Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 110 of 163.
- CVE-2018-14791 Privilege escalation in DeltaV DCS
- CVE-2018-14790 Memory corruption in FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace
- CVE-2018-1479 Cross-site request forgery in BigFix Platform
- CVE-2018-14789 Privilege escalation in IntelliSpace Cardiovascular (ISCV) products
- CVE-2018-14788 Memory corruption in Alpha5 Smart Loader
- CVE-2018-14787 Privilege escalation in IntelliSpace Cardiovascular (ISCV) products
- CVE-2018-14786 Auth bypass in Alaris GS, Alaris GH, Alaris CC, and Alaris TIVA
- CVE-2018-14785 Information disclosure in NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.
- CVE-2018-14784 Cross-site scripting in NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.
- CVE-2018-14783 Cross-site request forgery in NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.
- CVE-2018-14782 Auth bypass in NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.
- CVE-2018-14781 Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Authentication Bypass by Capture-replay
- CVE-2018-14780 Memory corruption in yubico:piv manager
- CVE-2018-1478 Other in BigFix Platform
- CVE-2018-14779 Memory corruption in yubico:piv manager
- CVE-2018-14777 Cross-site scripting in dleviet:datalife engine
- CVE-2018-14776 Cross-site scripting in clickstudios:passwordstate
- CVE-2018-14775 Denial of service in openbsd:openbsd
- CVE-2018-14774 Symfony Host Header Injection
- CVE-2018-14773 Symfony HTTP Foundation web cache poisoning
- CVE-2018-14772 Command injection in pydio:pydio
- CVE-2018-14771 Code injection in vivotek:camera
- CVE-2018-14770 Other in vivotek:camera
- CVE-2018-14769 Cross-site request forgery in vivotek:camera
- CVE-2018-14768 Other in vivotek:camera
- CVE-2018-14767 Memory corruption in debian:debian linux
- CVE-2018-1476 Information disclosure in BigFix Platform
- CVE-2018-1475 Auth bypass in BigFix Platform
- CVE-2018-14749 Memory corruption in QNAP QTS
- CVE-2018-14748 Missing authorization in QNAP QTS
- CVE-2018-14747 Null dereference in QNAP QTS
- CVE-2018-14746 Command injection in QNAP QTS
- CVE-2018-14745 Memory corruption in samsung:galaxy s6 firmware
- CVE-2018-14744 Use after free in pbc project:pbc
- CVE-2018-14743 Memory corruption in pbc project:pbc
- CVE-2018-14742 Memory corruption in pbc project:pbc
- CVE-2018-14741 Memory corruption in pbc project:pbc
- CVE-2018-14740 Memory corruption in pbc project:pbc
- CVE-2018-1474 Other in BigFix Platform
- CVE-2018-14739 Memory corruption in pbc project:pbc
- CVE-2018-14738 Memory corruption in pbc project:pbc
- CVE-2018-14737 Null dereference in pbc project:pbc
- CVE-2018-14736 Memory corruption in pbc project:pbc
- CVE-2018-14735 Information disclosure in hitachi:command suite
- CVE-2018-14734 Use after free in canonical:ubuntu linux
- CVE-2018-14733 Denial of service in odoo:odoo
- CVE-2018-14732 Missing Origin Validation in webpack-dev-server
- CVE-2018-14731 Missing Origin Validation in parcel-bundler
- CVE-2018-14730 Missing Origin Validation in browserify-hmr
- CVE-2018-1473 Cross-site scripting in BigFix Platform
- CVE-2018-14729 Code injection in comsenz:discuz\!
- CVE-2018-14728 Server-side request forgery in tecrail:responsive filemanager
- CVE-2018-14724 Cross-site scripting in mybb:ban list
- CVE-2018-14722 Code injection in btrfsmaintenance project:btrfsmaintenance
- CVE-2018-14721 Server-Side Request Forgery (SSRF) in jackson-databind
- CVE-2018-14720 XML External Entity Reference (XXE) in jackson-databind
- CVE-2018-14719 Arbitrary Code Execution in jackson-databind
- CVE-2018-14718 Arbitrary Code Execution in jackson-databind
- CVE-2018-14716 SEOmatic plugin for Craft CMS SSTI Vulnerability
- CVE-2018-14715 Weak cryptography in cryptogs:cryptogs
- CVE-2018-14714 Command injection in asus:rt-ac3200 firmware
- CVE-2018-14713 Memory corruption in asus:rt-ac3200 firmware
- CVE-2018-14712 Memory corruption in asus:rt-ac3200 firmware
- CVE-2018-14711 Cross-site request forgery in asus:rt-ac3200 firmware
- CVE-2018-14710 Cross-site scripting in asus:rt-ac3200 firmware
- CVE-2018-14709 Auth bypass in drobo:5n2 firmware
- CVE-2018-14708 Weak cryptography in drobo:5n2 firmware
- CVE-2018-14707 Path traversal in drobo:5n2 firmware
- CVE-2018-14706 Command injection in drobo:5n2 firmware
- CVE-2018-14705 Lack of Authentication/Authorization on Administrative Web Pages
- CVE-2018-14704 Cross-site scripting in drobo:5n2 firmware
- CVE-2018-14703 Missing authorization in drobo:5n2 firmware
- CVE-2018-14702 Missing authorization in drobo:5n2 firmware
- CVE-2018-14701 Command injection in drobo:5n2 firmware
- CVE-2018-14700 Missing authorization in drobo:5n2 firmware
- CVE-2018-1470 Information disclosure in Sterling File Gateway
- CVE-2018-14699 Command injection in drobo:5n2 firmware
- CVE-2018-14698 Cross-site scripting in drobo:5n2 firmware
- CVE-2018-14697 Cross-site scripting in drobo:5n2 firmware
- CVE-2018-14696 Missing authorization in drobo:5n2 firmware
- CVE-2018-14695 Missing authorization in drobo:5n2 firmware
- CVE-2018-14691 Cross-site scripting in subsonic:subsonic
- CVE-2018-14690 Cross-site scripting in subsonic:subsonic
- CVE-2018-1469 Command injection in API Connect
- CVE-2018-14689 Cross-site scripting in subsonic:subsonic
- CVE-2018-14688 Cross-site scripting in subsonic:subsonic
- CVE-2018-14686 Cross-site scripting in xycms project:xycms
- CVE-2018-14685 Path traversal in gxlcms:gxlcms
- CVE-2018-14683 Cross-site scripting in paessler:prtg network monitor
- CVE-2018-14682 Memory corruption in cabextract:libmspack
- CVE-2018-14681 Memory corruption in cabextract:libmspack
- CVE-2018-14680 Other in cabextract:libmspack
- CVE-2018-1468 Information disclosure in API Connect
- CVE-2018-14679 Memory corruption in cabextract:libmspack
- CVE-2018-14678 Memory corruption in canonical:ubuntu linux
- CVE-2018-14672 Path traversal in ClickHouse
- CVE-2018-14671 Code injection in ClickHouse
- CVE-2018-14670 Misconfiguration in ClickHouse
- CVE-2018-1467 Information disclosure in Storwize V7000 Unified (2073)
- CVE-2018-14669 Information disclosure in ClickHouse