# Vulnerabilities published in 2018


- [CVE-2018-12820](https://insights.sbomify.com/CVE-2018-12820/): Memory corruption in Adobe Digital Editions (high 7.5)
- [CVE-2018-1282](https://insights.sbomify.com/CVE-2018-1282/): SQL Injection in hive-jdbc (critical 9.1)
- [CVE-2018-12819](https://insights.sbomify.com/CVE-2018-12819/): Memory corruption in Adobe Digital Editions (high 7.5)
- [CVE-2018-12818](https://insights.sbomify.com/CVE-2018-12818/): Memory corruption in Adobe Digital Editions (high 7.5)
- [CVE-2018-12817](https://insights.sbomify.com/CVE-2018-12817/): Memory corruption in adobe:digital editions (high 7.5)
- [CVE-2018-12816](https://insights.sbomify.com/CVE-2018-12816/): Memory corruption in Adobe Digital Editions (high 7.5)
- [CVE-2018-12815](https://insights.sbomify.com/CVE-2018-12815/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12814](https://insights.sbomify.com/CVE-2018-12814/): Memory corruption in Adobe Digital Editions (critical 9.8)
- [CVE-2018-12813](https://insights.sbomify.com/CVE-2018-12813/): Memory corruption in Adobe Digital Editions (critical 9.8)
- [CVE-2018-12812](https://insights.sbomify.com/CVE-2018-12812/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12811](https://insights.sbomify.com/CVE-2018-12811/): Memory corruption in Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 (critical 9.8)
- [CVE-2018-12810](https://insights.sbomify.com/CVE-2018-12810/): Memory corruption in Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 (critical 9.8)
- [CVE-2018-1281](https://insights.sbomify.com/CVE-2018-1281/): Misconfiguration in Apache MXNet (medium 6.5)
- [CVE-2018-12809](https://insights.sbomify.com/CVE-2018-12809/): Server-side request forgery in Adobe Experience Manager AEM 6.4 and earlier (high 7.5)
- [CVE-2018-12808](https://insights.sbomify.com/CVE-2018-12808/): Memory corruption in Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier (critical 9.8)
- [CVE-2018-12807](https://insights.sbomify.com/CVE-2018-12807/): Security feature bypass in Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 (medium 5.3)
- [CVE-2018-12806](https://insights.sbomify.com/CVE-2018-12806/): Cross-site scripting in Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 (medium 6.1)
- [CVE-2018-12805](https://insights.sbomify.com/CVE-2018-12805/): Privilege escalation in Adobe Connect 9.7.5 and earlier (critical 9.8)
- [CVE-2018-12804](https://insights.sbomify.com/CVE-2018-12804/): Auth bypass in Adobe Connect 9.7.5 and earlier (critical 9.8)
- [CVE-2018-12803](https://insights.sbomify.com/CVE-2018-12803/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-12802](https://insights.sbomify.com/CVE-2018-12802/): Security feature bypass in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12801](https://insights.sbomify.com/CVE-2018-12801/): Memory corruption in Acrobat and Reader (high 7.5)
- [CVE-2018-1280](https://insights.sbomify.com/CVE-2018-1280/): SQL injection in Greenplum Command Center (high 7.5)
- [CVE-2018-12799](https://insights.sbomify.com/CVE-2018-12799/): Memory corruption in Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier (high 8.8)
- [CVE-2018-12798](https://insights.sbomify.com/CVE-2018-12798/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12797](https://insights.sbomify.com/CVE-2018-12797/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 8.8)
- [CVE-2018-12796](https://insights.sbomify.com/CVE-2018-12796/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 8.8)
- [CVE-2018-12795](https://insights.sbomify.com/CVE-2018-12795/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 7.5)
- [CVE-2018-12794](https://insights.sbomify.com/CVE-2018-12794/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 8.8)
- [CVE-2018-12793](https://insights.sbomify.com/CVE-2018-12793/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-12792](https://insights.sbomify.com/CVE-2018-12792/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12791](https://insights.sbomify.com/CVE-2018-12791/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12790](https://insights.sbomify.com/CVE-2018-12790/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-1279](https://insights.sbomify.com/CVE-2018-1279/): RabbitMQ cluster compromise due to deterministically generated cookie (high 8.5)
