219&p=41747#p41747; https://exchange.xforce.ibmcloud.com/vulnerabilities/152005; https://forum.xpdfreader.com/viewtopic.php?f=3&t=41219&p=41747#p41747
CVE: CVE-2018-3970
Published: 2018-10-25
Description: An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: http://www.securityfocus.com/bid/105743; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0635; http://www.securityfocus.com/bid/105743
CVE: CVE-2018-3971
Published: 2018-10-25
Description: An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP request to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-123
References: http://www.securityfocus.com/bid/105743; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0636; http://www.securityfocus.com/bid/105743
CVE: CVE-2018-14665
Published: 2018-10-25
Description: A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-863
References: http://packetstormsecurity.com/files/154942/Xorg-X11-Server-SUID-modulepath-Privilege-Escalation.html; http://packetstormsecurity.com/files/155276/Xorg-X11-Server-Local-Privilege-Escalation.html; http://www.securityfocus.com/bid/105741
CVE: CVE-2018-17904
Published: 2018-10-25
Description: Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an unauthorized attacker to inject arbitrary code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/105738; https://ics-cert.us-cert.gov/advisories/ICSA-18-298-01; http://www.securityfocus.com/bid/105738
CVE: CVE-2018-18652
Published: 2018-10-25
Description: A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/bid/105737; https://www.veritas.com/content/support/en_US/security/VTS18-003.html; http://www.securityfocus.com/bid/105737
CVE: CVE-2018-18653
Published: 2018-10-26
Description: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347
References: https://launchpad.net/bugs/1798863; https://usn.ubuntu.com/3832-1/; https://usn.ubuntu.com/3835-1/
CVE: CVE-2018-18654
Published: 2018-10-26
Description: Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local attacker can first create a world-writable subdirectory in a certain location under the /tmp directory, wait until a user process copies xr there, and then replace the entire contents of this subdirectory to include a Trojan horse xr.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://bugs.debian.org/911877; https://bugs.debian.org/911877
CVE: CVE-2018-18655
Published: 2018-10-26
Description: Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://bugs.debian.org/911842; https://telescoper.wordpress.com/2018/10/18/a-breakthrough-for-a-bigot/#comment-339386; https://bugs.debian.org/911842
CVE: CVE-2018-18656
Published: 2018-10-26
Description: The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location of such files is %PROGRAMDATA%\purevpn\config\login.conf. Additionally, all local users can read this file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: https://www.trustwave.com/Resources/SpiderLabs-Blog/Credential-Leak-Flaws-in-Windows-PureVPN-Client/; https://www.trustwave.com/Resources/SpiderLabs-Blog/Credential-Leak-Flaws-in-Windows-PureVPN-Client/
CVE: CVE-2017-18124
Published: 2018-10-26
Description: During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-18308
Published: 2018-10-26
Description: Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430
CVSS Score: 7.8 (HIGH)
References: http://www.securitytracker.com/id/1041432; https://www.qualcomm.com/company/product-security/bulletins; http://www.securitytracker.com/id/1041432
CVE: CVE-2017-18309
Published: 2018-10-26
Description: A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850.
CVSS Score: 7.1 (HIGH)
CWE: CWE-129
References: http://www.securitytracker.com/id/1041432; https://www.qualcomm.com/company/product-security/bulletins; http://www.securitytracker.com/id/1041432
CVE: CVE-2017-18310
Published: 2018-10-26
Description: ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016
CVSS Score: 7.8 (HIGH)
References: http://www.securitytracker.com/id/1041432; https://www.qualcomm.com/company/product-security/bulletins; http://www.securitytracker.com/id/1041432
CVE: CVE-2017-18311
Published: 2018-10-26
Description: XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016.
CVSS Score: 7.8 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-11305
Published: 2018-10-26
Description: When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1041432; https://www.qualcomm.com/company/product-security/bulletins; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-11821
Published: 2018-10-26
Description: Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, SDA660, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11822
Published: 2018-10-26
Description: A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11824
Published: 2018-10-26
Description: A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, SDA660
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-11828
Published: 2018-10-26
Description: When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11846
Published: 2018-10-26
Description: The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 845, SD 850
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-11849
Published: 2018-10-26
Description: Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9886, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11850
Published: 2018-10-26
Description: Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11853
Published: 2018-10-26
Description: Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11854
Published: 2018-10-26
Description: Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11950
Published: 2018-10-26
Description: Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-11951
Published: 2018-10-26
Description: Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobile in version SD 845, SD 850.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins