Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 1 of 163.
- openSUSE-SU-2018:2806-1 Security update for nemo-extensions
- SUSE-SU-2018:4215-1 Security update for enigmail
- SUSE-SU-2018:4182-1 Security update for crash
- SUSE-SU-2018:3572-1 Security update for apache2-mod_nss
- SUSE-SU-2018:3311-1 Security update for pam_pkcs11
- SUSE-SU-2018:3290-1 Security update for pam_pkcs11
- SUSE-SU-2018:3074-2 Security update for postgresql10
- SUSE-SU-2018:3074-1 Security update for postgresql10
- SUSE-SU-2018:3072-1 Security update for ImageMagick
- SUSE-SU-2018:2904-1 Security update for yast2-smt
- SUSE-SU-2018:2902-2 Security update for yast2-smt
- SUSE-SU-2018:2902-1 Security update for yast2-smt
- SUSE-SU-2018:2843-1 Security update for pam_pkcs11
- SUSE-SU-2018:2835-1 Security update for shadow
- SUSE-SU-2018:2834-1 Security update for shadow
- SUSE-SU-2018:2641-1 Security update for enigmail
- SUSE-SU-2018:2562-1 Security update for ImageMagick
- SUSE-SU-2018:2560-1 Security update for GraphicsMagick
- SUSE-SU-2018:2557-1 Security update for libtirpc
- SUSE-SU-2018:2553-1 Security update for ImageMagick
- SUSE-SU-2018:2181-1 Recommended update for yast2-ftp-server
- SUSE-SU-2018:2171-1 Security update for libtirpc
- SUSE-SU-2018:1952-1 Initial update for kernel-azure
- SUSE-SU-2018:1661-2 Security update for ucode-intel
- SUSE-SU-2018:1661-1 Security update for ucode-intel
- SUSE-SU-2018:1482-1 Security update for the Linux Kernel
- SUSE-SU-2018:0510-1 Security update for libdb-4_8
- SUSE-SU-2018:0467-1 Security update for gtk2
- SUSE-SU-2018:0409-1 Security update for libdb-4_5
- RUSTSEC-2018-0017 `tempdir` crate has been deprecated; use `tempfile` instead
- RUSTSEC-2018-0016 quickersort is deprecated and unmaintained
- RUSTSEC-2018-0015 term is looking for a new maintainer
- RUSTSEC-2018-0014 chan is end-of-life; use crossbeam-channel instead
- PSF-2018-8 Email folding function Denial-of-Service
- PSF-2018-7 xml package does not obey ignore_environment
- GHSA-wm77-q74p-5763 Path Traversal in superstatic
- GHSA-mh6f-8j2x-4483 Critical severity vulnerability that affects event-stream and flatmap-stream
- GHSA-hxxf-q3w9-4xgw Malicious Package in eslint-scope
- GHSA-cgpw-2gph-2r9g Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated.
- GHSA-3m2r-q8x3-xmf7 Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where a specially crafted request can cause
- GHSA-39vw-qp34-rmwf Uncontrolled recursion leads to abort in deserialization
- GHSA-2jq9-6xx7-3h29 Use of uninitialized memory in temporary
- DRUPAL-CORE-2018-001 This security advisory fixes multiple vulnerabilities in both Drupal 7 and Drupal 8.
- DRUPAL-CONTRIB-2018-081 This module provides a JSON:API specification-compliant HTTP API for accessing and manipulating Drupal content and configuration entities.
- DRUPAL-CONTRIB-2018-078 This module enables Drupal to synchronize entities with Salesforce records.
- DRUPAL-CONTRIB-2018-074 This base theme bridges the gap between Drupal and the Bootstrap Framework.
- DRUPAL-CONTRIB-2018-073 The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users.
- DRUPAL-CONTRIB-2018-071 This module enables you to resolve the provided Drupal path in order to find the canonical path and information about the resolved entity.