- [CVE-2018-12789](https://insights.sbomify.com/CVE-2018-12789/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-12788](https://insights.sbomify.com/CVE-2018-12788/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 8.8)
- [CVE-2018-12787](https://insights.sbomify.com/CVE-2018-12787/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12786](https://insights.sbomify.com/CVE-2018-12786/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 7.5)
- [CVE-2018-12785](https://insights.sbomify.com/CVE-2018-12785/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12784](https://insights.sbomify.com/CVE-2018-12784/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12783](https://insights.sbomify.com/CVE-2018-12783/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 8.8)
- [CVE-2018-12782](https://insights.sbomify.com/CVE-2018-12782/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12781](https://insights.sbomify.com/CVE-2018-12781/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-12780](https://insights.sbomify.com/CVE-2018-12780/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-1278](https://insights.sbomify.com/CVE-2018-1278/): Missing authorization in Pivotal Application Service (medium 6.5)
- [CVE-2018-12779](https://insights.sbomify.com/CVE-2018-12779/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-12778](https://insights.sbomify.com/CVE-2018-12778/): Memory corruption in Acrobat and Reader (high 7.5)
- [CVE-2018-12777](https://insights.sbomify.com/CVE-2018-12777/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-12776](https://insights.sbomify.com/CVE-2018-12776/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 8.8)
- [CVE-2018-12775](https://insights.sbomify.com/CVE-2018-12775/): Memory corruption in Acrobat and Reader (high 7.5)
- [CVE-2018-12774](https://insights.sbomify.com/CVE-2018-12774/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-12773](https://insights.sbomify.com/CVE-2018-12773/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 8.8)
- [CVE-2018-12772](https://insights.sbomify.com/CVE-2018-12772/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 8.8)
- [CVE-2018-12771](https://insights.sbomify.com/CVE-2018-12771/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 8.8)
- [CVE-2018-12770](https://insights.sbomify.com/CVE-2018-12770/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 8.8)
- [CVE-2018-1277](https://insights.sbomify.com/CVE-2018-1277/): Denial of service in Garden-runC (medium 6.5)
- [CVE-2018-12769](https://insights.sbomify.com/CVE-2018-12769/): Use after free in Adobe Acrobat and Reader (high 7.8)
- [CVE-2018-12768](https://insights.sbomify.com/CVE-2018-12768/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 7.5)
- [CVE-2018-12767](https://insights.sbomify.com/CVE-2018-12767/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 7.5)
- [CVE-2018-12766](https://insights.sbomify.com/CVE-2018-12766/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 7.5)
- [CVE-2018-12765](https://insights.sbomify.com/CVE-2018-12765/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 7.5)
- [CVE-2018-12764](https://insights.sbomify.com/CVE-2018-12764/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-12763](https://insights.sbomify.com/CVE-2018-12763/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 7.5)
- [CVE-2018-12762](https://insights.sbomify.com/CVE-2018-12762/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 7.5)
- [CVE-2018-12761](https://insights.sbomify.com/CVE-2018-12761/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (medium 6.5)
- [CVE-2018-12760](https://insights.sbomify.com/CVE-2018-12760/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-1276](https://insights.sbomify.com/CVE-2018-1276/): Information disclosure in Windows2012R2 stemcell (medium 6.5)
- [CVE-2018-12759](https://insights.sbomify.com/CVE-2018-12759/): Memory corruption in Adobe Acrobat and Reader (high 7.8)
