Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 104 of 163.
- CVE-2018-15667 Auth bypass in airmailapp:airmail
- CVE-2018-15665 Information disclosure in cloudera:data science workbench
- CVE-2018-15664 Path traversal in docker:docker
- CVE-2018-15661 Auth bypass in olacabs:ola money
- CVE-2018-15660 Information disclosure in olacabs:olamoney
- CVE-2018-1566 Memory corruption in DB2 for Linux, UNIX and Windows
- CVE-2018-15659 Misconfiguration in 42gears:suremdm
- CVE-2018-15658 Information disclosure in 42gears:suremdm
- CVE-2018-15657 Server-side request forgery in 42gears:suremdm
- CVE-2018-15656 Information disclosure in 42gears:suremdm
- CVE-2018-15655 Misconfiguration in 42gears:suremdm
- CVE-2018-1565 Memory corruption in DB2 for Linux, UNIX and Windows
- CVE-2018-15645 Missing authorization in Odoo Community
- CVE-2018-15641 Cross-site scripting in Odoo Community
- CVE-2018-15640 Privilege escalation in Odoo Enterprise
- CVE-2018-1564 Information disclosure in Sterling B2B Integrator
- CVE-2018-15638 Cross-site scripting in Odoo Community
- CVE-2018-15635 Cross-site scripting in Odoo Community
- CVE-2018-15634 Cross-site scripting in Odoo Community
- CVE-2018-15633 Cross-site scripting in Odoo Community
- CVE-2018-15632 Auth bypass in Odoo Community
- CVE-2018-15631 Missing authorization in Odoo Community
- CVE-2018-1563 Cross-site scripting in Sterling File Gateway
- CVE-2018-15617 Communication Manager Denial of Service
- CVE-2018-15616 System Platform Web UI Deserialization
- CVE-2018-15615 CMS Supervisor Information Disclosure
- CVE-2018-15614 IP Office one-X Portal XSS
- CVE-2018-15613 Orchestration Designer Runtime Config XSS
- CVE-2018-15612 Orchestration Designer Runtime Config CSRF
- CVE-2018-15611 Communication Manager Local Administrator PrivEsc
- CVE-2018-15610 Improper access controls in IP Office one-X Portal
- CVE-2018-15608 Cross-site scripting in manageengine:admanager plus
- CVE-2018-15607 Denial of service in imagemagick:imagemagick
- CVE-2018-15606 Cross-site scripting in salesagility:suitecrm
- CVE-2018-15605 phpMyAdmin Cross-site Scripting (XSS) in the import dialog
- CVE-2018-15603 Cross-site scripting in victor cms project:victor cms
- CVE-2018-15602 Cross-site scripting in zyxel:vmg3312 b10b firmware
- CVE-2018-15601 Elefant CMS Improper Input Validation
- CVE-2018-1560 Cross-site scripting in Rational Engineering Lifecycle Manager
- CVE-2018-15599 Information disclosure in debian:debian linux
- CVE-2018-15598 Traefik Missing Authentication
- CVE-2018-15596 Cross-site scripting in mybb:mybb
- CVE-2018-15594 Information disclosure in canonical:ubuntu linux
- CVE-2018-15593 Weak cryptography in ivanti:workspace control
- CVE-2018-15592 Privilege escalation in ivanti:workspace control
- CVE-2018-15591 Security feature bypass in ivanti:workspace control
- CVE-2018-15590 Security feature bypass in ivanti:workspace control
- CVE-2018-15588 Security feature bypass in freron:mailmate
- CVE-2018-15587 Security feature bypass in debian:debian linux
- CVE-2018-15586 Security feature bypass in enigmail:enigmail
- CVE-2018-15585 Cross-site scripting in sir:gnuboard
- CVE-2018-15584 Cross-site scripting in sir:gnuboard
- CVE-2018-15583 Cross-site scripting in sir:gnuboard
- CVE-2018-15582 Cross-site scripting in sir:gnuboard
- CVE-2018-15581 Cross-site scripting in sir:gnuboard
- CVE-2018-15580 Cross-site scripting in sir:gnuboard
- CVE-2018-1558 Cross-site scripting in Rational Collaborative Lifecycle Management
- CVE-2018-15576 Deserialization in hazzardweb:easylogin pro
- CVE-2018-15574 Cross-site scripting in reprisesoftware:reprise license manager
- CVE-2018-15573 File upload in reprisesoftware:reprise license manager
- CVE-2018-15572 Information disclosure in canonical:ubuntu linux
- CVE-2018-15571 Code injection in export users to csv project:export users to csv
- CVE-2018-15570 Cross-site scripting in bijiadao:waimai super cms
- CVE-2018-1557 Cross-site scripting in Rational Quality Manager
- CVE-2018-15569 Cross-site request forgery in mylittleforum:my little forum
- CVE-2018-15568 Cross-site request forgery in tp5cms project:tp5cms
- CVE-2018-15567 Cross-site scripting in cmsuno project:cmsuno
- CVE-2018-15566 Cross-site scripting in tp5cms project:tp5cms
- CVE-2018-15565 Missing authorization in simple-cms project:simple cms
- CVE-2018-15564 Cross-site request forgery in simple-cms project:simple cms
- CVE-2018-15563 Subrion CMS Stored Cross-site Scripting (XSS)
- CVE-2018-15562 Cross-site scripting in isweb:isweb
- CVE-2018-15560 PyCryptodome integer overflow vulnerability
- CVE-2018-1556 Cross-site scripting in FileNet P8 Platform
- CVE-2018-15559 Cross-site scripting in xiuno:xiunobbs
- CVE-2018-15557 Privilege escalation in actiontec:web6000q firmware
- CVE-2018-15556 Auth bypass in actiontec:web6000q firmware
- CVE-2018-15555 Hardcoded credentials in actiontec:web6000q firmware
- CVE-2018-15553 Command injection in telus:actiontec t2200h firmware
- CVE-2018-15552 Weak cryptography in theethereumlottery:the ethereum lottery
- CVE-2018-1555 Cross-site scripting in FileNet P8 Platform
- CVE-2018-15546 Cross-site scripting in accusoft:prizmdoc
- CVE-2018-15543 Auth bypass in telegram:telegram
- CVE-2018-15542 Auth bypass in telegram:telegram
- CVE-2018-15540 Path traversal in agentejo:cockpit
- CVE-2018-1554 Cross-site scripting in Maximo Asset Management
- CVE-2018-15539 Cross-site request forgery in agentejo:cockpit
- CVE-2018-15538 Cross-site scripting in agentejo:cockpit
- CVE-2018-15537 File upload in ocsinventory-ng:ocsinventory ng
- CVE-2018-15536 Path traversal in tecrail:responsive filemanager
- CVE-2018-15535 Path traversal in tecrail:responsive filemanager
- CVE-2018-15534 Information disclosure in geutebrueck:re porter 16 firmware
- CVE-2018-15533 Cross-site scripting in geutebrueck:re porter 16 firmware
- CVE-2018-15532 Information disclosure in hp:synaptics touchpad driver
- CVE-2018-15531 JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.
- CVE-2018-15530 Cross-site scripting in xerox:colorqube 8580 firmware
- CVE-2018-1553 Information disclosure in IBM WebSphere Application Server Liberty
- CVE-2018-15529 Command injection in mutiny:mutiny
- CVE-2018-15528 Cross-site scripting in javasystemsolutions:sso plugin
- CVE-2018-15520 Memory corruption in lexmark:cx421 firmware