# Vulnerabilities published in 2018


- [CVE-2018-1444](https://insights.sbomify.com/CVE-2018-1444/): Cross-site scripting in WebSphere Portal (medium 5.4)
- [CVE-2018-14439](https://insights.sbomify.com/CVE-2018-14439/): Business logic in eblock:eos4j (high 7.5)
- [CVE-2018-14438](https://insights.sbomify.com/CVE-2018-14438/): Misconfiguration in wireshark:wireshark (high 7.5)
- [CVE-2018-14437](https://insights.sbomify.com/CVE-2018-14437/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-14436](https://insights.sbomify.com/CVE-2018-14436/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-14435](https://insights.sbomify.com/CVE-2018-14435/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-14434](https://insights.sbomify.com/CVE-2018-14434/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-14432](https://insights.sbomify.com/CVE-2018-14432/): Missing authorization in debian:debian linux (medium 5.3)
- [CVE-2018-14430](https://insights.sbomify.com/CVE-2018-14430/): Cross-site scripting in mondula:multi step form (medium 6.1)
- [CVE-2018-1443](https://insights.sbomify.com/CVE-2018-1443/): Auth bypass in Security Access Manager (medium 5.9)
- [CVE-2018-14429](https://insights.sbomify.com/CVE-2018-14429/): Path traversal in man-cgi project:man-cgi (high 7.5)
- [CVE-2018-14425](https://insights.sbomify.com/CVE-2018-14425/): Cross-site scripting in synacor:zimbra collaboration suite (medium 6.1)
- [CVE-2018-14424](https://insights.sbomify.com/CVE-2018-14424/): Use after free in gnome:gnome display manager (high 7.8)
- [CVE-2018-14423](https://insights.sbomify.com/CVE-2018-14423/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2018-14422](https://insights.sbomify.com/CVE-2018-14422/): Cross-site scripting in sanscms:sanscms (medium 6.1)
- [CVE-2018-14421](https://insights.sbomify.com/CVE-2018-14421/): Code injection in seacms:seacms (high 8.8)
- [CVE-2018-14420](https://insights.sbomify.com/CVE-2018-14420/): Cross-site request forgery in metinfo:metinfo (high 8.8)
- [CVE-2018-1442](https://insights.sbomify.com/CVE-2018-1442/): Cross-site request forgery in Monitoring (medium 4.3)
- [CVE-2018-14419](https://insights.sbomify.com/CVE-2018-14419/): Cross-site scripting in metinfo:metinfo (medium 4.8)
- [CVE-2018-14418](https://insights.sbomify.com/CVE-2018-14418/): SQL injection in msvod:msvod cms (critical 9.8)
- [CVE-2018-14417](https://insights.sbomify.com/CVE-2018-14417/): Command injection in softnas:cloud (critical 9.8)
- [CVE-2018-14415](https://insights.sbomify.com/CVE-2018-14415/): Cross-site scripting in icmsdev:icms (medium 6.1)
- [CVE-2018-1441](https://insights.sbomify.com/CVE-2018-1441/): Cross-site scripting in Monitoring (medium 6.1)
- [CVE-2018-14404](https://insights.sbomify.com/CVE-2018-14404/): Nokogiri NULL Pointer Dereference (medium 6.5)
- [CVE-2018-14403](https://insights.sbomify.com/CVE-2018-14403/): Memory corruption in techsmith:mp4v2 (critical 9.8)
- [CVE-2018-14402](https://insights.sbomify.com/CVE-2018-14402/): Memory corruption in axmldec project:axmldec (high 7.5)
- [CVE-2018-14401](https://insights.sbomify.com/CVE-2018-14401/): Memory corruption in axml parser project:axml parser (high 7.5)
- [CVE-2018-1440](https://insights.sbomify.com/CVE-2018-1440/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2018-14399](https://insights.sbomify.com/CVE-2018-14399/): File upload in phpcms project:phpcms (critical 9.8)
- [CVE-2018-14398](https://insights.sbomify.com/CVE-2018-14398/): Open redirect in cremecrm:cremecrm (medium 6.1)
- [CVE-2018-14397](https://insights.sbomify.com/CVE-2018-14397/): Cross-site scripting in cremecrm:cremecrm (medium 5.4)
- [CVE-2018-14396](https://insights.sbomify.com/CVE-2018-14396/): Cross-site scripting in cremecrm:cremecrm (medium 5.4)
