# Vulnerabilities published in 2018 - [CVE-2018-1552](https://insights.sbomify.com/CVE-2018-1552/): File upload in Robotic Process Automation with Automation Anywhere (medium 5.5) - [CVE-2018-15519](https://insights.sbomify.com/CVE-2018-15519/): Memory corruption in lexmark:6500 firmware (critical 9.8) - [CVE-2018-15518](https://insights.sbomify.com/CVE-2018-15518/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2018-15517](https://insights.sbomify.com/CVE-2018-15517/): Server-side request forgery in dlink:central wifimanager (high 8.6) - [CVE-2018-15516](https://insights.sbomify.com/CVE-2018-15516/): Server-side request forgery in dlink:central wifimanager (medium 5.8) - [CVE-2018-15515](https://insights.sbomify.com/CVE-2018-15515/): Privilege escalation in dlink:central wifimanager (high 7.8) - [CVE-2018-15514](https://insights.sbomify.com/CVE-2018-15514/): Deserialization in docker:docker (high 8.8) - [CVE-2018-15513](https://insights.sbomify.com/CVE-2018-15513/): Missing authorization in totemo:totemomail (medium 5.3) - [CVE-2018-15512](https://insights.sbomify.com/CVE-2018-15512/): Cross-site scripting in totemo:totemomail (medium 6.1) - [CVE-2018-15511](https://insights.sbomify.com/CVE-2018-15511/): Cross-site scripting in totemo:totemomail (medium 6.1) - [CVE-2018-15510](https://insights.sbomify.com/CVE-2018-15510/): Cross-site scripting in totemo:totemomail (medium 6.1) - [CVE-2018-1551](https://insights.sbomify.com/CVE-2018-1551/): Privilege escalation in WebSphere MQ (low 3.1) - [CVE-2018-15509](https://insights.sbomify.com/CVE-2018-15509/): Misconfiguration in five9:agent desktop plus (critical 9.8) - [CVE-2018-15508](https://insights.sbomify.com/CVE-2018-15508/): Denial of service in five9:agent desktop plus (high 7.5) - [CVE-2018-15506](https://insights.sbomify.com/CVE-2018-15506/): XML external entity in bubblesoftapps:bubbleupnp (critical 9.8) - [CVE-2018-15505](https://insights.sbomify.com/CVE-2018-15505/): Null dereference in embedthis:appweb (high 7.5) - [CVE-2018-15504](https://insights.sbomify.com/CVE-2018-15504/): Null dereference in embedthis:appweb (high 7.5) - [CVE-2018-15503](https://insights.sbomify.com/CVE-2018-15503/): Deserialization in swoole:swoole (high 7.5) - [CVE-2018-15502](https://insights.sbomify.com/CVE-2018-15502/): Information disclosure in lwolf:loading docs (high 7.5) - [CVE-2018-15501](https://insights.sbomify.com/CVE-2018-15501/): Memory corruption in debian:debian linux (high 7.5) - [CVE-2018-1550](https://insights.sbomify.com/CVE-2018-1550/): Privilege escalation in Spectrum Protect (medium 6.2) - [CVE-2018-15499](https://insights.sbomify.com/CVE-2018-15499/): Race condition in gearsoftware:gearaspiwdm (medium 4.7) - [CVE-2018-15498](https://insights.sbomify.com/CVE-2018-15498/): Auth bypass in ysoft:safeq server client (high 8.1) - [CVE-2018-15497](https://insights.sbomify.com/CVE-2018-15497/): Memory corruption in mitel:mivoice 5330e firmware (critical 9.8) - [CVE-2018-15495](https://insights.sbomify.com/CVE-2018-15495/): Path traversal in tecrail:responsive filemanager (high 7.5) - [CVE-2018-15494](https://insights.sbomify.com/CVE-2018-15494/): dojox vulnerable to unescaped string injection (critical 9.8) - [CVE-2018-15493](https://insights.sbomify.com/CVE-2018-15493/): vBulletin 5.4.3 has an Open Redirect. (medium 6.1) - [CVE-2018-15492](https://insights.sbomify.com/CVE-2018-15492/): Denial of service in gemalto:sentinel license manager (high 7.5) - [CVE-2018-15491](https://insights.sbomify.com/CVE-2018-15491/): Misconfiguration in zemana:antilogger (high 7.5) - [CVE-2018-15490](https://insights.sbomify.com/CVE-2018-15490/): Path traversal in expressvpn:expressvpn (high 7.1) - [CVE-2018-1549](https://insights.sbomify.com/CVE-2018-1549/): Other in Rational Quality Manager (medium 5.4) - [CVE-2018-15486](https://insights.sbomify.com/CVE-2018-15486/): Path traversal in kone:group controller firmware (critical 9.1) - [CVE-2018-15485](https://insights.sbomify.com/CVE-2018-15485/): Auth bypass in kone:group controller firmware (critical 9.1) - [CVE-2018-15484](https://insights.sbomify.com/CVE-2018-15484/): Command injection in kone:group controller firmware (critical 9.8) - [CVE-2018-15483](https://insights.sbomify.com/CVE-2018-15483/): Denial of service in kone:group controller firmware (high 7.5) - [CVE-2018-15482](https://insights.sbomify.com/CVE-2018-15482/): Missing authorization in google:android (critical 9.8) - [CVE-2018-15481](https://insights.sbomify.com/CVE-2018-15481/): Command injection in ucopia:wireless appliance firmware (high 8.8) - [CVE-2018-15480](https://insights.sbomify.com/CVE-2018-15480/): Missing authorization in mystrom:wifi bulb firmware (high 8.8) - [CVE-2018-1548](https://insights.sbomify.com/CVE-2018-1548/): Information disclosure in API Connect (medium 4.3) - [CVE-2018-15479](https://insights.sbomify.com/CVE-2018-15479/): Auth bypass in mystrom:wifi bulb firmware (medium 6.5) - [CVE-2018-15478](https://insights.sbomify.com/CVE-2018-15478/): Auth bypass in mystrom:wifi bulb firmware (high 8.1) - [CVE-2018-15477](https://insights.sbomify.com/CVE-2018-15477/): Command injection in mystrom:wifi switch firmware (critical 9.8) - [CVE-2018-15476](https://insights.sbomify.com/CVE-2018-15476/): Security feature bypass in mystrom:wifi bulb firmware (high 8.1) - [CVE-2018-15474](https://insights.sbomify.com/CVE-2018-15474/): Code injection in dokuwiki:dokuwiki (critical 9.6) - [CVE-2018-15473](https://insights.sbomify.com/CVE-2018-15473/): Information disclosure in canonical:ubuntu linux (medium 5.9) - [CVE-2018-15472](https://insights.sbomify.com/CVE-2018-15472/): Denial of service in gitlab:gitlab (high 7.5) - [CVE-2018-15471](https://insights.sbomify.com/CVE-2018-15471/): Memory corruption in canonical:ubuntu linux (high 7.8) - [CVE-2018-15470](https://insights.sbomify.com/CVE-2018-15470/): Denial of service in xen:xen (medium 6.5) - [CVE-2018-1547](https://insights.sbomify.com/CVE-2018-1547/): Code injection in Robotic Process Automation with Automation Anywhere (high 8.0) - [CVE-2018-15469](https://insights.sbomify.com/CVE-2018-15469/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2018-15468](https://insights.sbomify.com/CVE-2018-15468/): Denial of service in xen:xen (medium 6.0) - [CVE-2018-15467](https://insights.sbomify.com/CVE-2018-15467/): Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability (medium 6.1) - [CVE-2018-15466](https://insights.sbomify.com/CVE-2018-15466/): Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability (medium 5.3) - [CVE-2018-15465](https://insights.sbomify.com/CVE-2018-15465/): Cisco Adaptive Security Appliance Software Privilege Escalation Vulnerability (high 8.1) - [CVE-2018-15464](https://insights.sbomify.com/CVE-2018-15464/): Cisco ASR 900 Series Aggregation Services Router Software Denial of Service Vulnerability (medium 5.8) - [CVE-2018-15463](https://insights.sbomify.com/CVE-2018-15463/): Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities (medium 6.1) - [CVE-2018-15462](https://insights.sbomify.com/CVE-2018-15462/): Cisco Firepower Threat Defense Software TCP Ingress Handler Denial of Service Vulnerability (high 8.6) - [CVE-2018-15461](https://insights.sbomify.com/CVE-2018-15461/): Cisco Webex Business Suite Cross-Site Scripting Vulnerability (medium 6.1) - [CVE-2018-15460](https://insights.sbomify.com/CVE-2018-15460/): Cisco Email Security Appliance URL Filtering Denial of Service Vulnerability (high 8.6) - [CVE-2018-1546](https://insights.sbomify.com/CVE-2018-1546/): IBM API Connect information disclosure (medium 5.9) - [CVE-2018-15459](https://insights.sbomify.com/CVE-2018-15459/): Cisco Identity Services Engine Privilege Escalation Vulnerability (medium 6.5) - [CVE-2018-15458](https://insights.sbomify.com/CVE-2018-15458/): Cisco Firepower Management Center Disk Utilization Denial of Service Vulnerability (medium 5.3) - [CVE-2018-15457](https://insights.sbomify.com/CVE-2018-15457/): Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (medium 6.1) - [CVE-2018-15456](https://insights.sbomify.com/CVE-2018-15456/): Cisco Identity Services Engine Password Recovery Vulnerability (medium 4.3) - [CVE-2018-15455](https://insights.sbomify.com/CVE-2018-15455/): Cisco Identity Services Engine Logging Cross-Site Scripting Vulnerability (medium 6.1) - [CVE-2018-15454](https://insights.sbomify.com/CVE-2018-15454/): Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerability (high 8.6) - [CVE-2018-15453](https://insights.sbomify.com/CVE-2018-15453/): Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability (high 8.6) - [CVE-2018-15452](https://insights.sbomify.com/CVE-2018-15452/): Cisco Advanced Malware Protection for Endpoints on Windows DLL Preloading Vulnerability (medium 5.5) - [CVE-2018-15451](https://insights.sbomify.com/CVE-2018-15451/): Cisco Prime Service Catalog