Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 124 of 163.
- CVE-2018-13065 Cross-site scripting in owasp:modsecurity
- CVE-2018-13063 Missing authorization in easyappointments:easy\!appointments
- CVE-2018-13060 Security feature bypass in easyappointments:easy\!appointments
- CVE-2018-1306 Exposure of Sensitive Information in Apache Pluto
- CVE-2018-13056 Path traversal in zzcms:zzcms
- CVE-2018-13055 MantisBT allows XSS via View Filters page
- CVE-2018-13054 Privilege escalation in debian:debian linux
- CVE-2018-13053 Integer overflow in canonical:ubuntu linux
- CVE-2018-13052 Privilege escalation in cyberark:endpoint privilege manager
- CVE-2018-13050 SQL injection in zohocorp:manageengine applications manager
- CVE-2018-1305 Apache Tomcat information exposure vulnerability
- CVE-2018-13049 SQL injection in glpi-project:glpi
- CVE-2018-13045 SQL injection in yeswiki:cercopitheque
- CVE-2018-13043 Code injection in canonical:ubuntu linux
- CVE-2018-13042 Denial of service in 1password:1password
- CVE-2018-13041 Integer overflow in linktoken project:linktoken
- CVE-2018-13040 Cross-site request forgery in opendesa:opensid
- CVE-2018-1304 Apache Tomcat unauthorized access vulnerability
- CVE-2018-13039 Cross-site scripting in opendesa:opensid
- CVE-2018-13038 File upload in opendesa:opensid
- CVE-2018-13037 Memory corruption in jpeg-compressor project:jpeg compressor
- CVE-2018-13034 Path traversal in jester project:jester
- CVE-2018-13033 Denial of service in gnu:binutils
- CVE-2018-13032 Cross-site request forgery in ecessa:shieldlink sl175ehq firmware
- CVE-2018-13031 Cross-site request forgery in damicms:damicms
- CVE-2018-13030 Memory corruption in jpeg-compressor project:jpeg compressor
- CVE-2018-1303 Memory corruption in Apache HTTP Server
- CVE-2018-13026 Memory corruption in gopro:gpmf-parser
- CVE-2018-13025 Path traversal in yxcms:yxcms
- CVE-2018-13024 File upload in metinfo:metinfo
- CVE-2018-13023 Command injection in mi:miwifi os
- CVE-2018-13022 Cross-site scripting in mi:miwifi os
- CVE-2018-13021 File upload in hongcms project:hongcms
- CVE-2018-1302 Use after free in Apache HTTP Server
- CVE-2018-13014 Weak cryptography in safensoft:enterprise suite
- CVE-2018-13013 Security feature bypass in safensoft:enterprise suite
- CVE-2018-13012 Supply chain in safensoft:softcontrol enterprise suite
- CVE-2018-13011 Memory corruption in gopro:gpmf-parser
- CVE-2018-13010 Cross-site request forgery in wstmall:wstmall
- CVE-2018-1301 Memory corruption in Apache HTTP Server
- CVE-2018-13009 Memory corruption in gopro:gpmf-parser
- CVE-2018-13008 Memory corruption in gopro:gpmf-parser
- CVE-2018-13007 Memory corruption in gopro:gpmf-parser
- CVE-2018-13006 Memory corruption in canonical:ubuntu linux
- CVE-2018-13005 Memory corruption in canonical:ubuntu linux
- CVE-2018-13003 OpenTSDB Cross-site Scripting vulnerability
- CVE-2018-13002 Cross-site scripting in weblication:cms core \& grid
- CVE-2018-13001 Cross-site scripting in sandoba:cp\
- CVE-2018-13000 Cross-site scripting in anelectron:advanced electron forum
- CVE-2018-12999 Path traversal in zohocorp:manageengine desktop central
- CVE-2018-12998 Cross-site scripting in zohocorp:firewall analyzer
- CVE-2018-12997 Missing authorization in zohocorp:firewall analyzer
- CVE-2018-12996 Cross-site scripting in zohocorp:manageengine applications manager
- CVE-2018-12995 File upload in onefilecms:onefilecms
- CVE-2018-12994 Code injection in onefilecms:onefilecms
- CVE-2018-12993 Auth bypass in onefilecms:onefilecms
- CVE-2018-12992 Cross-site scripting in maelostore project:maelostore
- CVE-2018-12990 Information disclosure in phpwcms:phpwcms
- CVE-2018-1299 Path traversal in Apache Allura
- CVE-2018-12989 Privilege escalation in pearsonvue:console 8
- CVE-2018-12988 Path traversal in greencms:greencms
- CVE-2018-12984 Auth bypass in hycus cms project:hycus cms
- CVE-2018-12983 Memory corruption in podofo project:podofo
- CVE-2018-12982 Memory corruption in podofo project:podofo
- CVE-2018-12981 Cross-site scripting in wago:762-3000 firmware
- CVE-2018-12980 File upload in wago:762-3000 firmware
- CVE-2018-1298 Moderate severity vulnerability that affects org.apache.qpid:apache-qpid-broker-j
- CVE-2018-12979 File upload in wago:762-3000 firmware
- CVE-2018-12977 SQL injection in softexpert:excellence suite
- CVE-2018-12976 Path traversal in godoc:go doc dot org
- CVE-2018-12975 Weak cryptography in cryptosaga:cryptosaga
- CVE-2018-12973 OpenTSDB Cross-site Scripting vulnerability
- CVE-2018-12972 OpenTSDB vulnerable to OS Command Injection
- CVE-2018-12971 Cross-site request forgery in easycms:easycms
- CVE-2018-1297 Missing certificate validation in Apache JMeter
- CVE-2018-1296 Exposure of Sensitive Information to an Unauthorized Actor in Hadoop
- CVE-2018-12959 Business logic in aditustoken project:aditustoken
- CVE-2018-1295 Apache serialization mechanism does not have a list of classes allowed for serialization/deserialization
- CVE-2018-12944 Cross-site scripting in seeddms:seeddms
- CVE-2018-12943 Cross-site scripting in seeddms:seeddms
- CVE-2018-12942 SQL injection in seeddms:seeddms
- CVE-2018-12941 Command injection in seeddms:seeddms
- CVE-2018-12940 File upload in seeddms:seeddms
- CVE-2018-1294 Improper Input Validation Apache Commons Email
- CVE-2018-12939 Path traversal in seeddms:seeddms
- CVE-2018-12934 Denial of service in gnu:binutils
- CVE-2018-12933 Memory corruption in winehq:wine
- CVE-2018-12932 Memory corruption in winehq:wine
- CVE-2018-12931 Memory corruption in canonical:ubuntu linux
- CVE-2018-12930 Memory corruption in canonical:ubuntu linux
- CVE-2018-12929 Use after free in canonical:ubuntu linux
- CVE-2018-12928 Null dereference in canonical:ubuntu linux
- CVE-2018-12927 Information disclosure in northernnep:northern electric \& power inverter firmware
- CVE-2018-12926 Information disclosure in pharoscontrols:pharos firmware
- CVE-2018-12925 Auth bypass in lantronix:mss firmware
- CVE-2018-12924 Hardcoded credentials in eztcp:cie-h10 firmware
- CVE-2018-12923 Information disclosure in bwssystems:ha bridge
- CVE-2018-12922 Missing authorization in vertiv:liebert intellislot firmware
- CVE-2018-12921 Information disclosure in electroind:gaugetech nexus firmware
- CVE-2018-12920 Information disclosure in flir:brickstream 2300 firmware