- [CVE-2018-12758](https://insights.sbomify.com/CVE-2018-12758/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12757](https://insights.sbomify.com/CVE-2018-12757/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (high 7.5)
- [CVE-2018-12756](https://insights.sbomify.com/CVE-2018-12756/): Use after free in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12755](https://insights.sbomify.com/CVE-2018-12755/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-12754](https://insights.sbomify.com/CVE-2018-12754/): Memory corruption in Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions (critical 9.8)
- [CVE-2018-1275](https://insights.sbomify.com/CVE-2018-1275/): Spring Framework has Improperly Implemented Security Check for Standard (critical 9.8)
- [CVE-2018-1274](https://insights.sbomify.com/CVE-2018-1274/): Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation (high 7.5)
- [CVE-2018-12739](https://insights.sbomify.com/CVE-2018-12739/): Cross-site request forgery in beescms:beescms (high 8.8)
- [CVE-2018-12735](https://insights.sbomify.com/CVE-2018-12735/): Information disclosure in saj-electric:saj solar inverter (high 7.5)
- [CVE-2018-1273](https://insights.sbomify.com/CVE-2018-1273/): VMware Tanzu Spring Data Commons Property Binder (critical 9.8, exploited in the wild)
- [CVE-2018-1272](https://insights.sbomify.com/CVE-2018-1272/): Possible privilege escalation in org.springframework:spring-core (high 7.5)
- [CVE-2018-12716](https://insights.sbomify.com/CVE-2018-12716/): Information disclosure in google:chromecast firmware (medium 4.3)
- [CVE-2018-12715](https://insights.sbomify.com/CVE-2018-12715/): Cross-site scripting in digisol:dg-hr3400 firmware (medium 6.1)
- [CVE-2018-12714](https://insights.sbomify.com/CVE-2018-12714/): Memory corruption in linux:linux kernel (critical 9.8)
- [CVE-2018-12713](https://insights.sbomify.com/CVE-2018-12713/): Race condition in gimp:gimp (critical 9.1)
- [CVE-2018-12712](https://insights.sbomify.com/CVE-2018-12712/): Path traversal in joomla:joomla\! (high 8.8)
- [CVE-2018-12711](https://insights.sbomify.com/CVE-2018-12711/): Cross-site scripting in joomla:joomla\! (medium 6.1)
- [CVE-2018-12710](https://insights.sbomify.com/CVE-2018-12710/): Information disclosure in dlink:dir-601 firmware (high 8.0)
- [CVE-2018-1271](https://insights.sbomify.com/CVE-2018-1271/): Path Traversal in org.springframework:spring-core (medium 5.9)
- [CVE-2018-12706](https://insights.sbomify.com/CVE-2018-12706/): Memory corruption in digisol:dg-br4000ng firmware (critical 9.8)
- [CVE-2018-12705](https://insights.sbomify.com/CVE-2018-12705/): Cross-site scripting in digisol:dg-br4000ng firmware (medium 6.1)
- [CVE-2018-12703](https://insights.sbomify.com/CVE-2018-12703/): Business logic in block18:block18 (high 7.5)
- [CVE-2018-12702](https://insights.sbomify.com/CVE-2018-12702/): Business logic in gve:globalvillage ecosystem (high 7.5)
- [CVE-2018-1270](https://insights.sbomify.com/CVE-2018-1270/): Spring Framework allows applications to expose STOMP over WebSocket endpoints (critical 9.8)
- [CVE-2018-12699](https://insights.sbomify.com/CVE-2018-12699/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-12698](https://insights.sbomify.com/CVE-2018-12698/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2018-12697](https://insights.sbomify.com/CVE-2018-12697/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2018-12696](https://insights.sbomify.com/CVE-2018-12696/): Cross-site scripting in mao10:mao10cms (medium 6.1)
- [CVE-2018-12695](https://insights.sbomify.com/CVE-2018-12695/): Cross-site scripting in mao10:mao10cms (medium 6.1)
- [CVE-2018-12694](https://insights.sbomify.com/CVE-2018-12694/): Denial of service in tp-link:tl-wa850re firmware (high 7.5)
- [CVE-2018-12693](https://insights.sbomify.com/CVE-2018-12693/): Memory corruption in tp-link:tl-wa850re firmware (medium 6.5)
- [CVE-2018-12692](https://insights.sbomify.com/CVE-2018-12692/): Command injection in tp-link:tl-wa850re firmware (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/126/