Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 121 of 163.
- CVE-2018-13403 Cross-site scripting in Jira
- CVE-2018-13402 Open redirect in Jira
- CVE-2018-13401 Open redirect in Jira
- CVE-2018-13400 Privilege escalation in Jira
- CVE-2018-1340 Missing Encryption of Sensitive Data in Apache Guacamole
- CVE-2018-13399 Privilege escalation in Fisheye and Crucible
- CVE-2018-13398 Cross-site request forgery in Fisheye and Crucible
- CVE-2018-13397 Command injection in Sourcetree for Windows
- CVE-2018-13396 Command injection in Sourcetree for macOS
- CVE-2018-13395 Cross-site scripting in Jira
- CVE-2018-13394 Cross-site request forgery in Confluence Questions
- CVE-2018-13393 Cross-site request forgery in Confluence Questions
- CVE-2018-13392 Cross-site scripting in Fisheye and Crucible
- CVE-2018-13391 Information disclosure in Jira
- CVE-2018-13390 Cloudtoken Insufficiently Protects Credentials
- CVE-2018-1339 org.apache.tika:tika-parsers has an Infinite Loop vulnerability
- CVE-2018-13389 Other in Confluence
- CVE-2018-13388 Cross-site scripting in Fisheye and Crucible
- CVE-2018-13387 Cross-site scripting in Jira
- CVE-2018-13386 Command injection in Sourcetree for Windows
- CVE-2018-13385 Command injection in Sourcetree for macOS
- CVE-2018-13384 Open redirect in Fortinet FortiOS
- CVE-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write
- CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization
- CVE-2018-13381 Memory corruption in Fortinet FortiOS and FortiProxy
- CVE-2018-13380 Cross-site scripting in Fortinet FortiOS and FortiProxy
- CVE-2018-1338 Moderate severity vulnerability that affects org.apache.tika:tika-core
- CVE-2018-13379 Fortinet FortiOS SSL VPN Path Traversal
- CVE-2018-13378 Information disclosure in Fortinet FortiSIEM
- CVE-2018-13376 Information disclosure in Fortinet FortiOS
- CVE-2018-13375 Cross-site scripting in FortiAnalyzer
- CVE-2018-13374 Fortinet FortiOS and FortiADC Improper Access Control
- CVE-2018-13371 Missing authorization in Fortinet FortiOS
- CVE-2018-1337 Credential leak in org.apache.directory.api:apache-ldap-api
- CVE-2018-13368 Command injection in Fortinet FortiClient for Windows
- CVE-2018-13367 Information disclosure in FortiOS
- CVE-2018-13366 Information disclosure in Fortinet FortiOS
- CVE-2018-13365 Information disclosure in Fortinet FortiOS
- CVE-2018-13361 Information disclosure in terra-master:terramaster operating system
- CVE-2018-13360 Cross-site scripting in terra-master:terramaster operating system
- CVE-2018-1336 In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
- CVE-2018-13359 Cross-site scripting in terra-master:terramaster operating system
- CVE-2018-13358 Command injection in terra-master:terramaster operating system
- CVE-2018-13357 Cross-site scripting in terra-master:terramaster operating system
- CVE-2018-13356 Privilege escalation in terra-master:terramaster operating system
- CVE-2018-13355 Missing authorization in terra-master:terramaster operating system
- CVE-2018-13354 Command injection in terra-master:terramaster operating system
- CVE-2018-13353 Command injection in terra-master:terramaster operating system
- CVE-2018-13352 Information disclosure in terra-master:terramaster operating system
- CVE-2018-13351 Cross-site scripting in terra-master:terramaster operating system
- CVE-2018-13350 SQL injection in terra-master:terramaster operating system
- CVE-2018-1335 Command injection in org.apache.tika:tika-core
- CVE-2018-13349 Cross-site scripting in terra-master:terramaster operating system
- CVE-2018-13348 Mercurial Improper Input Validation vulnerability
- CVE-2018-13347 Mercurial mishandles integer addition and subtraction
- CVE-2018-13346 Mercurial Improper Input Validation vulnerability
- CVE-2018-13342 Hardcoded credentials in linhandante:anda
- CVE-2018-13341 Weak cryptography in crestron:mc3 firmware
- CVE-2018-13340 Cross-site request forgery in gleeztech:gleez cms
- CVE-2018-1334 Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark
- CVE-2018-13339 Angular Redactor XSS Vulnerability
- CVE-2018-13338 Command injection in terra-master:terramaster operating system
- CVE-2018-13337 Auth bypass in terra-master:terramaster operating system
- CVE-2018-13336 Command injection in terra-master:terramaster operating system
- CVE-2018-13335 Cross-site scripting in terra-master:terramaster operating system
- CVE-2018-13334 Cross-site scripting in terra-master:terramaster operating system
- CVE-2018-13333 Cross-site scripting in terra-master:terramaster operating system
- CVE-2018-13332 Path traversal in terra-master:terramaster operating system
- CVE-2018-13331 Cross-site scripting in terra-master:terramaster operating system
- CVE-2018-13330 Command injection in terra-master:terramaster operating system
- CVE-2018-1333 DoS for HTTP/2 connections by crafted requests
- CVE-2018-13329 Cross-site scripting in terra-master:terramaster operating system
- CVE-2018-13328 Integer overflow in pfg project:pfg
- CVE-2018-13327 Integer overflow in chucunlingaigo project:chucunlingaigo
- CVE-2018-13326 Integer overflow in bittelux project:bittelux
- CVE-2018-13325 Integer overflow in boodskap:growchain
- CVE-2018-13324 Auth bypass in buffalo:ts5600d1206 firmware
- CVE-2018-13323 Cross-site scripting in buffalo:ts5600d1206 firmware
- CVE-2018-13322 Path traversal in buffalo:ts5600d1206 firmware
- CVE-2018-13321 Missing authorization in buffalo:ts5600d1206 firmware
- CVE-2018-13320 Command injection in buffalo:ts5600d1206 firmware
- CVE-2018-1332 Moderate severity vulnerability that affects org.apache.storm:storm-core
- CVE-2018-13319 Missing authorization in buffalo:ts5600d1206 firmware
- CVE-2018-13318 Command injection in buffalo:ts5600d1206 firmware
- CVE-2018-13317 Information disclosure in totolink:a3002ru firmware
- CVE-2018-13316 Command injection in totolink:a3002ru firmware
- CVE-2018-13315 Missing authorization in totolink:a3002ru firmware
- CVE-2018-13314 Command injection in totolink:a3002ru firmware
- CVE-2018-13313 Admin Password returned in password.htm
- CVE-2018-13312 Cross-site scripting in totolink:a3002ru firmware
- CVE-2018-13311 Command injection in totolink:a3002ru firmware
- CVE-2018-13310 Cross-site scripting in totolink:a3002ru firmware
- CVE-2018-1331 Code execution in org.apache.storm:storm-core
- CVE-2018-13309 Cross-site scripting in totolink:a3002ru firmware
- CVE-2018-13308 Cross-site scripting in totolink:a3002ru firmware
- CVE-2018-13307 Command injection in totolink:a3002ru firmware
- CVE-2018-13306 Command injection in totolink:a3002ru firmware
- CVE-2018-13305 Memory corruption in ffmpeg:ffmpeg
- CVE-2018-13304 Denial of service in ffmpeg:ffmpeg
- CVE-2018-13303 Null dereference in ffmpeg:ffmpeg