Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 102 of 163.
- CVE-2018-15920 Use after free in Adobe Acrobat and Reader
- CVE-2018-15919 Information disclosure in netapp:cloud backup
- CVE-2018-15918 SQL injection in jorani project:jorani
- CVE-2018-15917 Cross-site scripting in jorani project:jorani
- CVE-2018-15913 Cross-site scripting in cloudera:cloudera manager
- CVE-2018-15912 Privilege escalation in manjaro:manjaro linux
- CVE-2018-15911 Memory corruption in artifex:ghostscript
- CVE-2018-15910 Memory corruption in artifex:ghostscript
- CVE-2018-15909 Memory corruption in artifex:ghostscript
- CVE-2018-15908 Security feature bypass in artifex:ghostscript
- CVE-2018-15907 Denial of service in technicolor:tc8305c firmware
- CVE-2018-15906 Code injection in solarwinds:serv-u ftp server
- CVE-2018-15904 Security feature bypass in a10networks:acos web application firewall
- CVE-2018-15903 Cross-site scripting in claromentis:claromentis
- CVE-2018-15901 Cross-site request forgery in e107:e107
- CVE-2018-15899 Cross-site scripting in 1234n:minicms
- CVE-2018-15898 Security feature bypass in subsonic:music streamer
- CVE-2018-15897 Cross-site scripting in website seller script project:website seller script
- CVE-2018-15896 Cross-site scripting in website seller script project:website seller script
- CVE-2018-15895 Server-side request forgery in icmsdev:icms
- CVE-2018-15894 SQL injection in wuzhi cms project:wuzhi cms
- CVE-2018-15893 SQL injection in wuzhi cms project:wuzhi cms
- CVE-2018-15892 SQL injection in freepbx:disa
- CVE-2018-15891 Cross-site scripting in freepbx:freepbx
- CVE-2018-15890 Deserialization of Untrusted Data in EthereumJ
- CVE-2018-15888 Privilege escalation in aspcms:aspcms
- CVE-2018-15887 Command injection in asus:dsl-n12e c1 firmware
- CVE-2018-15886 Code injection in monstra:monstra
- CVE-2018-15885 Security feature bypass in ovation:findme
- CVE-2018-15884 Cross-site scripting in ricoh:mp c4504ex firmware
- CVE-2018-15882 File upload in joomla:joomla\!
- CVE-2018-15881 Missing authorization in joomla:joomla\!
- CVE-2018-15880 Cross-site scripting in joomla:joomla\!
- CVE-2018-1588 XML external entity in Rational Engineering Lifecycle Manager
- CVE-2018-15877 Command injection in plainview activity monitor project:plainview activity monitor
- CVE-2018-15876 Security feature bypass in ajax bootmodal login project:ajax bootmodal login
- CVE-2018-15875 Cross-site scripting in dlink:dir-615 firmware
- CVE-2018-15874 Cross-site scripting in dlink:dir-615 firmware
- CVE-2018-15873 SQL injection in sapplica:sentrifugo
- CVE-2018-15871 Memory corruption in libming:libming
- CVE-2018-15870 Memory corruption in libming:libming
- CVE-2018-1587 Information disclosure in Rational Rhapsody Design Manager
- CVE-2018-15869 Supply chain in hashicorp:packer
- CVE-2018-15868 SQL injection in chronoscan:chronoscan
- CVE-2018-15865 Privilege escalation in pulsesecure:pulse secure desktop client
- CVE-2018-15864 Null dereference in canonical:ubuntu linux
- CVE-2018-15863 Null dereference in canonical:ubuntu linux
- CVE-2018-15862 Null dereference in canonical:ubuntu linux
- CVE-2018-15861 Null dereference in canonical:ubuntu linux
- CVE-2018-15859 Null dereference in canonical:ubuntu linux
- CVE-2018-15858 Null dereference in canonical:ubuntu linux
- CVE-2018-15857 Memory corruption in canonical:ubuntu linux
- CVE-2018-15856 Denial of service in canonical:ubuntu linux
- CVE-2018-15855 Null dereference in canonical:ubuntu linux
- CVE-2018-15854 Null dereference in canonical:ubuntu linux
- CVE-2018-15853 Denial of service in canonical:ubuntu linux
- CVE-2018-15852 Denial of service in technicolor:tc7200.20 firmware
- CVE-2018-15851 Cross-site request forgery in flexocms project:flexo cms
- CVE-2018-15850 Cross-site request forgery in redaxo:redaxo cms
- CVE-2018-1585 Cross-site scripting in Rational Rhapsody Design Manager
- CVE-2018-15849 Cross-site request forgery in portfoliocms project:portfoliocms
- CVE-2018-15848 Cross-site request forgery in portfoliocms project:portfoliocms
- CVE-2018-15847 Cross-site scripting in puppycms:puppycms
- CVE-2018-15846 Cross-site request forgery in fledrcms project:fledrcms
- CVE-2018-15845 Gleez CMS CSRF Allows Adding of Administrator Accounts
- CVE-2018-15844 Cross-site request forgery in damicms:damicms
- CVE-2018-15843 Cross-site scripting in get-simple:getsimple cms
- CVE-2018-15842 Cross-site scripting in wolfcms:wolf cms
- CVE-2018-15840 Denial of service in tp-link:tl-wr840n firmware
- CVE-2018-1584 Cross-site scripting in Maximo Asset Management
- CVE-2018-15839 Memory corruption in dlink:dir-615 firmware
- CVE-2018-15836 Weak cryptography in xelerance:openswan
- CVE-2018-15835 Misconfiguration in google:android
- CVE-2018-15834 Memory corruption in radare:radare2
- CVE-2018-15833 Business logic in vanillaforums:vanilla forums
- CVE-2018-15832 Command injection in ubisoft:uplay
- CVE-2018-1583 Security feature bypass in StoredIQ
- CVE-2018-15822 Denial of service in canonical:ubuntu linux
- CVE-2018-15820 Cross-site scripting in easyio:easyio 30p firmware
- CVE-2018-15819 Auth bypass in easyio:easyio 30p firmware
- CVE-2018-15818 Path traversal in reputeinfosystems:repute arforms
- CVE-2018-15817 Memory corruption in faststone:image viewer
- CVE-2018-15816 Memory corruption in faststone:image viewer
- CVE-2018-15815 Memory corruption in faststone:image viewer
- CVE-2018-15814 Memory corruption in faststone:image viewer
- CVE-2018-15813 Memory corruption in faststone:image viewer
- CVE-2018-15812 Insufficient Entropy in DotNetNuke
- CVE-2018-15811 DotNetNuke (DNN) Inadequate Encryption Strength
- CVE-2018-15810 Path traversal in visiology:flipbox
- CVE-2018-15809 Misconfiguration in accupos:accupos
- CVE-2018-15808 Hardcoded credentials in posim:evo
- CVE-2018-15807 Weak cryptography in posim:evo
- CVE-2018-15805 XML external entity in accusoft:prizmdoc
- CVE-2018-15804 Privilege escalation in mapr:mapr
- CVE-2018-15801 Authorization Bypass During JWT Issuer Validation with spring-security
- CVE-2018-15800 Timing attack allows extraction of signing key in Bits Service
- CVE-2018-15798 Pivotal Concourse allows malicious redirect urls on login
- CVE-2018-15797 NFS Volume release errand leaks cf admin credentials in logs
- CVE-2018-15796 Signing Key Extraction in Bits Service Release
- CVE-2018-15795 CredHub Service Broker uses guessable client secret