# Vulnerabilities published in 2018


- [CVE-2018-14791](https://insights.sbomify.com/CVE-2018-14791/): Privilege escalation in DeltaV DCS (high 7.8)
- [CVE-2018-14790](https://insights.sbomify.com/CVE-2018-14790/): Memory corruption in FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace (critical 9.8)
- [CVE-2018-1479](https://insights.sbomify.com/CVE-2018-1479/): Cross-site request forgery in BigFix Platform (high 8.8)
- [CVE-2018-14789](https://insights.sbomify.com/CVE-2018-14789/): Privilege escalation in IntelliSpace Cardiovascular (ISCV) products (medium 6.7)
- [CVE-2018-14788](https://insights.sbomify.com/CVE-2018-14788/): Memory corruption in Alpha5 Smart Loader (medium 5.3)
- [CVE-2018-14787](https://insights.sbomify.com/CVE-2018-14787/): Privilege escalation in IntelliSpace Cardiovascular (ISCV) products (high 7.8)
- [CVE-2018-14786](https://insights.sbomify.com/CVE-2018-14786/): Auth bypass in Alaris GS, Alaris GH, Alaris CC, and Alaris TIVA (critical 9.4)
- [CVE-2018-14785](https://insights.sbomify.com/CVE-2018-14785/): Information disclosure in NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. (high 7.5)
- [CVE-2018-14784](https://insights.sbomify.com/CVE-2018-14784/): Cross-site scripting in NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. (medium 6.1)
- [CVE-2018-14783](https://insights.sbomify.com/CVE-2018-14783/): Cross-site request forgery in NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. (high 8.8)
- [CVE-2018-14782](https://insights.sbomify.com/CVE-2018-14782/): Auth bypass in NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. (high 7.5)
- [CVE-2018-14781](https://insights.sbomify.com/CVE-2018-14781/): Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Authentication Bypass by Capture-replay (medium 5.3)
- [CVE-2018-14780](https://insights.sbomify.com/CVE-2018-14780/): Memory corruption in yubico:piv manager (medium 4.6)
- [CVE-2018-1478](https://insights.sbomify.com/CVE-2018-1478/): Other in BigFix Platform (medium 6.1)
- [CVE-2018-14779](https://insights.sbomify.com/CVE-2018-14779/): Memory corruption in yubico:piv manager (medium 6.8)
- [CVE-2018-14777](https://insights.sbomify.com/CVE-2018-14777/): Cross-site scripting in dleviet:datalife engine (medium 5.4)
- [CVE-2018-14776](https://insights.sbomify.com/CVE-2018-14776/): Cross-site scripting in clickstudios:passwordstate (medium 5.4)
- [CVE-2018-14775](https://insights.sbomify.com/CVE-2018-14775/): Denial of service in openbsd:openbsd (medium 5.5)
- [CVE-2018-14774](https://insights.sbomify.com/CVE-2018-14774/): Symfony Host Header Injection (high 7.2)
- [CVE-2018-14773](https://insights.sbomify.com/CVE-2018-14773/): Symfony HTTP Foundation web cache poisoning (medium 6.5)
- [CVE-2018-14772](https://insights.sbomify.com/CVE-2018-14772/): Command injection in pydio:pydio (high 7.2)
- [CVE-2018-14771](https://insights.sbomify.com/CVE-2018-14771/): Code injection in vivotek:camera (high 8.8)
- [CVE-2018-14770](https://insights.sbomify.com/CVE-2018-14770/): Other in vivotek:camera (high 8.8)
- [CVE-2018-14769](https://insights.sbomify.com/CVE-2018-14769/): Cross-site request forgery in vivotek:camera (high 8.8)
- [CVE-2018-14768](https://insights.sbomify.com/CVE-2018-14768/): Other in vivotek:camera (high 8.8)
- [CVE-2018-14767](https://insights.sbomify.com/CVE-2018-14767/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2018-1476](https://insights.sbomify.com/CVE-2018-1476/): Information disclosure in BigFix Platform (medium 5.3)
- [CVE-2018-1475](https://insights.sbomify.com/CVE-2018-1475/): Auth bypass in BigFix Platform (critical 9.8)
- [CVE-2018-14749](https://insights.sbomify.com/CVE-2018-14749/): Memory corruption in QNAP QTS (critical 9.8)
- [CVE-2018-14748](https://insights.sbomify.com/CVE-2018-14748/): Missing authorization in QNAP QTS (high 7.5)
- [CVE-2018-14747](https://insights.sbomify.com/CVE-2018-14747/): Null dereference in QNAP QTS (high 7.5)
- [CVE-2018-14746](https://insights.sbomify.com/CVE-2018-14746/): Command injection in QNAP QTS (critical 9.8)