- [CVE-2018-14395](https://insights.sbomify.com/CVE-2018-14395/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2018-14394](https://insights.sbomify.com/CVE-2018-14394/): Denial of service in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2018-14392](https://insights.sbomify.com/CVE-2018-14392/): Cross-site scripting in mybb:new threads (medium 6.1)
- [CVE-2018-1439](https://insights.sbomify.com/CVE-2018-1439/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2018-14389](https://insights.sbomify.com/CVE-2018-14389/): SQL injection in joyplus-cms project:joyplus-cms (critical 9.8)
- [CVE-2018-14388](https://insights.sbomify.com/CVE-2018-14388/): Cross-site scripting in joyplus-cms project:joyplus-cms (medium 5.4)
- [CVE-2018-14387](https://insights.sbomify.com/CVE-2018-14387/): Auth bypass in wondercms:wondercms (high 8.8)
- [CVE-2018-14384](https://insights.sbomify.com/CVE-2018-14384/): Cross-site scripting in seopanel:seo panel (medium 4.8)
- [CVE-2018-14383](https://insights.sbomify.com/CVE-2018-14383/): XML external entity in ttpsc:the scheduler (high 7.5)
- [CVE-2018-14382](https://insights.sbomify.com/CVE-2018-14382/): Cross-site scripting in instantcms:instantcms (medium 6.1)
- [CVE-2018-14381](https://insights.sbomify.com/CVE-2018-14381/): Pagekit open redirect vulnerability (medium 6.1)
- [CVE-2018-14380](https://insights.sbomify.com/CVE-2018-14380/): Cross-site Scripting in Graylog Server (medium 6.1)
- [CVE-2018-1438](https://insights.sbomify.com/CVE-2018-1438/): Path traversal in ibm:san volume controller firmware (high 7.5)
- [CVE-2018-14379](https://insights.sbomify.com/CVE-2018-14379/): Memory corruption in techsmith:mp4v2 (high 8.8)
- [CVE-2018-14371](https://insights.sbomify.com/CVE-2018-14371/): Path Traversal in Eclipse Mojarra (high 7.5)
- [CVE-2018-14370](https://insights.sbomify.com/CVE-2018-14370/): Memory corruption in wireshark:wireshark (high 7.5)
- [CVE-2018-1437](https://insights.sbomify.com/CVE-2018-1437/): Other in Notes (high 7.8)
- [CVE-2018-14369](https://insights.sbomify.com/CVE-2018-14369/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2018-14368](https://insights.sbomify.com/CVE-2018-14368/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2018-14367](https://insights.sbomify.com/CVE-2018-14367/): Null dereference in wireshark:wireshark (high 7.5)
- [CVE-2018-14366](https://insights.sbomify.com/CVE-2018-14366/): Open redirect in ivanti:connect secure (medium 6.1)
- [CVE-2018-14364](https://insights.sbomify.com/CVE-2018-14364/): Path traversal in gitlab:gitlab (critical 9.8)
- [CVE-2018-14363](https://insights.sbomify.com/CVE-2018-14363/): Path traversal in debian:debian linux (high 7.5)
- [CVE-2018-14362](https://insights.sbomify.com/CVE-2018-14362/): Path traversal in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14361](https://insights.sbomify.com/CVE-2018-14361/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2018-14360](https://insights.sbomify.com/CVE-2018-14360/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2018-14359](https://insights.sbomify.com/CVE-2018-14359/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14358](https://insights.sbomify.com/CVE-2018-14358/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14357](https://insights.sbomify.com/CVE-2018-14357/): Command injection in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14356](https://insights.sbomify.com/CVE-2018-14356/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14355](https://insights.sbomify.com/CVE-2018-14355/): Path traversal in canonical:ubuntu linux (medium 5.3)
- [CVE-2018-14354](https://insights.sbomify.com/CVE-2018-14354/): Command injection in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14353](https://insights.sbomify.com/CVE-2018-14353/): Integer overflow in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14352](https://insights.sbomify.com/CVE-2018-14352/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14351](https://insights.sbomify.com/CVE-2018-14351/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14350](https://insights.sbomify.com/CVE-2018-14350/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-1435](https://insights.sbomify.com/CVE-2018-1435/): Other in Notes (high 7.8)
