# Vulnerabilities published in 2018


- [openSUSE-SU-2018:2806-1](https://insights.sbomify.com/openSUSE-SU-2018-2806-1/): Security update for nemo-extensions (not scored)
- [SUSE-SU-2018:4215-1](https://insights.sbomify.com/SUSE-SU-2018-4215-1/): Security update for enigmail (not scored)
- [SUSE-SU-2018:4182-1](https://insights.sbomify.com/SUSE-SU-2018-4182-1/): Security update for crash (not scored)
- [SUSE-SU-2018:3572-1](https://insights.sbomify.com/SUSE-SU-2018-3572-1/): Security update for apache2-mod_nss (not scored)
- [SUSE-SU-2018:3311-1](https://insights.sbomify.com/SUSE-SU-2018-3311-1/): Security update for pam_pkcs11 (not scored)
- [SUSE-SU-2018:3290-1](https://insights.sbomify.com/SUSE-SU-2018-3290-1/): Security update for pam_pkcs11 (not scored)
- [SUSE-SU-2018:3074-2](https://insights.sbomify.com/SUSE-SU-2018-3074-2/): Security update for postgresql10 (not scored)
- [SUSE-SU-2018:3074-1](https://insights.sbomify.com/SUSE-SU-2018-3074-1/): Security update for postgresql10 (not scored)
- [SUSE-SU-2018:3072-1](https://insights.sbomify.com/SUSE-SU-2018-3072-1/): Security update for ImageMagick (not scored)
- [SUSE-SU-2018:2904-1](https://insights.sbomify.com/SUSE-SU-2018-2904-1/): Security update for yast2-smt (not scored)
- [SUSE-SU-2018:2902-2](https://insights.sbomify.com/SUSE-SU-2018-2902-2/): Security update for yast2-smt (not scored)
- [SUSE-SU-2018:2902-1](https://insights.sbomify.com/SUSE-SU-2018-2902-1/): Security update for yast2-smt (not scored)
- [SUSE-SU-2018:2843-1](https://insights.sbomify.com/SUSE-SU-2018-2843-1/): Security update for pam_pkcs11 (not scored)
- [SUSE-SU-2018:2835-1](https://insights.sbomify.com/SUSE-SU-2018-2835-1/): Security update for shadow (not scored)
- [SUSE-SU-2018:2834-1](https://insights.sbomify.com/SUSE-SU-2018-2834-1/): Security update for shadow (not scored)
- [SUSE-SU-2018:2641-1](https://insights.sbomify.com/SUSE-SU-2018-2641-1/): Security update for enigmail (not scored)
- [SUSE-SU-2018:2562-1](https://insights.sbomify.com/SUSE-SU-2018-2562-1/): Security update for ImageMagick (not scored)
- [SUSE-SU-2018:2560-1](https://insights.sbomify.com/SUSE-SU-2018-2560-1/): Security update for GraphicsMagick (not scored)
- [SUSE-SU-2018:2557-1](https://insights.sbomify.com/SUSE-SU-2018-2557-1/): Security update for libtirpc (not scored)
- [SUSE-SU-2018:2553-1](https://insights.sbomify.com/SUSE-SU-2018-2553-1/): Security update for ImageMagick (not scored)
- [SUSE-SU-2018:2181-1](https://insights.sbomify.com/SUSE-SU-2018-2181-1/): Recommended update for yast2-ftp-server (not scored)
- [SUSE-SU-2018:2171-1](https://insights.sbomify.com/SUSE-SU-2018-2171-1/): Security update for libtirpc (not scored)
- [SUSE-SU-2018:1952-1](https://insights.sbomify.com/SUSE-SU-2018-1952-1/): Initial update for kernel-azure (not scored)
- [SUSE-SU-2018:1661-2](https://insights.sbomify.com/SUSE-SU-2018-1661-2/): Security update for ucode-intel (not scored)
- [SUSE-SU-2018:1661-1](https://insights.sbomify.com/SUSE-SU-2018-1661-1/): Security update for ucode-intel (not scored)
- [SUSE-SU-2018:1482-1](https://insights.sbomify.com/SUSE-SU-2018-1482-1/): Security update for the Linux Kernel (not scored)
- [SUSE-SU-2018:0510-1](https://insights.sbomify.com/SUSE-SU-2018-0510-1/): Security update for libdb-4_8 (not scored)
- [SUSE-SU-2018:0467-1](https://insights.sbomify.com/SUSE-SU-2018-0467-1/): Security update for gtk2 (not scored)
- [SUSE-SU-2018:0409-1](https://insights.sbomify.com/SUSE-SU-2018-0409-1/): Security update for libdb-4_5 (not scored)
- [RUSTSEC-2018-0017](https://insights.sbomify.com/RUSTSEC-2018-0017/): `tempdir` crate has been deprecated; use `tempfile` instead (not scored)
- [RUSTSEC-2018-0016](https://insights.sbomify.com/RUSTSEC-2018-0016/): quickersort is deprecated and unmaintained (not scored)
- [RUSTSEC-2018-0015](https://insights.sbomify.com/RUSTSEC-2018-0015/): term is looking for a new maintainer (not scored)
- [RUSTSEC-2018-0014](https://insights.sbomify.com/RUSTSEC-2018-0014/): chan is end-of-life; use crossbeam-channel instead (not scored)
- [PSF-2018-8](https://insights.sbomify.com/PSF-2018-8/): Email folding function Denial-of-Service (not scored)
- [PSF-2018-7](https://insights.sbomify.com/PSF-2018-7/): xml package does not obey ignore_environment (not scored)
- [GHSA-wm77-q74p-5763](https://insights.sbomify.com/GHSA-wm77-q74p-5763/): Path Traversal in superstatic (not scored)
- [GHSA-mh6f-8j2x-4483](https://insights.sbomify.com/GHSA-mh6f-8j2x-4483/): Critical severity vulnerability that affects event-stream and flatmap-stream (not scored)
