# Vulnerabilities published in 2018


- [CVE-2018-13302](https://insights.sbomify.com/CVE-2018-13302/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2018-13301](https://insights.sbomify.com/CVE-2018-13301/): Null dereference in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2018-13300](https://insights.sbomify.com/CVE-2018-13300/): Memory corruption in debian:debian linux (high 8.1)
- [CVE-2018-1330](https://insights.sbomify.com/CVE-2018-1330/): Crash when decoding malformed HTTP requests or malformed JSON payload (high 7.5)
- [CVE-2018-13299](https://insights.sbomify.com/CVE-2018-13299/): Path traversal in Calendar (medium 4.3)
- [CVE-2018-13298](https://insights.sbomify.com/CVE-2018-13298/): Other in Android Moments (medium 4.2)
- [CVE-2018-13297](https://insights.sbomify.com/CVE-2018-13297/): Information disclosure in Drive (medium 5.3)
- [CVE-2018-13296](https://insights.sbomify.com/CVE-2018-13296/): Denial of service in MailPlus Server (high 7.5)
- [CVE-2018-13295](https://insights.sbomify.com/CVE-2018-13295/): Information disclosure in Application Service (medium 4.3)
- [CVE-2018-13294](https://insights.sbomify.com/CVE-2018-13294/): Information disclosure in Application Service (medium 4.3)
- [CVE-2018-13293](https://insights.sbomify.com/CVE-2018-13293/): Cross-site scripting in DiskStation Manager (DSM) (medium 5.9)
- [CVE-2018-13292](https://insights.sbomify.com/CVE-2018-13292/): Information disclosure in Synology Router Manager (SRM) (medium 4.3)
- [CVE-2018-13291](https://insights.sbomify.com/CVE-2018-13291/): Information disclosure in DiskStation Manager (DSM) (medium 4.3)
- [CVE-2018-13290](https://insights.sbomify.com/CVE-2018-13290/): Information disclosure in Synology Router Manager (SRM) (medium 4.3)
- [CVE-2018-13289](https://insights.sbomify.com/CVE-2018-13289/): Information disclosure in Synology Router Manager (SRM) (medium 5.3)
- [CVE-2018-13288](https://insights.sbomify.com/CVE-2018-13288/): Information disclosure in File Station (medium 5.3)
- [CVE-2018-13287](https://insights.sbomify.com/CVE-2018-13287/): Misconfiguration in Synology Router Manager (SRM) (medium 6.5)
- [CVE-2018-13286](https://insights.sbomify.com/CVE-2018-13286/): Misconfiguration in DiskStation Manager (DSM) (medium 6.5)
- [CVE-2018-13285](https://insights.sbomify.com/CVE-2018-13285/): Command injection in Synology Router Manager (SRM) (high 7.5)
- [CVE-2018-13284](https://insights.sbomify.com/CVE-2018-13284/): Command injection in DiskStation Manager (DSM) (high 7.5)
- [CVE-2018-13283](https://insights.sbomify.com/CVE-2018-13283/): Other in SSL VPN Client (high 8.8)
- [CVE-2018-13282](https://insights.sbomify.com/CVE-2018-13282/): Auth bypass in Photo Station (medium 5.6)
- [CVE-2018-13281](https://insights.sbomify.com/CVE-2018-13281/): Information disclosure in DiskStation Manager (DSM) (medium 4.3)
- [CVE-2018-13280](https://insights.sbomify.com/CVE-2018-13280/): Weak cryptography in DiskStation Manager (DSM) (high 7.4)
- [CVE-2018-1328](https://insights.sbomify.com/CVE-2018-1328/): Cross-site Scripting in Apache Zeppelin (medium 6.1)
- [CVE-2018-1327](https://insights.sbomify.com/CVE-2018-1327/): Apache Struts REST Plugin can potentially allow a DoS attack (high 7.5)
- [CVE-2018-13259](https://insights.sbomify.com/CVE-2018-13259/): Command injection in zsh before 5.6 (critical 9.8)
- [CVE-2018-13258](https://insights.sbomify.com/CVE-2018-13258/): Tarball was missing .htaccess files (medium 5.3)
- [CVE-2018-13257](https://insights.sbomify.com/CVE-2018-13257/): Open redirect in blackboard:blackboard learn (medium 6.1)
- [CVE-2018-13256](https://insights.sbomify.com/CVE-2018-13256/): Cross-site scripting in chartered accountant \: auditor website project (medium 6.1)
- [CVE-2018-13252](https://insights.sbomify.com/CVE-2018-13252/): Cross-site scripting in entrustdatacard:syntera customization suite (medium 6.1)
- [CVE-2018-13251](https://insights.sbomify.com/CVE-2018-13251/): Denial of service in libming:libming (medium 6.5)
- [CVE-2018-13250](https://insights.sbomify.com/CVE-2018-13250/): Null dereference in libming:libming (medium 6.5)
- [CVE-2018-1325](https://insights.sbomify.com/CVE-2018-1325/): Cross-site Scripting in wicket-jquery-ui (medium 6.1)