- DRUPAL-CONTRIB-2018-067 The Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node states, and affects the
- DRUPAL-CONTRIB-2018-059 This module enables you to create fields for storing decimal values as two integers (numerator and denominator) for maximum precision.
- DRUPAL-CONTRIB-2018-057 This module enables you to build eCommerce websites and applications with Drupal.
- DRUPAL-CONTRIB-2018-055 This module enables you to add or overwrite PHP configuration on a drupal website.
- DRUPAL-CONTRIB-2018-040 This module enables you to delete any types of entities in bulk.
- DRUPAL-CONTRIB-2018-039 The security team is marking this project unsupported.
- DRUPAL-CONTRIB-2018-038 The security team is marking this project unsupported.
- DRUPAL-CONTRIB-2018-027 This module adds a new formatter for the file fields, which allows any file extension to be uploaded.
- DRUPAL-CONTRIB-2018-025 Simple Taxonomy Revision module enables revisions for taxonomy terms for Drupal 8.
- DRUPAL-CONTRIB-2018-022 This module enables you to monitor and manage any number of remote Drupal sites and aggregate useful information for administrators in a central dashboard.
- DRUPAL-CONTRIB-2018-021 This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities.
- DRUPAL-CONTRIB-2018-018 This module helps in exporting and importing Menu Items via the administrative interface.
- DRUPAL-CONTRIB-2018-017 This module enables you to retrieve image metadata and use them in fields or title.
- DRUPAL-CONTRIB-2018-016 This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities.
- DRUPAL-CONTRIB-2018-015 This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities.
- DRUPAL-CONTRIB-2018-014 This module enables you to drag and drop or paste images into CKEditor.
- DRUPAL-CONTRIB-2018-008 This module enables you to show referenced entities in tabs.
- DRUPAL-CONTRIB-2018-002 The Node view permissions module enables the "View own content" and "View any content" permissions for each content type on the permissions page.
- DRUPAL-CONTRIB-2018-001 This module enables content editors to create complex pages and layouts on the fly without the help from a developer, using reusable widgets.
- CVE-2018-9999 Cross-site scripting in n/a
- CVE-2018-9998 Information disclosure in n/a
- CVE-2018-9997 Cross-site scripting in n/a
- CVE-2018-9996 Denial of service in n/a
- CVE-2018-9995 Auth bypass in n/a
- CVE-2018-9993 Cross-site scripting in n/a
- CVE-2018-9992 Cross-site scripting in n/a
- CVE-2018-9991 Cross-site scripting in n/a
- CVE-2018-9990 Cross-site scripting in n/a
- CVE-2018-9989 Memory corruption in n/a
- CVE-2018-9988 Memory corruption in n/a
- CVE-2018-9987 Cross-site scripting in n/a
- CVE-2018-9986 Cross-site scripting in n/a
- CVE-2018-9985 Cross-site scripting in n/a
- CVE-2018-9984 Information disclosure in Foxit Reader
- CVE-2018-9983 Information disclosure in Foxit Reader
- CVE-2018-9982 Memory corruption in Foxit Reader
- CVE-2018-9981 Null dereference in Foxit Reader
- CVE-2018-9980 Information disclosure in Foxit Reader
- CVE-2018-9979 Information disclosure in Foxit Reader
- CVE-2018-9978 Information disclosure in Foxit Reader
- CVE-2018-9977 Use after free in Foxit Reader
- CVE-2018-9976 Information disclosure in Foxit Reader
- CVE-2018-9975 Use after free in Foxit Reader
- CVE-2018-9974 Memory corruption in Foxit Reader
- CVE-2018-9973 Information disclosure in Foxit Reader
- CVE-2018-9972 Information disclosure in Foxit Reader
- CVE-2018-9971 Information disclosure in Foxit Reader
- CVE-2018-9970 Use after free in Foxit Reader
- CVE-2018-9969 Use after free in Foxit Reader
- CVE-2018-9968 Use after free in Foxit Reader
- CVE-2018-9967 Use after free in Foxit Reader
- CVE-2018-9966 Use after free in n/a