- [CVE-2018-14745](https://insights.sbomify.com/CVE-2018-14745/): Memory corruption in samsung:galaxy s6 firmware (high 8.8)
- [CVE-2018-14744](https://insights.sbomify.com/CVE-2018-14744/): Use after free in pbc project:pbc (critical 9.8)
- [CVE-2018-14743](https://insights.sbomify.com/CVE-2018-14743/): Memory corruption in pbc project:pbc (high 7.5)
- [CVE-2018-14742](https://insights.sbomify.com/CVE-2018-14742/): Memory corruption in pbc project:pbc (high 7.5)
- [CVE-2018-14741](https://insights.sbomify.com/CVE-2018-14741/): Memory corruption in pbc project:pbc (high 7.5)
- [CVE-2018-14740](https://insights.sbomify.com/CVE-2018-14740/): Memory corruption in pbc project:pbc (high 7.5)
- [CVE-2018-1474](https://insights.sbomify.com/CVE-2018-1474/): Other in BigFix Platform (medium 6.1)
- [CVE-2018-14739](https://insights.sbomify.com/CVE-2018-14739/): Memory corruption in pbc project:pbc (high 7.5)
- [CVE-2018-14738](https://insights.sbomify.com/CVE-2018-14738/): Memory corruption in pbc project:pbc (high 7.5)
- [CVE-2018-14737](https://insights.sbomify.com/CVE-2018-14737/): Null dereference in pbc project:pbc (high 7.5)
- [CVE-2018-14736](https://insights.sbomify.com/CVE-2018-14736/): Memory corruption in pbc project:pbc (high 7.5)
- [CVE-2018-14735](https://insights.sbomify.com/CVE-2018-14735/): Information disclosure in hitachi:command suite (high 7.5)
- [CVE-2018-14734](https://insights.sbomify.com/CVE-2018-14734/): Use after free in canonical:ubuntu linux (high 7.8)
- [CVE-2018-14733](https://insights.sbomify.com/CVE-2018-14733/): Denial of service in odoo:odoo (high 7.5)
- [CVE-2018-14732](https://insights.sbomify.com/CVE-2018-14732/): Missing Origin Validation in webpack-dev-server (high 7.5)
- [CVE-2018-14731](https://insights.sbomify.com/CVE-2018-14731/): Missing Origin Validation in parcel-bundler (high 7.5)
- [CVE-2018-14730](https://insights.sbomify.com/CVE-2018-14730/): Missing Origin Validation in browserify-hmr (high 7.5)
- [CVE-2018-1473](https://insights.sbomify.com/CVE-2018-1473/): Cross-site scripting in BigFix Platform (medium 6.1)
- [CVE-2018-14729](https://insights.sbomify.com/CVE-2018-14729/): Code injection in comsenz:discuz\! (high 8.8)
- [CVE-2018-14728](https://insights.sbomify.com/CVE-2018-14728/): Server-side request forgery in tecrail:responsive filemanager (critical 9.8)
- [CVE-2018-14724](https://insights.sbomify.com/CVE-2018-14724/): Cross-site scripting in mybb:ban list (medium 5.4)
- [CVE-2018-14722](https://insights.sbomify.com/CVE-2018-14722/): Code injection in btrfsmaintenance project:btrfsmaintenance (high 8.1)
- [CVE-2018-14721](https://insights.sbomify.com/CVE-2018-14721/): Server-Side Request Forgery (SSRF) in jackson-databind (critical 10.0)
- [CVE-2018-14720](https://insights.sbomify.com/CVE-2018-14720/): XML External Entity Reference (XXE) in jackson-databind (critical 9.8)
- [CVE-2018-14719](https://insights.sbomify.com/CVE-2018-14719/): Arbitrary Code Execution in jackson-databind (critical 9.8)
- [CVE-2018-14718](https://insights.sbomify.com/CVE-2018-14718/): Arbitrary Code Execution in jackson-databind (critical 9.8)
- [CVE-2018-14716](https://insights.sbomify.com/CVE-2018-14716/): SEOmatic plugin for Craft CMS SSTI Vulnerability (high 7.5)
- [CVE-2018-14715](https://insights.sbomify.com/CVE-2018-14715/): Weak cryptography in cryptogs:cryptogs (high 7.5)
- [CVE-2018-14714](https://insights.sbomify.com/CVE-2018-14714/): Command injection in asus:rt-ac3200 firmware (critical 9.8)
- [CVE-2018-14713](https://insights.sbomify.com/CVE-2018-14713/): Memory corruption in asus:rt-ac3200 firmware (high 8.1)
- [CVE-2018-14712](https://insights.sbomify.com/CVE-2018-14712/): Memory corruption in asus:rt-ac3200 firmware (medium 6.5)
- [CVE-2018-14711](https://insights.sbomify.com/CVE-2018-14711/): Cross-site request forgery in asus:rt-ac3200 firmware (medium 6.5)
- [CVE-2018-14710](https://insights.sbomify.com/CVE-2018-14710/): Cross-site scripting in asus:rt-ac3200 firmware (medium 6.1)
- [CVE-2018-14709](https://insights.sbomify.com/CVE-2018-14709/): Auth bypass in drobo:5n2 firmware (critical 9.8)