- [CVE-2018-1324](https://insights.sbomify.com/CVE-2018-1324/): Apache Commons Compress vulnerable to denial of service due to infinite loop (medium 5.5)
- [CVE-2018-13233](https://insights.sbomify.com/CVE-2018-13233/): Integer overflow in gsi project:gsi (high 7.5)
- [CVE-2018-13232](https://insights.sbomify.com/CVE-2018-13232/): Integer overflow in entercoin project:entercoin (high 7.5)
- [CVE-2018-13231](https://insights.sbomify.com/CVE-2018-13231/): Integer overflow in entertoken project:entertoken (high 7.5)
- [CVE-2018-13230](https://insights.sbomify.com/CVE-2018-13230/): Integer overflow in destineed project:destineed (high 7.5)
- [CVE-2018-1323](https://insights.sbomify.com/CVE-2018-1323/): Path traversal in Apache Tomcat Connectors (high 7.5)
- [CVE-2018-13229](https://insights.sbomify.com/CVE-2018-13229/): Integer overflow in riptidecoin project:riptidecoin (high 7.5)
- [CVE-2018-13228](https://insights.sbomify.com/CVE-2018-13228/): Integer overflow in crowdnext project:crowdnext (high 7.5)
- [CVE-2018-13227](https://insights.sbomify.com/CVE-2018-13227/): Integer overflow in moneychainnet project:moneychainnet (high 7.5)
- [CVE-2018-13226](https://insights.sbomify.com/CVE-2018-13226/): Integer overflow in ylctoken project:ylctoken (high 7.5)
- [CVE-2018-13225](https://insights.sbomify.com/CVE-2018-13225/): Integer overflow in myylc project:myylc (high 7.5)
- [CVE-2018-13224](https://insights.sbomify.com/CVE-2018-13224/): Integer overflow in virtual energy units project:virtual energy units (high 7.5)
- [CVE-2018-13223](https://insights.sbomify.com/CVE-2018-13223/): Integer overflow in rtokenmain project:rtokenmain (high 7.5)
- [CVE-2018-13222](https://insights.sbomify.com/CVE-2018-13222/): Integer overflow in objectledger:objecttoken (high 7.5)
- [CVE-2018-13221](https://insights.sbomify.com/CVE-2018-13221/): Integer overflow in extreme coin project:extreme coin (high 7.5)
- [CVE-2018-13220](https://insights.sbomify.com/CVE-2018-13220/): Integer overflow in mavcash project:mavcash (high 7.5)
- [CVE-2018-1322](https://insights.sbomify.com/CVE-2018-1322/): Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope (medium 4.9)
- [CVE-2018-13219](https://insights.sbomify.com/CVE-2018-13219/): Integer overflow in yourcoin project:yourcoin (high 7.5)
- [CVE-2018-13218](https://insights.sbomify.com/CVE-2018-13218/): Integer overflow in ico dollar project:ico dollar (high 7.5)
- [CVE-2018-13217](https://insights.sbomify.com/CVE-2018-13217/): Integer overflow in cointoken project:cointoken (high 7.5)
- [CVE-2018-13216](https://insights.sbomify.com/CVE-2018-13216/): Integer overflow in greenmed:greenmed (high 7.5)
- [CVE-2018-13215](https://insights.sbomify.com/CVE-2018-13215/): Integer overflow in sample token project:sample token (high 7.5)
- [CVE-2018-13214](https://insights.sbomify.com/CVE-2018-13214/): Integer overflow in globalmiles:gmile (high 7.5)
- [CVE-2018-13213](https://insights.sbomify.com/CVE-2018-13213/): Integer overflow in travelcoin:travelcoin (high 7.5)
- [CVE-2018-13212](https://insights.sbomify.com/CVE-2018-13212/): Integer overflow in ethereumlegit project:ethereumlegit (high 7.5)
- [CVE-2018-13211](https://insights.sbomify.com/CVE-2018-13211/): Integer overflow in mytokenshr project:mytokenshr (high 7.5)
- [CVE-2018-13210](https://insights.sbomify.com/CVE-2018-13210/): Integer overflow in providence:providence crypto casino (high 7.5)
- [CVE-2018-1321](https://insights.sbomify.com/CVE-2018-1321/): High severity vulnerability that affects org.apache.syncope:syncope-core (high 7.2)
- [CVE-2018-13209](https://insights.sbomify.com/CVE-2018-13209/): Integer overflow in nectar project:nectar (high 7.5)
- [CVE-2018-13208](https://insights.sbomify.com/CVE-2018-13208/): Integer overflow in moneytree project:moneytree (high 7.5)
- [CVE-2018-13207](https://insights.sbomify.com/CVE-2018-13207/): Integer overflow in porn-coin:porncoin (high 7.5)
- [CVE-2018-13206](https://insights.sbomify.com/CVE-2018-13206/): Integer overflow in providencecasino project:providencecasino (high 7.5)
- [CVE-2018-13205](https://insights.sbomify.com/CVE-2018-13205/): Integer overflow in ohni:ohni 2 (high 7.5)
