# Vulnerabilities published in 2018


- [CVE-2018-14568](https://insights.sbomify.com/CVE-2018-14568/): Security feature bypass in suricata-ids:suricata (high 7.5)
- [CVE-2018-14567](https://insights.sbomify.com/CVE-2018-14567/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-14565](https://insights.sbomify.com/CVE-2018-14565/): Memory corruption in thunlp:thulac (critical 9.8)
- [CVE-2018-14564](https://insights.sbomify.com/CVE-2018-14564/): Memory corruption in thunlp:thulac (critical 9.8)
- [CVE-2018-14563](https://insights.sbomify.com/CVE-2018-14563/): Memory corruption in thunlp:thulac (critical 9.8)
- [CVE-2018-14562](https://insights.sbomify.com/CVE-2018-14562/): Null dereference in thunlp:thulac (critical 9.8)
- [CVE-2018-1456](https://insights.sbomify.com/CVE-2018-1456/): XML external entity in ibm:rational rhapsody design manager (high 7.1)
- [CVE-2018-14559](https://insights.sbomify.com/CVE-2018-14559/): Memory corruption in tenda:ac10 firmware (high 7.5)
- [CVE-2018-14558](https://insights.sbomify.com/CVE-2018-14558/): Tenda AC7, AC9, and AC10 Routers Command Injection (critical 9.8, exploited in the wild)
- [CVE-2018-14557](https://insights.sbomify.com/CVE-2018-14557/): Memory corruption in tenda:ac10 firmware (high 7.5)
- [CVE-2018-14553](https://insights.sbomify.com/CVE-2018-14553/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2018-14551](https://insights.sbomify.com/CVE-2018-14551/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14550](https://insights.sbomify.com/CVE-2018-14550/): Out-of-bounds write in libpng (high 8.8)
- [CVE-2018-1455](https://insights.sbomify.com/CVE-2018-1455/): Cross-site request forgery in Tivoli Application Dependency Discovery Manager (medium 4.3)
- [CVE-2018-14549](https://insights.sbomify.com/CVE-2018-14549/): Memory corruption in libwav project:libwav (medium 6.5)
- [CVE-2018-14545](https://insights.sbomify.com/CVE-2018-14545/): Memory corruption in axiosys:bento4 (medium 5.5)
- [CVE-2018-14544](https://insights.sbomify.com/CVE-2018-14544/): Memory corruption in axiosys:bento4 (medium 5.5)
- [CVE-2018-14543](https://insights.sbomify.com/CVE-2018-14543/): Null dereference in axiosys:bento4 (medium 5.5)
- [CVE-2018-14541](https://insights.sbomify.com/CVE-2018-14541/): Cross-site scripting in readymadeb2bscript:basic b2b (medium 5.4)
- [CVE-2018-1454](https://insights.sbomify.com/CVE-2018-1454/): Misconfiguration in InfoSphere Information Server (medium 5.9)
- [CVE-2018-14533](https://insights.sbomify.com/CVE-2018-14533/): Privilege escalation in intenogroup:iopsys firmware (high 7.8)
- [CVE-2018-14532](https://insights.sbomify.com/CVE-2018-14532/): Memory corruption in axiosys:bento4 (critical 9.8)
- [CVE-2018-14531](https://insights.sbomify.com/CVE-2018-14531/): Memory corruption in axiosys:bento4 (critical 9.8)
- [CVE-2018-1453](https://insights.sbomify.com/CVE-2018-1453/): File upload in Security Identity Manager (high 8.8)
- [CVE-2018-14529](https://insights.sbomify.com/CVE-2018-14529/): Security feature bypass in invoxia:nvx220 firmware (high 7.5)
- [CVE-2018-14528](https://insights.sbomify.com/CVE-2018-14528/): Hardcoded credentials in invoxia:nvx220 firmware (critical 9.8)
- [CVE-2018-14527](https://insights.sbomify.com/CVE-2018-14527/): Cross-site scripting in xiao5ucompany project:xiao5ucompany (medium 6.1)
- [CVE-2018-14526](https://insights.sbomify.com/CVE-2018-14526/): Weak cryptography in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-14524](https://insights.sbomify.com/CVE-2018-14524/): Memory corruption in gnu:libredwg (medium 6.5)
- [CVE-2018-14523](https://insights.sbomify.com/CVE-2018-14523/): Aubio is vulnerable to out of bound read when samplerate > 50kHz (high 8.8)
- [CVE-2018-14522](https://insights.sbomify.com/CVE-2018-14522/): Aubio is vulnerable to denial of service via aubio_pitch_set_unit function (high 8.8)
- [CVE-2018-14521](https://insights.sbomify.com/CVE-2018-14521/): Aubio is vulnerable to denial of service via aubio_source_avcodec_readframe function (high 8.8)
