Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 103 of 163.
- CVE-2018-15784 DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability
- CVE-2018-15782 DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability
- CVE-2018-15781 DSA-2019-022: Dell Wyse Password Encoder Hard-coded Cryptographic Key Vulnerability
- CVE-2018-15780 DSA-2018-224: RSA Archer GRC Platform Improper Access Control Vulnerability
- CVE-2018-15778 DSA-2019-019: Dell Networking OS10 OS Command Injection Vulnerability
- CVE-2018-15776 iDRAC7, iDRAC8 - Improper Error Handling
- CVE-2018-15774 iDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability
- CVE-2018-15773 Dell Encryption Enterprise \ Dell Data Protection Encryption Information Disclosure Vulnerability
- CVE-2018-15772 Dell EMC RecoverPoint Uncontrolled Resource Consumption Vulnerability
- CVE-2018-15771 Dell EMC RecoverPoint Information Disclosure Vulnerability
- CVE-2018-15769 Denial of service in dell:bsafe
- CVE-2018-15768 Insecure MySQL Configuration Vulnerability
- CVE-2018-15767 Improper Authorization Vulnerability
- CVE-2018-15766 Dell Encryption and Dell Endpoint Security Suite Enterprise Security Policy Overwrite Vulnerability
- CVE-2018-15765 Information disclosure in ESRS Virtual Edition
- CVE-2018-15764 Misconfiguration in ESRS Policy Manager
- CVE-2018-15763 PKS leaks IaaS Credentials to Application Logs
- CVE-2018-15762 Pivotal Operations Manager gives all users heightened privileges
- CVE-2018-15761 UAA Privilege Escalation
- CVE-2018-15759 On Demand Services SDK Timing Attack Vulnerability
- CVE-2018-15758 Privilege Escalation in spring-security-oauth2
- CVE-2018-15756 DoS Attack via Range Requests
- CVE-2018-15755 CF networking internal policy server SQL injection
- CVE-2018-15754 UAA can issue tokens across identity providers if users with matching usernames exist
- CVE-2018-15753 Hardcoded credentials in mensamax:mensamax
- CVE-2018-15752 Information disclosure in mensamax:mensamax
- CVE-2018-15751 SaltStack Salt Remote command execution and incorrect access control when using salt-api
- CVE-2018-15750 SaltStack Salt Directory Traversal vulnerability in salt-api
- CVE-2018-15749 Memory corruption in pulsesecure:pulse secure desktop client
- CVE-2018-15748 Information disclosure in dell:2335dn engine firmware
- CVE-2018-15747 glot-code-runner RCE
- CVE-2018-15746 Denial of service in qemu:qemu
- CVE-2018-15745 Path traversal in argussurveillance:dvr
- CVE-2018-15740 Cross-site scripting in zohocorp:manageengine admanager plus
- CVE-2018-15738 Memory corruption in stopzilla:antimalware
- CVE-2018-15737 Denial of service in stopzilla:antimalware
- CVE-2018-15736 Denial of service in stopzilla:antimalware
- CVE-2018-15735 Memory corruption in stopzilla:antimalware
- CVE-2018-15734 Memory corruption in stopzilla:antimalware
- CVE-2018-15733 Null dereference in stopzilla:antimalware
- CVE-2018-15732 Memory corruption in stopzilla:antimalware
- CVE-2018-15731 Denial of service in stopzilla:antimalware
- CVE-2018-15730 Denial of service in stopzilla:antimalware
- CVE-2018-15729 Denial of service in stopzilla:antimalware
- CVE-2018-15728 Code injection in couchbase:couchbase server
- CVE-2018-15727 Grafana Authentication Bypass
- CVE-2018-15726 Command injection in pulsesecure:pulse secure desktop client
- CVE-2018-15723 Command injection in Logitech Harmony Hub
- CVE-2018-15722 Command injection in Logitech Harmony Hub
- CVE-2018-15721 Auth bypass in Logitech Harmony Hub
- CVE-2018-15720 Hardcoded credentials in Logitech Harmony Hub
- CVE-2018-15719 Hardcoded credentials in Open Dental
- CVE-2018-15718 Information disclosure in Open Dental
- CVE-2018-15717 Weak cryptography in Open Dental
- CVE-2018-15716 Command injection in NUUO NVRMini2
- CVE-2018-15715 Auth bypass in Zoom
- CVE-2018-15714 Cross-site scripting in Nagios XI
- CVE-2018-15713 Cross-site scripting in Nagios XI
- CVE-2018-15712 Cross-site scripting in Nagios XI
- CVE-2018-15711 Privilege escalation in Nagios XI
- CVE-2018-15710 Command injection in Nagios XI
- CVE-2018-1571 Command injection in QRadar SIEM
- CVE-2018-15709 Command injection in Nagios XI
- CVE-2018-15708 Command injection in Nagios XI
- CVE-2018-15707 Cross-site scripting in Advantech WebAccess
- CVE-2018-15706 Path traversal in Advantech WebAccess
- CVE-2018-15705 Path traversal in Advantech WebAccess
- CVE-2018-15704 Memory corruption in Advantech WebAccess
- CVE-2018-15703 Cross-site scripting in Advantech WebAccess
- CVE-2018-15702 Cross-site request forgery in TP-Link TL-WRN841N
- CVE-2018-15701 Denial of service in TP-Link TL-WRN841N
- CVE-2018-15700 Denial of service in TP-Link TL-WRN841N
- CVE-2018-15699 Cross-site scripting in ASUSTOR Data Master
- CVE-2018-15698 Path traversal in ASUSTOR Data Master
- CVE-2018-15697 Path traversal in ASUSTOR Data Master
- CVE-2018-15696 Information disclosure in ASUSTOR Data Master
- CVE-2018-15695 Path traversal in ASUSTOR Data Master
- CVE-2018-15694 Path traversal in ASUSTOR Data Master
- CVE-2018-15693 Missing authorization in inova-software:inova partner
- CVE-2018-15692 Missing authorization in inova-software:inova partner
- CVE-2018-15691 Deserialization in Release Automation
- CVE-2018-15688 Out-of-Bounds write in systemd-networkd dhcpv6 option handling
- CVE-2018-15687 systemd: chown_one() can dereference symlinks
- CVE-2018-15686 systemd: reexec state injection: fgets() on overlong lines leads to line splitting
- CVE-2018-15685 Electron webPreferences vulnerability can be used to perform remote code execution
- CVE-2018-15684 Information disclosure in btiteam:xbtit
- CVE-2018-15683 Open redirect in btiteam:xbtit
- CVE-2018-15682 Cross-site request forgery in btiteam:xbtit
- CVE-2018-15681 Weak cryptography in btiteam:xbtit
- CVE-2018-15680 Weak cryptography in btiteam:xbtit
- CVE-2018-1568 Information disclosure in QRadar SIEM
- CVE-2018-15679 Cross-site scripting in btiteam:xbtit
- CVE-2018-15678 Cross-site scripting in btiteam:xbtit
- CVE-2018-15677 Cross-site scripting in btiteam:xbtit
- CVE-2018-15676 Cross-site scripting in btiteam:xbtit
- CVE-2018-15671 Denial of service in hdfgroup:hdf5
- CVE-2018-15670 Security feature bypass in bloop:airmail
- CVE-2018-1567 Deserialization in WebSphere Application Server
- CVE-2018-15669 Security feature bypass in bloop:airmail 3
- CVE-2018-15668 Information disclosure in bloop:airmail 3