- [CVE-2018-14349](https://insights.sbomify.com/CVE-2018-14349/): Other in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-14348](https://insights.sbomify.com/CVE-2018-14348/): Information disclosure in debian:debian linux (high 8.1)
- [CVE-2018-14347](https://insights.sbomify.com/CVE-2018-14347/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2018-14346](https://insights.sbomify.com/CVE-2018-14346/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2018-14345](https://insights.sbomify.com/CVE-2018-14345/): Auth bypass in sddm project:sddm (high 7.5)
- [CVE-2018-14344](https://insights.sbomify.com/CVE-2018-14344/): Memory corruption in wireshark:wireshark (high 7.5)
- [CVE-2018-14343](https://insights.sbomify.com/CVE-2018-14343/): Integer overflow in debian:debian linux (high 7.5)
- [CVE-2018-14342](https://insights.sbomify.com/CVE-2018-14342/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2018-14341](https://insights.sbomify.com/CVE-2018-14341/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2018-14340](https://insights.sbomify.com/CVE-2018-14340/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2018-1434](https://insights.sbomify.com/CVE-2018-1434/): Cross-site request forgery in FlashSystem V9000 (high 8.8)
- [CVE-2018-14339](https://insights.sbomify.com/CVE-2018-14339/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2018-14338](https://insights.sbomify.com/CVE-2018-14338/): Memory corruption in exiv2:exiv2 (high 8.1)
- [CVE-2018-14337](https://insights.sbomify.com/CVE-2018-14337/): Integer overflow in debian:debian linux (high 7.5)
- [CVE-2018-14336](https://insights.sbomify.com/CVE-2018-14336/): Denial of service in tp-link:wr840n (high 7.5)
- [CVE-2018-14335](https://insights.sbomify.com/CVE-2018-14335/): Path traversal in h2database:h2 (medium 6.5)
- [CVE-2018-14334](https://insights.sbomify.com/CVE-2018-14334/): File upload in joyplus-cms project:joyplus-cms (critical 9.8)
- [CVE-2018-14333](https://insights.sbomify.com/CVE-2018-14333/): Information disclosure in teamviewer:teamviewer (high 8.1)
- [CVE-2018-14332](https://insights.sbomify.com/CVE-2018-14332/): Null dereference in clementine-player:clementine (medium 5.5)
- [CVE-2018-14331](https://insights.sbomify.com/CVE-2018-14331/): Cross-site request forgery in xiaocms:xiaocms x1 (high 8.8)
- [CVE-2018-1433](https://insights.sbomify.com/CVE-2018-1433/): Missing authorization in ibm:san volume controller firmware (high 7.5)
- [CVE-2018-14329](https://insights.sbomify.com/CVE-2018-14329/): Race condition in htslib:htslib (medium 4.7)
- [CVE-2018-14328](https://insights.sbomify.com/CVE-2018-14328/): Information disclosure in brynamics:online trade (critical 9.8)
- [CVE-2018-14327](https://insights.sbomify.com/CVE-2018-14327/): Misconfiguration in ee:ee40vb firmware (high 7.8)
- [CVE-2018-14326](https://insights.sbomify.com/CVE-2018-14326/): Integer overflow in techsmith:mp4v2 (high 8.8)
- [CVE-2018-14325](https://insights.sbomify.com/CVE-2018-14325/): Integer overflow in techsmith:mp4v2 (high 8.8)
- [CVE-2018-14324](https://insights.sbomify.com/CVE-2018-14324/): Hardcoded credentials in oracle:glassfish server (critical 9.8)
- [CVE-2018-14320](https://insights.sbomify.com/CVE-2018-14320/): Memory corruption in PoDoFo PoDoFo (medium 6.5)
- [CVE-2018-1432](https://insights.sbomify.com/CVE-2018-1432/): Other in InfoSphere Information Server (medium 6.1)
- [CVE-2018-14318](https://insights.sbomify.com/CVE-2018-14318/): Memory corruption in Samsung Galaxy S8 (high 8.8)
- [CVE-2018-14317](https://insights.sbomify.com/CVE-2018-14317/): Memory corruption in Foxit Reader (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/113/