- [CVE-2018-14520](https://insights.sbomify.com/CVE-2018-14520/): Kirby CMS 2.5.12 Cross-site Scripting (medium 5.4)
- [CVE-2018-1452](https://insights.sbomify.com/CVE-2018-1452/): Other in DB2 for Linux, UNIX and Windows (medium 5.5)
- [CVE-2018-14519](https://insights.sbomify.com/CVE-2018-14519/): Kirby CMS 2.5.12 Cross-site Request Forgery (medium 4.3)
- [CVE-2018-14517](https://insights.sbomify.com/CVE-2018-14517/): Cross-site scripting in seacms:seacms (medium 6.1)
- [CVE-2018-14515](https://insights.sbomify.com/CVE-2018-14515/): SQL injection in wuzhi cms project:wuzhi cms (critical 9.8)
- [CVE-2018-14514](https://insights.sbomify.com/CVE-2018-14514/): Server-side request forgery in icmsdev:icms (critical 9.8)
- [CVE-2018-14513](https://insights.sbomify.com/CVE-2018-14513/): Cross-site scripting in wuzhi cms project:wuzhi cms (medium 6.1)
- [CVE-2018-14512](https://insights.sbomify.com/CVE-2018-14512/): Cross-site scripting in wuzhicms:wuzhicms (medium 6.1)
- [CVE-2018-1451](https://insights.sbomify.com/CVE-2018-1451/): Other in DB2 for Linux, UNIX and Windows (medium 5.5)
- [CVE-2018-14505](https://insights.sbomify.com/CVE-2018-14505/): Mitmweb in mitmproxy allows DNS Rebinding attacks (high 8.8)
- [CVE-2018-14504](https://insights.sbomify.com/CVE-2018-14504/): MantisBT allows XSS on the Edit Filter page via crafted filter name (medium 6.1)
- [CVE-2018-14503](https://insights.sbomify.com/CVE-2018-14503/): Cross-site scripting in coremail:coremail xt (medium 6.1)
- [CVE-2018-14502](https://insights.sbomify.com/CVE-2018-14502/): SQL injection in kibokolabs:chained quiz (critical 9.8)
- [CVE-2018-14501](https://insights.sbomify.com/CVE-2018-14501/): SQL injection in joyplus project:joyplus-cms (critical 9.8)
- [CVE-2018-14500](https://insights.sbomify.com/CVE-2018-14500/): Cross-site scripting in joyplus-cms project:joyplus-cms (medium 6.1)
- [CVE-2018-1450](https://insights.sbomify.com/CVE-2018-1450/): Other in DB2 for Linux, UNIX and Windows (medium 5.5)
- [CVE-2018-14499](https://insights.sbomify.com/CVE-2018-14499/): Cross-site scripting in hyphp:hybbs (medium 6.1)
- [CVE-2018-14498](https://insights.sbomify.com/CVE-2018-14498/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2018-14497](https://insights.sbomify.com/CVE-2018-14497/): Cross-site scripting in tendacn:d152 firmware (medium 5.4)
- [CVE-2018-14496](https://insights.sbomify.com/CVE-2018-14496/): Memory corruption in vivotek:fd8136 firmware (critical 9.8)
- [CVE-2018-14495](https://insights.sbomify.com/CVE-2018-14495/): Command injection in vivotek:fd8136 firmware (critical 9.8)
- [CVE-2018-14494](https://insights.sbomify.com/CVE-2018-14494/): Command injection in vivotek:fd8136 firmware (critical 9.8)
- [CVE-2018-14493](https://insights.sbomify.com/CVE-2018-14493/): Cross-site scripting in opmantek:open-audit (medium 6.1)
- [CVE-2018-14492](https://insights.sbomify.com/CVE-2018-14492/): Memory corruption in tendacn:ac10 firmware (high 7.5)
- [CVE-2018-1449](https://insights.sbomify.com/CVE-2018-1449/): Other in DB2 for Linux, UNIX and Windows (medium 5.5)
- [CVE-2018-14486](https://insights.sbomify.com/CVE-2018-14486/): DNN XSS Vulnerability (medium 6.1)
- [CVE-2018-14485](https://insights.sbomify.com/CVE-2018-14485/): XML external entity in blogengine:blogengine.net (critical 9.8)
- [CVE-2018-14481](https://insights.sbomify.com/CVE-2018-14481/): Cross-site scripting in osclass:osclass (medium 6.1)
- [CVE-2018-1448](https://insights.sbomify.com/CVE-2018-1448/): Other in DB2 for Linux, UNIX and Windows (high 7.7)
- [CVE-2018-14478](https://insights.sbomify.com/CVE-2018-14478/): Cross-site scripting in coppermine-gallery:coppermine photo gallery (medium 6.1)
- [CVE-2018-14476](https://insights.sbomify.com/CVE-2018-14476/): Cross-site scripting in metalgenix:genixcms (medium 6.1)
- [CVE-2018-14474](https://insights.sbomify.com/CVE-2018-14474/): Open redirect in goodoldweb:orange forum (medium 6.1)
- [CVE-2018-14473](https://insights.sbomify.com/CVE-2018-14473/): XML external entity in ocsinventory-ng:ocsinventory ng (critical 9.1)