- [CVE-2018-14708](https://insights.sbomify.com/CVE-2018-14708/): Weak cryptography in drobo:5n2 firmware (critical 9.8)
- [CVE-2018-14707](https://insights.sbomify.com/CVE-2018-14707/): Path traversal in drobo:5n2 firmware (high 7.5)
- [CVE-2018-14706](https://insights.sbomify.com/CVE-2018-14706/): Command injection in drobo:5n2 firmware (critical 9.8)
- [CVE-2018-14705](https://insights.sbomify.com/CVE-2018-14705/): Lack of Authentication/Authorization on Administrative Web Pages (critical 9.8)
- [CVE-2018-14704](https://insights.sbomify.com/CVE-2018-14704/): Cross-site scripting in drobo:5n2 firmware (medium 6.1)
- [CVE-2018-14703](https://insights.sbomify.com/CVE-2018-14703/): Missing authorization in drobo:5n2 firmware (critical 9.8)
- [CVE-2018-14702](https://insights.sbomify.com/CVE-2018-14702/): Missing authorization in drobo:5n2 firmware (high 7.5)
- [CVE-2018-14701](https://insights.sbomify.com/CVE-2018-14701/): Command injection in drobo:5n2 firmware (critical 9.8)
- [CVE-2018-14700](https://insights.sbomify.com/CVE-2018-14700/): Missing authorization in drobo:5n2 firmware (high 7.5)
- [CVE-2018-1470](https://insights.sbomify.com/CVE-2018-1470/): Information disclosure in Sterling File Gateway (medium 4.3)
- [CVE-2018-14699](https://insights.sbomify.com/CVE-2018-14699/): Command injection in drobo:5n2 firmware (critical 9.8)
- [CVE-2018-14698](https://insights.sbomify.com/CVE-2018-14698/): Cross-site scripting in drobo:5n2 firmware (medium 6.1)
- [CVE-2018-14697](https://insights.sbomify.com/CVE-2018-14697/): Cross-site scripting in drobo:5n2 firmware (medium 6.1)
- [CVE-2018-14696](https://insights.sbomify.com/CVE-2018-14696/): Missing authorization in drobo:5n2 firmware (high 7.5)
- [CVE-2018-14695](https://insights.sbomify.com/CVE-2018-14695/): Missing authorization in drobo:5n2 firmware (high 7.5)
- [CVE-2018-14691](https://insights.sbomify.com/CVE-2018-14691/): Cross-site scripting in subsonic:subsonic (medium 6.1)
- [CVE-2018-14690](https://insights.sbomify.com/CVE-2018-14690/): Cross-site scripting in subsonic:subsonic (medium 6.1)
- [CVE-2018-1469](https://insights.sbomify.com/CVE-2018-1469/): Command injection in API Connect (critical 9.8)
- [CVE-2018-14689](https://insights.sbomify.com/CVE-2018-14689/): Cross-site scripting in subsonic:subsonic (medium 6.1)
- [CVE-2018-14688](https://insights.sbomify.com/CVE-2018-14688/): Cross-site scripting in subsonic:subsonic (medium 6.1)
- [CVE-2018-14686](https://insights.sbomify.com/CVE-2018-14686/): Cross-site scripting in xycms project:xycms (medium 6.1)
- [CVE-2018-14685](https://insights.sbomify.com/CVE-2018-14685/): Path traversal in gxlcms:gxlcms (critical 9.8)
- [CVE-2018-14683](https://insights.sbomify.com/CVE-2018-14683/): Cross-site scripting in paessler:prtg network monitor (medium 6.1)
- [CVE-2018-14682](https://insights.sbomify.com/CVE-2018-14682/): Memory corruption in cabextract:libmspack (high 8.8)
- [CVE-2018-14681](https://insights.sbomify.com/CVE-2018-14681/): Memory corruption in cabextract:libmspack (high 8.8)
- [CVE-2018-14680](https://insights.sbomify.com/CVE-2018-14680/): Other in cabextract:libmspack (medium 6.5)
- [CVE-2018-1468](https://insights.sbomify.com/CVE-2018-1468/): Information disclosure in API Connect (medium 4.3)
- [CVE-2018-14679](https://insights.sbomify.com/CVE-2018-14679/): Memory corruption in cabextract:libmspack (medium 6.5)
- [CVE-2018-14678](https://insights.sbomify.com/CVE-2018-14678/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2018-14672](https://insights.sbomify.com/CVE-2018-14672/): Path traversal in ClickHouse (medium 5.3)
- [CVE-2018-14671](https://insights.sbomify.com/CVE-2018-14671/): Code injection in ClickHouse (critical 9.8)
- [CVE-2018-14670](https://insights.sbomify.com/CVE-2018-14670/): Misconfiguration in ClickHouse (critical 9.8)
- [CVE-2018-1467](https://insights.sbomify.com/CVE-2018-1467/): Information disclosure in Storwize V7000 Unified (2073) (medium 5.3)
- [CVE-2018-14669](https://insights.sbomify.com/CVE-2018-14669/): Information disclosure in ClickHouse (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/110/