# Vulnerabilities published in 2018


- [CVE-2018-14087](https://insights.sbomify.com/CVE-2018-14087/): Integer overflow in encryptedtoken project:encryptedtoken (critical 9.8)
- [CVE-2018-14086](https://insights.sbomify.com/CVE-2018-14086/): Integer overflow in mytoken project:mytoken (critical 9.8)
- [CVE-2018-14085](https://insights.sbomify.com/CVE-2018-14085/): Business logic in userwallet project:userwallet (high 7.5)
- [CVE-2018-14084](https://insights.sbomify.com/CVE-2018-14084/): Integer overflow in myadvancedtoken project:myadvancedtoken (critical 9.8)
- [CVE-2018-14083](https://insights.sbomify.com/CVE-2018-14083/): Information disclosure in lica:minicmts e8k firmware (high 7.5)
- [CVE-2018-14082](https://insights.sbomify.com/CVE-2018-14082/): Cross-site scripting in freelancewebdesignerchennai:job portal (medium 5.4)
- [CVE-2018-14081](https://insights.sbomify.com/CVE-2018-14081/): Information disclosure in d-link:dir-809 a1 firmware (critical 9.8)
- [CVE-2018-14080](https://insights.sbomify.com/CVE-2018-14080/): Auth bypass in d-link:dir-809 a1 firmware (high 7.5)
- [CVE-2018-1408](https://insights.sbomify.com/CVE-2018-1408/): Cross-site scripting in Rational Team Concert (medium 5.4)
- [CVE-2018-14079](https://insights.sbomify.com/CVE-2018-14079/): Information disclosure in wi2be:smart hp wmt (high 7.5)
- [CVE-2018-14078](https://insights.sbomify.com/CVE-2018-14078/): Auth bypass in wi2be:smart hp wmt (critical 9.8)
- [CVE-2018-14077](https://insights.sbomify.com/CVE-2018-14077/): Missing authorization in wi2be:smart hp wmt (high 7.5)
- [CVE-2018-14073](https://insights.sbomify.com/CVE-2018-14073/): Denial of service in saitoha:libsixel (high 7.5)
- [CVE-2018-14072](https://insights.sbomify.com/CVE-2018-14072/): Denial of service in saitoha:libsixel (high 7.5)
- [CVE-2018-14071](https://insights.sbomify.com/CVE-2018-14071/): Cross-site scripting in cyberhobo:geo mashup (critical 9.8)
- [CVE-2018-1407](https://insights.sbomify.com/CVE-2018-1407/): Cross-site scripting in Rational Team Concert (medium 5.4)
- [CVE-2018-14069](https://insights.sbomify.com/CVE-2018-14069/): Cross-site request forgery in srcms project:srcms (high 8.8)
- [CVE-2018-14068](https://insights.sbomify.com/CVE-2018-14068/): Cross-site request forgery in srcms project:srcms (high 8.8)
- [CVE-2018-14067](https://insights.sbomify.com/CVE-2018-14067/): Command injection in greenpacket:dv-360 firmware (critical 9.8)
- [CVE-2018-14066](https://insights.sbomify.com/CVE-2018-14066/): SQL injection in google:android (critical 9.8)
- [CVE-2018-14065](https://insights.sbomify.com/CVE-2018-14065/): PHPOffice Common Improper Restriction of XML External Entity Reference (critical 9.8)
- [CVE-2018-14064](https://insights.sbomify.com/CVE-2018-14064/): Path traversal in velotismart project:velotismart wifi firmware (critical 9.8)
- [CVE-2018-14063](https://insights.sbomify.com/CVE-2018-14063/): Integer overflow in tracto:tracto (critical 9.8)
- [CVE-2018-14062](https://insights.sbomify.com/CVE-2018-14062/): Weak cryptography in cospas-sarsat:cospas-sarsat system (critical 9.1)
- [CVE-2018-14060](https://insights.sbomify.com/CVE-2018-14060/): Command injection in mi:xiaomi r3d firmware (critical 9.8)
- [CVE-2018-14059](https://insights.sbomify.com/CVE-2018-14059/): Pimcore XSS Vulnerability (medium 5.4)
- [CVE-2018-14058](https://insights.sbomify.com/CVE-2018-14058/): Pimcore SQLi Vulnerability (medium 6.5)
- [CVE-2018-14057](https://insights.sbomify.com/CVE-2018-14057/): Pimcore CSRF Vulnerability (high 8.8)
- [CVE-2018-14056](https://insights.sbomify.com/CVE-2018-14056/): Path traversal in debian:debian linux (medium 5.3)
- [CVE-2018-14055](https://insights.sbomify.com/CVE-2018-14055/): Privilege escalation in debian:debian linux (medium 6.5)
- [CVE-2018-14054](https://insights.sbomify.com/CVE-2018-14054/): Memory corruption in techsmith:mp4v2 (critical 9.8)
- [CVE-2018-14052](https://insights.sbomify.com/CVE-2018-14052/): Memory corruption in libwav project:libwav (medium 6.5)
- [CVE-2018-14051](https://insights.sbomify.com/CVE-2018-14051/): Denial of service in libwav project:libwav (high 7.5)