- [GHSA-hxxf-q3w9-4xgw](https://insights.sbomify.com/GHSA-hxxf-q3w9-4xgw/): Malicious Package in eslint-scope (not scored)
- [GHSA-cgpw-2gph-2r9g](https://insights.sbomify.com/GHSA-cgpw-2gph-2r9g/): Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. (not scored)
- [GHSA-3m2r-q8x3-xmf7](https://insights.sbomify.com/GHSA-3m2r-q8x3-xmf7/): Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where a specially crafted request can cause (not scored)
- [GHSA-39vw-qp34-rmwf](https://insights.sbomify.com/GHSA-39vw-qp34-rmwf/): Uncontrolled recursion leads to abort in deserialization (not scored)
- [GHSA-2jq9-6xx7-3h29](https://insights.sbomify.com/GHSA-2jq9-6xx7-3h29/): Use of uninitialized memory in temporary (not scored)
- [DRUPAL-CORE-2018-001](https://insights.sbomify.com/DRUPAL-CORE-2018-001/): This security advisory fixes multiple vulnerabilities in both Drupal 7 and Drupal 8. (not scored)
- [DRUPAL-CONTRIB-2018-081](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-081/): This module provides a JSON:API specification-compliant HTTP API for accessing and manipulating Drupal content and configuration entities. (not scored)
- [DRUPAL-CONTRIB-2018-078](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-078/): This module enables Drupal to synchronize entities with Salesforce records. (not scored)
- [DRUPAL-CONTRIB-2018-074](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-074/): This base theme bridges the gap between Drupal and the Bootstrap Framework. (not scored)
- [DRUPAL-CONTRIB-2018-073](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-073/): The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users. (not scored)
- [DRUPAL-CONTRIB-2018-071](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-071/): This module enables you to resolve the provided Drupal path in order to find the canonical path and information about the resolved entity. (not scored)
- [DRUPAL-CONTRIB-2018-067](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-067/): The Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node states, and affects the (not scored)
- [DRUPAL-CONTRIB-2018-059](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-059/): This module enables you to create fields for storing decimal values as two integers (numerator and denominator) for maximum precision. (not scored)
- [DRUPAL-CONTRIB-2018-057](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-057/): This module enables you to build eCommerce websites and applications with Drupal. (not scored)
- [DRUPAL-CONTRIB-2018-055](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-055/): This module enables you to add or overwrite PHP configuration on a drupal website. (not scored)
- [DRUPAL-CONTRIB-2018-040](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-040/): This module enables you to delete any types of entities in bulk. (not scored)
- [DRUPAL-CONTRIB-2018-039](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-039/): The security team is marking this project unsupported. (not scored)
- [DRUPAL-CONTRIB-2018-038](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-038/): The security team is marking this project unsupported. (not scored)
- [DRUPAL-CONTRIB-2018-027](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-027/): This module adds a new formatter for the file fields, which allows any file extension to be uploaded. (not scored)
- [DRUPAL-CONTRIB-2018-025](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-025/): Simple Taxonomy Revision module enables revisions for taxonomy terms for Drupal 8. (not scored)
- [DRUPAL-CONTRIB-2018-022](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-022/): This module enables you to monitor and manage any number of remote Drupal sites and aggregate useful information for administrators in a central dashboard. (not scored)
- [DRUPAL-CONTRIB-2018-021](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-021/): This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities. (not scored)
- [DRUPAL-CONTRIB-2018-018](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-018/): This module helps in exporting and importing Menu Items via the administrative interface. (not scored)
- [DRUPAL-CONTRIB-2018-017](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-017/): This module enables you to retrieve image metadata and use them in fields or title. (not scored)
- [DRUPAL-CONTRIB-2018-016](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-016/): This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities. (not scored)
