Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 112 of 163.
- CVE-2018-14568 Security feature bypass in suricata-ids:suricata
- CVE-2018-14567 Denial of service in canonical:ubuntu linux
- CVE-2018-14565 Memory corruption in thunlp:thulac
- CVE-2018-14564 Memory corruption in thunlp:thulac
- CVE-2018-14563 Memory corruption in thunlp:thulac
- CVE-2018-14562 Null dereference in thunlp:thulac
- CVE-2018-1456 XML external entity in ibm:rational rhapsody design manager
- CVE-2018-14559 Memory corruption in tenda:ac10 firmware
- CVE-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection
- CVE-2018-14557 Memory corruption in tenda:ac10 firmware
- CVE-2018-14553 Null dereference in canonical:ubuntu linux
- CVE-2018-14551 Memory corruption in canonical:ubuntu linux
- CVE-2018-14550 Out-of-bounds write in libpng
- CVE-2018-1455 Cross-site request forgery in Tivoli Application Dependency Discovery Manager
- CVE-2018-14549 Memory corruption in libwav project:libwav
- CVE-2018-14545 Memory corruption in axiosys:bento4
- CVE-2018-14544 Memory corruption in axiosys:bento4
- CVE-2018-14543 Null dereference in axiosys:bento4
- CVE-2018-14541 Cross-site scripting in readymadeb2bscript:basic b2b
- CVE-2018-1454 Misconfiguration in InfoSphere Information Server
- CVE-2018-14533 Privilege escalation in intenogroup:iopsys firmware
- CVE-2018-14532 Memory corruption in axiosys:bento4
- CVE-2018-14531 Memory corruption in axiosys:bento4
- CVE-2018-1453 File upload in Security Identity Manager
- CVE-2018-14529 Security feature bypass in invoxia:nvx220 firmware
- CVE-2018-14528 Hardcoded credentials in invoxia:nvx220 firmware
- CVE-2018-14527 Cross-site scripting in xiao5ucompany project:xiao5ucompany
- CVE-2018-14526 Weak cryptography in canonical:ubuntu linux
- CVE-2018-14524 Memory corruption in gnu:libredwg
- CVE-2018-14523 Aubio is vulnerable to out of bound read when samplerate > 50kHz
- CVE-2018-14522 Aubio is vulnerable to denial of service via aubio_pitch_set_unit function
- CVE-2018-14521 Aubio is vulnerable to denial of service via aubio_source_avcodec_readframe function
- CVE-2018-14520 Kirby CMS 2.5.12 Cross-site Scripting
- CVE-2018-1452 Other in DB2 for Linux, UNIX and Windows
- CVE-2018-14519 Kirby CMS 2.5.12 Cross-site Request Forgery
- CVE-2018-14517 Cross-site scripting in seacms:seacms
- CVE-2018-14515 SQL injection in wuzhi cms project:wuzhi cms
- CVE-2018-14514 Server-side request forgery in icmsdev:icms
- CVE-2018-14513 Cross-site scripting in wuzhi cms project:wuzhi cms
- CVE-2018-14512 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2018-1451 Other in DB2 for Linux, UNIX and Windows
- CVE-2018-14505 Mitmweb in mitmproxy allows DNS Rebinding attacks
- CVE-2018-14504 MantisBT allows XSS on the Edit Filter page via crafted filter name
- CVE-2018-14503 Cross-site scripting in coremail:coremail xt
- CVE-2018-14502 SQL injection in kibokolabs:chained quiz
- CVE-2018-14501 SQL injection in joyplus project:joyplus-cms
- CVE-2018-14500 Cross-site scripting in joyplus-cms project:joyplus-cms
- CVE-2018-1450 Other in DB2 for Linux, UNIX and Windows
- CVE-2018-14499 Cross-site scripting in hyphp:hybbs
- CVE-2018-14498 Memory corruption in debian:debian linux
- CVE-2018-14497 Cross-site scripting in tendacn:d152 firmware
- CVE-2018-14496 Memory corruption in vivotek:fd8136 firmware
- CVE-2018-14495 Command injection in vivotek:fd8136 firmware
- CVE-2018-14494 Command injection in vivotek:fd8136 firmware
- CVE-2018-14493 Cross-site scripting in opmantek:open-audit
- CVE-2018-14492 Memory corruption in tendacn:ac10 firmware
- CVE-2018-1449 Other in DB2 for Linux, UNIX and Windows
- CVE-2018-14486 DNN XSS Vulnerability
- CVE-2018-14485 XML external entity in blogengine:blogengine.net
- CVE-2018-14481 Cross-site scripting in osclass:osclass
- CVE-2018-1448 Other in DB2 for Linux, UNIX and Windows
- CVE-2018-14478 Cross-site scripting in coppermine-gallery:coppermine photo gallery
- CVE-2018-14476 Cross-site scripting in metalgenix:genixcms
- CVE-2018-14474 Open redirect in goodoldweb:orange forum
- CVE-2018-14473 XML external entity in ocsinventory-ng:ocsinventory ng
- CVE-2018-14472 SQL injection in wuzhicms:wuzhicms
- CVE-2018-14471 Null dereference in gnu:libredwg
- CVE-2018-14470 Memory corruption in apple:mac os x
- CVE-2018-1447 Weak cryptography in Spectrum Protect
- CVE-2018-14469 Memory corruption in apple:mac os x
- CVE-2018-14468 Memory corruption in apple:mac os x
- CVE-2018-14467 Memory corruption in apple:mac os x
- CVE-2018-14466 Memory corruption in apple:mac os x
- CVE-2018-14465 Memory corruption in apple:mac os x
- CVE-2018-14464 Memory corruption in apple:mac os x
- CVE-2018-14463 Memory corruption in apple:mac os x
- CVE-2018-14462 Memory corruption in apple:mac os x
- CVE-2018-14461 Memory corruption in apple:mac os x
- CVE-2018-14460 Memory corruption in hdfgroup:hdf5
- CVE-2018-14459 Memory corruption in linuxsampler:libgig
- CVE-2018-14458 Memory corruption in linuxsampler:libgig
- CVE-2018-14457 Memory corruption in linuxsampler:libgig
- CVE-2018-14456 Memory corruption in linuxsampler:libgig
- CVE-2018-14455 Memory corruption in linuxsampler:libgig
- CVE-2018-14454 Memory corruption in linuxsampler:libgig
- CVE-2018-14453 Memory corruption in linuxsampler:libgig
- CVE-2018-14452 Memory corruption in linuxsampler:libgig
- CVE-2018-14451 Memory corruption in linuxsampler:libgig
- CVE-2018-14450 Memory corruption in linuxsampler:libgig
- CVE-2018-1445 Cross-site scripting in WebSphere Portal
- CVE-2018-14449 Memory corruption in linuxsampler:libgig
- CVE-2018-14448 Null dereference in untrunc project:untrunc
- CVE-2018-14447 Memory corruption in debian:debian linux
- CVE-2018-14446 Memory corruption in techsmith:mp4v2
- CVE-2018-14445 Denial of service in axiosys:bento4
- CVE-2018-14444 Integer overflow in libdxfrw project:libdxfrw
- CVE-2018-14443 Memory corruption in gnu:libredwg
- CVE-2018-14442 Use after free in foxitsoftware:foxit reader
- CVE-2018-14441 File upload in ssh companywebsite project:ssh companywebsite
- CVE-2018-14440 SQL injection in ssh companywebsite project:ssh companywebsite