- [CVE-2018-14050](https://insights.sbomify.com/CVE-2018-14050/): Memory corruption in libwav project:libwav (medium 6.5)
- [CVE-2018-1405](https://insights.sbomify.com/CVE-2018-1405/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2018-14049](https://insights.sbomify.com/CVE-2018-14049/): Memory corruption in libwav project:libwav (medium 6.5)
- [CVE-2018-14048](https://insights.sbomify.com/CVE-2018-14048/): Memory corruption in libpng:libpng (medium 6.5)
- [CVE-2018-14047](https://insights.sbomify.com/CVE-2018-14047/): Memory corruption in pngwriter project:pngwriter (medium 5.5)
- [CVE-2018-14046](https://insights.sbomify.com/CVE-2018-14046/): Memory corruption in exiv2:exiv2 (high 8.8)
- [CVE-2018-14045](https://insights.sbomify.com/CVE-2018-14045/): Denial of service in surina:soundtouch (high 7.5)
- [CVE-2018-14044](https://insights.sbomify.com/CVE-2018-14044/): Denial of service in surina:soundtouch (high 7.5)
- [CVE-2018-14043](https://insights.sbomify.com/CVE-2018-14043/): Race condition in monetra:mstdlib (critical 9.8)
- [CVE-2018-14042](https://insights.sbomify.com/CVE-2018-14042/): Bootstrap Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2018-14041](https://insights.sbomify.com/CVE-2018-14041/): Bootstrap Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2018-14040](https://insights.sbomify.com/CVE-2018-14040/): Bootstrap vulnerable to Cross-Site Scripting (XSS) (medium 6.1)
- [CVE-2018-1404](https://insights.sbomify.com/CVE-2018-1404/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2018-14037](https://insights.sbomify.com/CVE-2018-14037/): Cross-site scripting in progress:kendo ui (medium 6.1)
- [CVE-2018-14036](https://insights.sbomify.com/CVE-2018-14036/): Path traversal in freedesktop:accountsservice (medium 6.5)
- [CVE-2018-14035](https://insights.sbomify.com/CVE-2018-14035/): Memory corruption in hdfgroup:hdf5 (high 8.8)
- [CVE-2018-14034](https://insights.sbomify.com/CVE-2018-14034/): Memory corruption in hdfgroup:hdf5 (high 8.8)
- [CVE-2018-14033](https://insights.sbomify.com/CVE-2018-14033/): Memory corruption in hdfgroup:hdf5 (high 8.8)
- [CVE-2018-14031](https://insights.sbomify.com/CVE-2018-14031/): Memory corruption in hdfgroup:hdf5 (high 8.8)
- [CVE-2018-1403](https://insights.sbomify.com/CVE-2018-1403/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2018-14029](https://insights.sbomify.com/CVE-2018-14029/): Cross-site request forgery in creatiwity:witycms (high 8.8)
- [CVE-2018-14028](https://insights.sbomify.com/CVE-2018-14028/): File upload in wordpress:wordpress (high 7.2)
- [CVE-2018-14027](https://insights.sbomify.com/CVE-2018-14027/): Cross-site scripting in digisol:dg-hr-3300 firmware (medium 6.1)
- [CVE-2018-14023](https://insights.sbomify.com/CVE-2018-14023/): Information disclosure in signal:signal-desktop (medium 4.0)
- [CVE-2018-14020](https://insights.sbomify.com/CVE-2018-14020/): Paymorrow Improper Input Validation vulnerability (medium 5.3)
- [CVE-2018-14017](https://insights.sbomify.com/CVE-2018-14017/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-14016](https://insights.sbomify.com/CVE-2018-14016/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-14015](https://insights.sbomify.com/CVE-2018-14015/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-14014](https://insights.sbomify.com/CVE-2018-14014/): Cross-site request forgery in super cms project:super cms (high 8.8)
- [CVE-2018-14013](https://insights.sbomify.com/CVE-2018-14013/): Cross-site scripting in synacor:zimbra collaboration suite (medium 6.1)
- [CVE-2018-14012](https://insights.sbomify.com/CVE-2018-14012/): SQL injection in wolfsight:wolfsight cms (critical 9.8)
- [CVE-2018-14010](https://insights.sbomify.com/CVE-2018-14010/): Command injection in mi:xiaomi r3 (critical 9.8)
- [CVE-2018-1401](https://insights.sbomify.com/CVE-2018-1401/): Cross-site scripting in WebSphere Portal (medium 6.1)
- [CVE-2018-14009](https://insights.sbomify.com/CVE-2018-14009/): Codiad remote code execution vulnerability (critical 9.8)
