Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 107 of 163.
- CVE-2018-15314 Cross-site scripting in BIG-IP AFM
- CVE-2018-15313 Cross-site scripting in BIG-IP AFM
- CVE-2018-15312 Cross-site scripting in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)
- CVE-2018-15311 Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)
- CVE-2018-15310 Information disclosure in BIG-IP APM
- CVE-2018-1529 Cross-site scripting in ibm:rational doors next generation
- CVE-2018-1528 Information disclosure in Maximo Asset Management
- CVE-2018-1525 Misconfiguration in i2 Enterprise Insight Analysis
- CVE-2018-1524 Hardcoded credentials in Maximo Asset Management
- CVE-2018-1523 Cross-site scripting in Rational Quality Manager
- CVE-2018-1522 Cross-site scripting in Rational Quality Manager
- CVE-2018-1521 Cross-site scripting in Rational Team Concert
- CVE-2018-15209 Memory corruption in debian:debian linux
- CVE-2018-15208 Auth bypass in bpcbt:smartvista
- CVE-2018-15207 Missing authorization in bpcbt:smartvista
- CVE-2018-15206 Cross-site request forgery in bpcbt:smartvista
- CVE-2018-15203 Cross-site request forgery in ignitedcms:ignitedcms
- CVE-2018-15202 Cross-site request forgery in juunan06:ecommerce
- CVE-2018-15199 Cross-site scripting in auracms:auracms
- CVE-2018-15198 Cross-site request forgery in onethink:onethink
- CVE-2018-15197 Cross-site request forgery in onethink:onethink
- CVE-2018-15193 Cross-site request forgery in gogs:gogs
- CVE-2018-15192 Gogs and Gitea SSRF Vulnerability
- CVE-2018-15191 Cross-site scripting in hotel booking script project:hotel booking script
- CVE-2018-15190 Cross-site scripting in hotel booking script project:hotel booking script
- CVE-2018-15189 Cross-site scripting in advanced real estate script project:advanced real estate script
- CVE-2018-15188 Cross-site scripting in advanced real estate script project:advanced real estate script
- CVE-2018-15187 Cross-site request forgery in advanced real estate script project:advanced real estate script
- CVE-2018-15186 Cross-site request forgery in chartered accountant \: auditor website project
- CVE-2018-15185 Cross-site scripting in naukri clone script project:naukri clone script
- CVE-2018-15184 Cross-site scripting in naukri clone script project:naukri clone script
- CVE-2018-15183 Cross-site scripting in myperfectresume \/ jobhero \/ resume clone script project:myperfectresume \/ jobhero \/ resume clone script
- CVE-2018-15182 Cross-site scripting in car rental script project:car rental script
- CVE-2018-15181 Cross-site scripting in jio:4g hotspot m2s firmware
- CVE-2018-15180 Open redirect in qasymphony:qtest manager
- CVE-2018-1518 Weak cryptography in InfoSphere Information Server
- CVE-2018-15178 Open Redirect
- CVE-2018-15177 Cross-site request forgery in gxlcms:gxlcms
- CVE-2018-15176 Memory corruption in xnview:xnview
- CVE-2018-15175 Memory corruption in xnview:xnview
- CVE-2018-15174 Memory corruption in xnview:xnview
- CVE-2018-15173 Denial of service in nmap:nmap
- CVE-2018-15172 Memory corruption in tp-link:tl-wr840n firmware
- CVE-2018-1517 Denial of service in SDK, Java Technology Edition
- CVE-2018-15169 Cross-site scripting in zohocorp:manageengine applications manager
- CVE-2018-15168 SQL injection in zohocorp:manageengine applications manager
- CVE-2018-15161 Memory corruption in libesedb project:libesedb
- CVE-2018-15160 Memory corruption in libesedb project:libesedb
- CVE-2018-15159 Memory corruption in libesedb project:libesedb
- CVE-2018-15158 Memory corruption in libesedb project:libesedb
- CVE-2018-15157 Memory corruption in libfsclfs project:libfsclfs
- CVE-2018-15156 Command injection in open-emr:openemr
- CVE-2018-15155 Command injection in open-emr:openemr
- CVE-2018-15154 Command injection in open-emr:openemr
- CVE-2018-15153 Command injection in open-emr:openemr
- CVE-2018-15152 Auth bypass in open-emr:openemr
- CVE-2018-15151 SQL injection in open-emr:openemr
- CVE-2018-15150 SQL injection in open-emr:openemr
- CVE-2018-1515 Memory corruption in DB2 for Linux, UNIX and Windows
- CVE-2018-15149 SQL injection in open-emr:openemr
- CVE-2018-15148 SQL injection in open-emr:openemr
- CVE-2018-15147 SQL injection in open-emr:openemr
- CVE-2018-15146 SQL injection in open-emr:openemr
- CVE-2018-15145 SQL injection in open-emr:openemr
- CVE-2018-15144 SQL injection in open-emr:openemr
- CVE-2018-15143 SQL injection in open-emr:openemr
- CVE-2018-15142 Path traversal in open-emr:openemr
- CVE-2018-15141 Path traversal in open-emr:openemr
- CVE-2018-15140 Path traversal in open-emr:openemr
- CVE-2018-1514 Cross-site request forgery in Robotic Process Automation with Automation Anywhere
- CVE-2018-15139 File upload in open-emr:openemr
- CVE-2018-15138 Path traversal in ericssonlg:ipecs nms
- CVE-2018-15137 File upload in cela link:clr-m20 firmware
- CVE-2018-15136 Security feature bypass in titanhq:spamtitan
- CVE-2018-15133 Laravel Deserialization of Untrusted Data
- CVE-2018-15132 Security feature bypass in netapp:storage automation store
- CVE-2018-15131 Information disclosure in synacor:zimbra collaboration suite
- CVE-2018-15130 Cross-site scripting in thinksaas:thinksaas
- CVE-2018-1513 Cross-site scripting in Sterling B2B Integrator
- CVE-2018-15129 Cross-site scripting in thinksaas:thinksaas
- CVE-2018-15128 Memory corruption in polycom:group series
- CVE-2018-15127 Memory corruption in LibVNC
- CVE-2018-15126 Use after free in LibVNC
- CVE-2018-15125 Information disclosure in Zipato Zipabox Smart Home Controller
- CVE-2018-15124 Weak cryptography in Zipato Zipabox Smart Home Controller
- CVE-2018-15123 Misconfiguration in Zipato Zipabox Smart Home Controller
- CVE-2018-15122 Code injection in telerik:justassembly
- CVE-2018-15121 Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery
- CVE-2018-15120 Memory corruption in canonical:ubuntu linux
- CVE-2018-1509 Security feature bypass in Security Guardium
- CVE-2018-1507 Cross-site scripting in Rational DOORS Next Generation
- CVE-2018-1505 Information disclosure in i2 Enterprise Insight Analysis
- CVE-2018-1504 Other in i2 Enterprise Insight Analysis
- CVE-2018-1503 Denial of service in WebSphere MQ
- CVE-2018-1502 Cross-site scripting in Content Manager
- CVE-2018-1501 Missing authorization in Security Guardium
- CVE-2018-15007 Command injection in skydevices:sky elite 6.0l\+ firmware
- CVE-2018-15006 Missing authorization in zteusa:zte zmax champ firmware
- CVE-2018-15005 Missing authorization in zteusa:zte zmax champ firmware
- CVE-2018-15004 Missing authorization in coolpad:canvas firmware