- [CVE-2018-14472](https://insights.sbomify.com/CVE-2018-14472/): SQL injection in wuzhicms:wuzhicms (high 7.2)
- [CVE-2018-14471](https://insights.sbomify.com/CVE-2018-14471/): Null dereference in gnu:libredwg (medium 6.5)
- [CVE-2018-14470](https://insights.sbomify.com/CVE-2018-14470/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2018-1447](https://insights.sbomify.com/CVE-2018-1447/): Weak cryptography in Spectrum Protect (medium 5.1)
- [CVE-2018-14469](https://insights.sbomify.com/CVE-2018-14469/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2018-14468](https://insights.sbomify.com/CVE-2018-14468/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2018-14467](https://insights.sbomify.com/CVE-2018-14467/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2018-14466](https://insights.sbomify.com/CVE-2018-14466/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2018-14465](https://insights.sbomify.com/CVE-2018-14465/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2018-14464](https://insights.sbomify.com/CVE-2018-14464/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2018-14463](https://insights.sbomify.com/CVE-2018-14463/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2018-14462](https://insights.sbomify.com/CVE-2018-14462/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2018-14461](https://insights.sbomify.com/CVE-2018-14461/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2018-14460](https://insights.sbomify.com/CVE-2018-14460/): Memory corruption in hdfgroup:hdf5 (high 8.8)
- [CVE-2018-14459](https://insights.sbomify.com/CVE-2018-14459/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-14458](https://insights.sbomify.com/CVE-2018-14458/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-14457](https://insights.sbomify.com/CVE-2018-14457/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-14456](https://insights.sbomify.com/CVE-2018-14456/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-14455](https://insights.sbomify.com/CVE-2018-14455/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-14454](https://insights.sbomify.com/CVE-2018-14454/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-14453](https://insights.sbomify.com/CVE-2018-14453/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-14452](https://insights.sbomify.com/CVE-2018-14452/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-14451](https://insights.sbomify.com/CVE-2018-14451/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-14450](https://insights.sbomify.com/CVE-2018-14450/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-1445](https://insights.sbomify.com/CVE-2018-1445/): Cross-site scripting in WebSphere Portal (medium 5.4)
- [CVE-2018-14449](https://insights.sbomify.com/CVE-2018-14449/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-14448](https://insights.sbomify.com/CVE-2018-14448/): Null dereference in untrunc project:untrunc (medium 6.5)
- [CVE-2018-14447](https://insights.sbomify.com/CVE-2018-14447/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2018-14446](https://insights.sbomify.com/CVE-2018-14446/): Memory corruption in techsmith:mp4v2 (high 8.8)
- [CVE-2018-14445](https://insights.sbomify.com/CVE-2018-14445/): Denial of service in axiosys:bento4 (medium 6.5)
- [CVE-2018-14444](https://insights.sbomify.com/CVE-2018-14444/): Integer overflow in libdxfrw project:libdxfrw (high 7.5)
- [CVE-2018-14443](https://insights.sbomify.com/CVE-2018-14443/): Memory corruption in gnu:libredwg (medium 6.5)
- [CVE-2018-14442](https://insights.sbomify.com/CVE-2018-14442/): Use after free in foxitsoftware:foxit reader (critical 9.8)
- [CVE-2018-14441](https://insights.sbomify.com/CVE-2018-14441/): File upload in ssh companywebsite project:ssh companywebsite (critical 9.8)
- [CVE-2018-14440](https://insights.sbomify.com/CVE-2018-14440/): SQL injection in ssh companywebsite project:ssh companywebsite (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/112/