- [DRUPAL-CONTRIB-2018-015](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-015/): This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities. (not scored)
- [DRUPAL-CONTRIB-2018-014](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-014/): This module enables you to drag and drop or paste images into CKEditor. (not scored)
- [DRUPAL-CONTRIB-2018-008](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-008/): This module enables you to show referenced entities in tabs. (not scored)
- [DRUPAL-CONTRIB-2018-002](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-002/): The Node view permissions module enables the "View own content" and "View any content" permissions for each content type on the permissions page. (not scored)
- [DRUPAL-CONTRIB-2018-001](https://insights.sbomify.com/DRUPAL-CONTRIB-2018-001/): This module enables content editors to create complex pages and layouts on the fly without the help from a developer, using reusable widgets. (not scored)
- [CVE-2018-9999](https://insights.sbomify.com/CVE-2018-9999/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-9998](https://insights.sbomify.com/CVE-2018-9998/): Information disclosure in n/a (medium 6.5)
- [CVE-2018-9997](https://insights.sbomify.com/CVE-2018-9997/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-9996](https://insights.sbomify.com/CVE-2018-9996/): Denial of service in n/a (medium 5.5)
- [CVE-2018-9995](https://insights.sbomify.com/CVE-2018-9995/): Auth bypass in n/a (critical 9.8)
- [CVE-2018-9993](https://insights.sbomify.com/CVE-2018-9993/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2018-9992](https://insights.sbomify.com/CVE-2018-9992/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2018-9991](https://insights.sbomify.com/CVE-2018-9991/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2018-9990](https://insights.sbomify.com/CVE-2018-9990/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-9989](https://insights.sbomify.com/CVE-2018-9989/): Memory corruption in n/a (high 7.5)
- [CVE-2018-9988](https://insights.sbomify.com/CVE-2018-9988/): Memory corruption in n/a (high 7.5)
- [CVE-2018-9987](https://insights.sbomify.com/CVE-2018-9987/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-9986](https://insights.sbomify.com/CVE-2018-9986/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-9985](https://insights.sbomify.com/CVE-2018-9985/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-9984](https://insights.sbomify.com/CVE-2018-9984/): Information disclosure in Foxit Reader (medium 6.5)
- [CVE-2018-9983](https://insights.sbomify.com/CVE-2018-9983/): Information disclosure in Foxit Reader (medium 6.5)
- [CVE-2018-9982](https://insights.sbomify.com/CVE-2018-9982/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-9981](https://insights.sbomify.com/CVE-2018-9981/): Null dereference in Foxit Reader (high 8.8)
- [CVE-2018-9980](https://insights.sbomify.com/CVE-2018-9980/): Information disclosure in Foxit Reader (medium 6.5)
- [CVE-2018-9979](https://insights.sbomify.com/CVE-2018-9979/): Information disclosure in Foxit Reader (medium 6.5)
- [CVE-2018-9978](https://insights.sbomify.com/CVE-2018-9978/): Information disclosure in Foxit Reader (medium 6.5)
- [CVE-2018-9977](https://insights.sbomify.com/CVE-2018-9977/): Use after free in Foxit Reader (high 8.8)
- [CVE-2018-9976](https://insights.sbomify.com/CVE-2018-9976/): Information disclosure in Foxit Reader (medium 6.5)
- [CVE-2018-9975](https://insights.sbomify.com/CVE-2018-9975/): Use after free in Foxit Reader (high 8.8)
- [CVE-2018-9974](https://insights.sbomify.com/CVE-2018-9974/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-9973](https://insights.sbomify.com/CVE-2018-9973/): Information disclosure in Foxit Reader (medium 6.5)
- [CVE-2018-9972](https://insights.sbomify.com/CVE-2018-9972/): Information disclosure in Foxit Reader (medium 6.5)
- [CVE-2018-9971](https://insights.sbomify.com/CVE-2018-9971/): Information disclosure in Foxit Reader (medium 6.5)
- [CVE-2018-9970](https://insights.sbomify.com/CVE-2018-9970/): Use after free in Foxit Reader (high 8.8)
- [CVE-2018-9969](https://insights.sbomify.com/CVE-2018-9969/): Use after free in Foxit Reader (high 8.8)
- [CVE-2018-9968](https://insights.sbomify.com/CVE-2018-9968/): Use after free in Foxit Reader (high 8.8)
- [CVE-2018-9967](https://insights.sbomify.com/CVE-2018-9967/): Use after free in Foxit Reader (high 8.8)
- [CVE-2018-9966](https://insights.sbomify.com/CVE-2018-9966/): Use after free in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/