CVE:CVE-2018-5301
CNNVD:CNNVD-201801-276
Magento是美国Magento公司的一套开源的PHP电子商务系统，它提供权限管理、搜索引擎和支付网关等功能。Magento Community Edition（CE）是一个社区版。Magento Enterprise Edition（EE）是一个企业版。
Magento Community Edition和Enterprise Edition 2.0.10之前的版本和2.1.2之前的2.1.x版本中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞删除通讯录中用户的地址。
solution:Upgrade magento magento to a higher version than 2.0.10,2.1.2,and avoid the version (,2.0.10),[2.1.0,2.1.2)
solution:Upgrade qualcomm msm8996au_firmware to a higher version than -; Upgrade qualcomm sd_425_firmware to a higher version than -; Upgrade qualcomm sd_430_firmware to a higher version than -; Upgrade qualcomm sd_450_firmware to a higher version than -; Upgrade qualcomm sd_625_firmware to a higher version than -; Upgrade qualcomm sd_712_firmware to a higher version than -; Upgrade qualcomm sd_710_firmware to a higher version than -; Upgrade qualcomm sd_670_firmware to a higher version than -; Upgrade qualcomm sd_820_firmware to a higher version than -; Upgrade qualcomm sd_820a_firmware to a higher version than -; Upgrade qualcomm sd_835_firmware to a higher version than -; Upgrade qualcomm sd_845_firmware to a higher version than -; Upgrade qualcomm sd_850_firmware to a higher version than -; Upgrade qualcomm sda660_firmware to a higher version than -; Upgrade qualcomm sdx24_firmware to a higher version than -; Upgrade qualcomm sxr1130_firmware to a higher version than -