- [CVE-2018-13204](https://insights.sbomify.com/CVE-2018-13204/): Integer overflow in ethercash:ethercash (high 7.5)
- [CVE-2018-13203](https://insights.sbomify.com/CVE-2018-13203/): Integer overflow in airswaptoken project:airswaptoken (high 7.5)
- [CVE-2018-13202](https://insights.sbomify.com/CVE-2018-13202/): Integer overflow in mybo project:mybo (high 7.5)
- [CVE-2018-13201](https://insights.sbomify.com/CVE-2018-13201/): Integer overflow in titok - ticket token project:titok - ticket token (high 7.5)
- [CVE-2018-13200](https://insights.sbomify.com/CVE-2018-13200/): Integer overflow in dateme project:dateme (high 7.5)
- [CVE-2018-1320](https://insights.sbomify.com/CVE-2018-1320/): Improper Input Validation in Apache Thrift (high 7.5)
- [CVE-2018-13199](https://insights.sbomify.com/CVE-2018-13199/): Integer overflow in ethereumblack project:ethereumblack (high 7.5)
- [CVE-2018-13198](https://insights.sbomify.com/CVE-2018-13198/): Integer overflow in stex exchange ico project:stex exchange ico (high 7.5)
- [CVE-2018-13197](https://insights.sbomify.com/CVE-2018-13197/): Integer overflow in welfare token fund project:welfare token fund (high 7.5)
- [CVE-2018-13196](https://insights.sbomify.com/CVE-2018-13196/): Integer overflow in t-swap-token project:t-swap-token (high 7.5)
- [CVE-2018-13195](https://insights.sbomify.com/CVE-2018-13195/): Integer overflow in cranooadvanced project:cranooadvanced (high 7.5)
- [CVE-2018-13194](https://insights.sbomify.com/CVE-2018-13194/): Integer overflow in ttcoin project:ttcoin (high 7.5)
- [CVE-2018-13193](https://insights.sbomify.com/CVE-2018-13193/): Integer overflow in hentaisolo project:hentaisolo (high 7.5)
- [CVE-2018-13192](https://insights.sbomify.com/CVE-2018-13192/): Integer overflow in jobscoin project:jobscoin (high 7.5)
- [CVE-2018-13191](https://insights.sbomify.com/CVE-2018-13191/): Integer overflow in supercarboncoin project:supercarboncoin (high 7.5)
- [CVE-2018-13190](https://insights.sbomify.com/CVE-2018-13190/): Integer overflow in dvchain project:dvchain (high 7.5)
- [CVE-2018-1319](https://insights.sbomify.com/CVE-2018-1319/): Other in Apache Allura (medium 6.1)
- [CVE-2018-13189](https://insights.sbomify.com/CVE-2018-13189/): Integer overflow in unolabo project:unolabo (high 7.5)
- [CVE-2018-13188](https://insights.sbomify.com/CVE-2018-13188/): Integer overflow in mybo project:mybo (high 7.5)
- [CVE-2018-13187](https://insights.sbomify.com/CVE-2018-13187/): Integer overflow in cibnliveinteractive project:cibnliveinteractive (high 7.5)
- [CVE-2018-13186](https://insights.sbomify.com/CVE-2018-13186/): Integer overflow in mmtcoin project:mmtcoin (high 7.5)
- [CVE-2018-13185](https://insights.sbomify.com/CVE-2018-13185/): Integer overflow in appcoins project:appcoins (high 7.5)
- [CVE-2018-13184](https://insights.sbomify.com/CVE-2018-13184/): Integer overflow in travelzeditoken project:travelzeditoken (high 7.5)
- [CVE-2018-13183](https://insights.sbomify.com/CVE-2018-13183/): Integer overflow in jwctoken project:jwctoken (high 7.5)
- [CVE-2018-13182](https://insights.sbomify.com/CVE-2018-13182/): Integer overflow in loncoin project:loncoin (high 7.5)
- [CVE-2018-13181](https://insights.sbomify.com/CVE-2018-13181/): Integer overflow in cointroops project:cointroops (high 7.5)
- [CVE-2018-13180](https://insights.sbomify.com/CVE-2018-13180/): Integer overflow in immcoin project:immcoin (high 7.5)
- [CVE-2018-1318](https://insights.sbomify.com/CVE-2018-1318/): Denial of service in Apache Traffic Server (high 7.5)
- [CVE-2018-13179](https://insights.sbomify.com/CVE-2018-13179/): Integer overflow in aircontacttoken project:aircontacttoken (high 7.5)
- [CVE-2018-13178](https://insights.sbomify.com/CVE-2018-13178/): Integer overflow in ecpoints project:ecpoints (high 7.5)
- [CVE-2018-13177](https://insights.sbomify.com/CVE-2018-13177/): Integer overflow in miningrigrentalstoken project:miningrigrentalstoken (high 7.5)
- [CVE-2018-13176](https://insights.sbomify.com/CVE-2018-13176/): Integer overflow in trustzen project:trustzen (high 7.5)
- [CVE-2018-13175](https://insights.sbomify.com/CVE-2018-13175/): Integer overflow in aichain project:aichain (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/122/