- [CVE-2018-14008](https://insights.sbomify.com/CVE-2018-14008/): Denial of service in arista:eos (medium 6.5)
- [CVE-2018-14007](https://insights.sbomify.com/CVE-2018-14007/): Path traversal in citrix:xenserver (critical 9.8)
- [CVE-2018-14006](https://insights.sbomify.com/CVE-2018-14006/): Integer overflow in ngtoken project:ngtoken (high 7.5)
- [CVE-2018-14005](https://insights.sbomify.com/CVE-2018-14005/): Integer overflow in malaysiancoin project:malaysiancoin (high 7.5)
- [CVE-2018-14004](https://insights.sbomify.com/CVE-2018-14004/): Integer overflow in globecoin project:globecoin (high 7.5)
- [CVE-2018-14003](https://insights.sbomify.com/CVE-2018-14003/): Integer overflow in wmctoken project:wmctoken (high 7.5)
- [CVE-2018-14002](https://insights.sbomify.com/CVE-2018-14002/): Integer overflow in mp3 coin project:mp3 coin (high 7.5)
- [CVE-2018-14001](https://insights.sbomify.com/CVE-2018-14001/): Integer overflow in sharktech project:sharktech (high 7.5)
- [CVE-2018-13999](https://insights.sbomify.com/CVE-2018-13999/): Cross-site scripting in catfish-cms:catfish cms (medium 4.8)
- [CVE-2018-13998](https://insights.sbomify.com/CVE-2018-13998/): Cross-site scripting in clippercms:clippercms (medium 4.8)
- [CVE-2018-13997](https://insights.sbomify.com/CVE-2018-13997/): Memory corruption in codeplea:genann (high 7.5)
- [CVE-2018-13996](https://insights.sbomify.com/CVE-2018-13996/): Memory corruption in codeplea:genann (critical 9.8)
- [CVE-2018-13994](https://insights.sbomify.com/CVE-2018-13994/): Denial of service in phoenixcontact:fl switch 3004t-fx firmware (high 7.5)
- [CVE-2018-13993](https://insights.sbomify.com/CVE-2018-13993/): Cross-site request forgery in phoenixcontact:fl switch 3004t-fx firmware (high 8.8)
- [CVE-2018-13992](https://insights.sbomify.com/CVE-2018-13992/): Information disclosure in phoenixcontact:fl switch 3004t-fx firmware (high 8.2)
- [CVE-2018-13991](https://insights.sbomify.com/CVE-2018-13991/): Information disclosure in phoenixcontact:fl switch 3004t-fx firmware (medium 5.3)
- [CVE-2018-13990](https://insights.sbomify.com/CVE-2018-13990/): Auth bypass in phoenixcontact:fl switch 3004t-fx firmware (high 8.6)
- [CVE-2018-1399](https://insights.sbomify.com/CVE-2018-1399/): Cross-site scripting in Daeja ViewONE (medium 5.4)
- [CVE-2018-13989](https://insights.sbomify.com/CVE-2018-13989/): Cross-site request forgery in arcelikas:grundig smart inter\@ctive firmware (high 8.8)
- [CVE-2018-13988](https://insights.sbomify.com/CVE-2018-13988/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-13983](https://insights.sbomify.com/CVE-2018-13983/): ImpressCMS XSS (medium 6.1)
- [CVE-2018-13982](https://insights.sbomify.com/CVE-2018-13982/): Smarty Path Traversal Vulnerability (high 7.5)
- [CVE-2018-13981](https://insights.sbomify.com/CVE-2018-13981/): File upload in zeta-producer:zeta producer desktop cms (critical 9.8)
- [CVE-2018-13980](https://insights.sbomify.com/CVE-2018-13980/): Path traversal in zeta-producer:zeta producer (medium 5.5)
- [CVE-2018-1398](https://insights.sbomify.com/CVE-2018-1398/): Information disclosure in Sterling File Gateway (medium 5.3)
- [CVE-2018-1396](https://insights.sbomify.com/CVE-2018-1396/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2018-1395](https://insights.sbomify.com/CVE-2018-1395/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2018-1394](https://insights.sbomify.com/CVE-2018-1394/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2018-1393](https://insights.sbomify.com/CVE-2018-1393/): Information disclosure in Financial Transaction Manager (low 3.1)
- [CVE-2018-13927](https://insights.sbomify.com/CVE-2018-13927/): Security feature bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2018-13925](https://insights.sbomify.com/CVE-2018-13925/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables (critical 9.8)
- [CVE-2018-13924](https://insights.sbomify.com/CVE-2018-13924/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2018-13920](https://insights.sbomify.com/CVE-2018-13920/): Use after free in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/115/