Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 111 of 163.
- CVE-2018-14668 Cross-site request forgery in ClickHouse
- CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection
- CVE-2018-14666 Missing authorization in Satellite
- CVE-2018-14665 Privilege escalation in canonical:ubuntu linux
- CVE-2018-14664 Cross-site scripting in foreman
- CVE-2018-14663 Security feature bypass in dnsdist
- CVE-2018-14662 Missing authorization in ceph
- CVE-2018-14661 Memory corruption in glusterfs-server
- CVE-2018-14660 Denial of service in glusterfs
- CVE-2018-1466 Weak cryptography in FlashSystem V9000
- CVE-2018-14659 Denial of service in glusterfs
- CVE-2018-14658 Keycloak Open Redirect
- CVE-2018-14657 Keycloak Improper Bruteforce Detection
- CVE-2018-14656 Information disclosure in kernel
- CVE-2018-14655 Keycloak vulnerable to cross-site scripting via the state parameter
- CVE-2018-14654 Path traversal in glusterfs
- CVE-2018-14653 Memory corruption in glusterfs
- CVE-2018-14652 Memory corruption in glusterfs
- CVE-2018-14651 Path traversal in glusterfs
- CVE-2018-14650 Misconfiguration in sos-collector
- CVE-2018-1465 Information disclosure in FlashSystem V9000
- CVE-2018-14649 Misconfiguration in ceph-iscsi-cli
- CVE-2018-14648 Denial of service in 389-ds-base:
- CVE-2018-14647 Denial of service in Python
- CVE-2018-14646 Null dereference in kernel:
- CVE-2018-14645 Memory corruption in haproxy
- CVE-2018-14644 Denial of service in pdns
- CVE-2018-14643 smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature
- CVE-2018-14642 Exposure of Sensitive Information to an Unauthorized Actor in Undertow
- CVE-2018-14641 Denial of service in kernel
- CVE-2018-1464 Information disclosure in FlashSystem V9000
- CVE-2018-14638 Denial of service in 389-ds-base
- CVE-2018-14637 Improper Authentication in Keycloak
- CVE-2018-14636 Openstack Neutron vulnerable to eavesdropping on private traffic
- CVE-2018-14635 OpensStack Neutron Denial of Service Vulnerability
- CVE-2018-14634 Linux Kernel Integer Overflow
- CVE-2018-14633 Memory corruption in kernel
- CVE-2018-14632 JSON-Patch Out-of-bounds Write vulnerability
- CVE-2018-14631 Moodle Cross-site Scripting
- CVE-2018-14630 Moodle XML import of ddwtos could lead to intentional remote code execution
- CVE-2018-1463 Missing authorization in FlashSystem V9000
- CVE-2018-14629 Denial of service in samba
- CVE-2018-14628 Missing authorization in Samba
- CVE-2018-14627 Security feature bypass in JBoss/WildFly
- CVE-2018-14626 Denial of service in pdns
- CVE-2018-14625 Race condition in kernel
- CVE-2018-14624 Denial of service in 389-ds-base
- CVE-2018-14623 katello SQL Injection vulnerability
- CVE-2018-14622 Null dereference in libtirpc
- CVE-2018-14621 Denial of service in libtirpc
- CVE-2018-14620 Supply chain in openstack-rabbitmq-container
- CVE-2018-1462 Missing authorization in FlashSystem V9000
- CVE-2018-14619 Use after free in kernel
- CVE-2018-14618 Integer overflow in curl
- CVE-2018-14617 Null dereference in canonical:ubuntu linux
- CVE-2018-14616 Null dereference in linux:linux kernel
- CVE-2018-14615 Memory corruption in linux:linux kernel
- CVE-2018-14614 Memory corruption in linux:linux kernel
- CVE-2018-14613 Null dereference in linux:linux kernel
- CVE-2018-14612 Null dereference in linux:linux kernel
- CVE-2018-14611 Use after free in debian:debian linux
- CVE-2018-14610 Memory corruption in linux:linux kernel
- CVE-2018-1461 Cross-site scripting in FlashSystem V9000
- CVE-2018-14609 Null dereference in canonical:ubuntu linux
- CVE-2018-14608 Information disclosure in thomsonreuters:ultratax cs
- CVE-2018-14607 Information disclosure in thomsonreuters:ultratax cs 2017
- CVE-2018-14606 Cross-site scripting in gitlab:gitlab
- CVE-2018-14605 Cross-site scripting in gitlab:gitlab
- CVE-2018-14604 Cross-site scripting in gitlab:gitlab
- CVE-2018-14603 Cross-site request forgery in gitlab:gitlab
- CVE-2018-14602 Information disclosure in gitlab:gitlab
- CVE-2018-14601 Denial of service in gitlab:gitlab
- CVE-2018-14600 Memory corruption in canonical:ubuntu linux
- CVE-2018-1460 Privilege escalation in PureData System for Analytics
- CVE-2018-14599 Memory corruption in canonical:ubuntu linux
- CVE-2018-14598 Null dereference in canonical:ubuntu linux
- CVE-2018-14597 Information disclosure in CA Identity Governance
- CVE-2018-14596 Denial of service in wancms:wancms
- CVE-2018-14593 Privilege escalation in debian:debian linux
- CVE-2018-14592 SQL injection in cwjoomla:cw article attachments free
- CVE-2018-14590 Memory corruption in axiosys:bento4
- CVE-2018-1459 Memory corruption in DB2 for Linux, UNIX and Windows
- CVE-2018-14589 Memory corruption in axiosys:bento4
- CVE-2018-14588 Null dereference in axiosys:bento4
- CVE-2018-14587 Memory corruption in axiosys:bento4
- CVE-2018-14586 Memory corruption in axiosys:bento4
- CVE-2018-14585 Memory corruption in axiosys:bento4
- CVE-2018-14584 Memory corruption in axiosys:bento4
- CVE-2018-14583 Cross-site request forgery in xyhcms:xyhcms
- CVE-2018-14582 Cross-site request forgery in bagesoft:bagecms
- CVE-2018-14581 Code injection in red-gate:.net reflector
- CVE-2018-1458 Privilege escalation in DB2 for Linux, UNIX and Windows
- CVE-2018-14579 Code injection in golemcms project:golemcms
- CVE-2018-14576 Integer overflow in suncontract:suncontract
- CVE-2018-14575 Cross-site scripting in mybb:trash bin
- CVE-2018-14574 Django open redirect
- CVE-2018-14573 Path traversal in trms:tightrope media carousel digital signage
- CVE-2018-14572 conference-scheduler-cli Arbitrary Code Execution
- CVE-2018-14570 File upload in niushop:b2b2c multi-business
- CVE-2018-1457 Privilege escalation in Rational DOORS