Security Vulnerabilities - CVEs Published In October 2018
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Calculate events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6353.
CVSS Score
8.8
EPSS Score
0.006
Published
2018-10-29
playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse.
CVSS Score
8.8
EPSS Score
0.008
Published
2018-10-29
WebAccess Versions 8.3.2 and prior. During installation, the application installer disables user access control and does not re-enable it after the installation is complete. This could allow an attacker to run elevated arbitrary code.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-10-29
WebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user-supplied data, causing a buffer overflow condition that allows for arbitrary remote code execution.
CVSS Score
7.8
EPSS Score
0.031
Published
2018-10-29
Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.
CVSS Score
7.8
EPSS Score
0.0
Published
2018-10-29
Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.
CVSS Score
7.8
EPSS Score
0.0
Published
2018-10-29
Improper input validation leads to buffer overflow while processing network list offload command in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660
CVSS Score
7.8
EPSS Score
0.0
Published
2018-10-29
When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.
CVSS Score
7.8
EPSS Score
0.0
Published
2018-10-29
When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845
CVSS Score
7.8
EPSS Score
0.0
Published
2018-10-29
Lack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in Snapdragon Mobile in version SD 845, SD 850.
CVSS Score
7.8
EPSS Score
0.0
Published
2018-10-29