Cross-Site Scripting Vulnerability (medium 5.4) - [CVE-2018-15450](https://insights.sbomify.com/CVE-2018-15450/): Cisco Prime Collaboration Assurance File Overwrite Vulnerability (medium 6.5) - [CVE-2018-1545](https://insights.sbomify.com/CVE-2018-1545/): Weak cryptography in Spectrum Protect (medium 5.9) - [CVE-2018-15449](https://insights.sbomify.com/CVE-2018-15449/): Cisco Video Surveillance Media Server Denial of Service Vulnerability (medium 4.3) - [CVE-2018-15448](https://insights.sbomify.com/CVE-2018-15448/): Cisco Registered Envelope Service Information Disclosure Vulnerability (medium 5.3) - [CVE-2018-15447](https://insights.sbomify.com/CVE-2018-15447/): Cisco Integrated Management Controller Supervisor SQL Injection Vulnerability (medium 6.5) - [CVE-2018-15446](https://insights.sbomify.com/CVE-2018-15446/): Cisco Meeting Server Information Disclosure Vulnerability (medium 5.3) - [CVE-2018-15445](https://insights.sbomify.com/CVE-2018-15445/): Cisco Energy Management Suite Cross-Site Request Forgery Vulnerability (medium 6.3) - [CVE-2018-15444](https://insights.sbomify.com/CVE-2018-15444/): Cisco Energy Management Suite XML External Entity Vulnerability (medium 6.3) - [CVE-2018-15443](https://insights.sbomify.com/CVE-2018-15443/): Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass Vulnerability (medium 5.8) - [CVE-2018-15442](https://insights.sbomify.com/CVE-2018-15442/): Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability (high 7.8) - [CVE-2018-15441](https://insights.sbomify.com/CVE-2018-15441/): Cisco Prime License Manager SQL Injection Vulnerability (critical 9.4) - [CVE-2018-15440](https://insights.sbomify.com/CVE-2018-15440/): Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities (medium 6.1) - [CVE-2018-1544](https://insights.sbomify.com/CVE-2018-1544/): Memory corruption in DB2 for Linux, UNIX and Windows (high 8.4) - [CVE-2018-15439](https://insights.sbomify.com/CVE-2018-15439/): Cisco Small Business Switches Privileged Access Vulnerability (critical 9.8) - [CVE-2018-15438](https://insights.sbomify.com/CVE-2018-15438/): Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability (medium 6.5) - [CVE-2018-15437](https://insights.sbomify.com/CVE-2018-15437/): Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability (medium 5.5) - [CVE-2018-15436](https://insights.sbomify.com/CVE-2018-15436/): Cisco Webex Centers Cross-Site Scripting Vulnerability (medium 6.1) - [CVE-2018-15435](https://insights.sbomify.com/CVE-2018-15435/): Cisco SocialMiner Cross-Site Scripting Vulnerability (medium 6.1) - [CVE-2018-15434](https://insights.sbomify.com/CVE-2018-15434/): Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability (medium 6.1) - [CVE-2018-15433](https://insights.sbomify.com/CVE-2018-15433/): Cisco Prime Infrastructure Information Disclosure Vulnerability (medium 4.3) - [CVE-2018-15432](https://insights.sbomify.com/CVE-2018-15432/): Cisco Prime Infrastructure Information Disclosure Vulnerability (medium 4.3) - [CVE-2018-15431](https://insights.sbomify.com/CVE-2018-15431/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.3) - [CVE-2018-15430](https://insights.sbomify.com/CVE-2018-15430/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Remote Code Execution Vulnerability (high 7.2) - [CVE-2018-1543](https://insights.sbomify.com/CVE-2018-1543/): Weak cryptography in MQ (medium 5.9) - [CVE-2018-15429](https://insights.sbomify.com/CVE-2018-15429/): Cisco HyperFlex HX Data Platform Software Unauthorized Directory Access Vulnerability (medium 5.3) - [CVE-2018-15428](https://insights.sbomify.com/CVE-2018-15428/): Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability (medium 6.8) - [CVE-2018-15427](https://insights.sbomify.com/CVE-2018-15427/): Cisco Video Surveillance Manager Appliance Default Password Vulnerability (critical 9.8) - [CVE-2018-15426](https://insights.sbomify.com/CVE-2018-15426/): Cisco Unity Connection Stored Cross-Site Scripting Vulnerability (medium 4.8) - [CVE-2018-15425](https://insights.sbomify.com/CVE-2018-15425/): Multiple Vulnerabilities in Cisco Identity Services Engine (medium 4.7) - [CVE-2018-15424](https://insights.sbomify.com/CVE-2018-15424/): Multiple Vulnerabilities in Cisco Identity Services Engine (medium 4.7) - [CVE-2018-15423](https://insights.sbomify.com/CVE-2018-15423/): Cisco HyperFlex UI Clickjacking Vulnerability (medium 4.7) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/105/