Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 127 of 163.
- CVE-2018-12691 Race condition in onosproject:onos
- CVE-2018-1269 Denial of service in Loggregator
- CVE-2018-12689 Other in phpldapadmin project:phpldapadmin
- CVE-2018-12688 Memory corruption in tinyexr project:tinyexr
- CVE-2018-12687 Denial of service in tinyexr project:tinyexr
- CVE-2018-12684 Memory corruption in civetweb project:civetweb
- CVE-2018-12680 CoAPthon DoS due to Exceptions
- CVE-2018-1268 Missing authorization in Loggregator
- CVE-2018-12679 CoAPthon3 vulnerable to Deserialization of Untrusted Data
- CVE-2018-12678 Server-side request forgery in portainer:portainer
- CVE-2018-12675 Open redirect in sv3c:h.264 poe ip camera firmware
- CVE-2018-12674 Information disclosure in sv3c:h.264 poe ip camera firmware
- CVE-2018-12673 Information disclosure in sv3c:h.264 poe ip camera firmware
- CVE-2018-12672 Cross-site scripting in sv3c:h.264 poe ip camera firmware
- CVE-2018-12671 Information disclosure in sv3c:h.264 poe ip camera firmware
- CVE-2018-12670 Command injection in sv3c:h.264 poe ip camera firmware
- CVE-2018-1267 Misconfiguration in cloudfoundry:silk-release
- CVE-2018-12669 Missing authorization in sv3c:h.264 poe ip camera firmware
- CVE-2018-12668 Hardcoded credentials in sv3c:h.264 poe ip camera firmware
- CVE-2018-12667 Auth bypass in sv3c:h.264 poe ip camera firmware
- CVE-2018-12666 Auth bypass in sv3c:h.264 poe ip camera firmware
- CVE-2018-1266 Path traversal in cloudfoundry:capi-release
- CVE-2018-12659 Cross-site request forgery in slims akasia project:slims akasia
- CVE-2018-12658 Cross-site scripting in slims project:slims
- CVE-2018-12657 Cross-site scripting in slims akasia project:slims akasia
- CVE-2018-12656 Cross-site scripting in slims akasia project:slims akasia
- CVE-2018-12655 Cross-site scripting in slims akasia project:slims akasia
- CVE-2018-12654 Cross-site scripting in slims akasia project:slims akasia
- CVE-2018-12653 Cross-site scripting in myadrenalin:adrenalin
- CVE-2018-12652 Cross-site scripting in myadrenalin:adrenalin
- CVE-2018-12651 Cross-site scripting in myadrenalin:human resource management software
- CVE-2018-12650 Cross-site scripting in myadrenalin:human resource management software
- CVE-2018-1265 Path traversal in Diego
- CVE-2018-12649 Security feature bypass in misp-project:misp
- CVE-2018-12648 Null dereference in exempi project:exempi
- CVE-2018-12642 Froxlor Incorrect Access Control
- CVE-2018-12641 Denial of service in gnu:binutils
- CVE-2018-12640 Memory corruption in insteon:2864-222 firmware
- CVE-2018-1264 Log Cache logs UAA client secret on startup
- CVE-2018-12638 Cross-site scripting in bose:soundtouch
- CVE-2018-12636 SQL injection in ithemes:security
- CVE-2018-12635 Missing authorization in circontrol:scada
- CVE-2018-12634 Information disclosure in circontrol:circarlife scada
- CVE-2018-12633 Race condition in linux:linux kernel
- CVE-2018-12632 Information disclosure in redatam:redatam
- CVE-2018-12631 Path traversal in redatam:redatam
- CVE-2018-12630 SQL injection in nmark:nmcms
- CVE-2018-1263 spring-integration-zip Arbitrary File Write
- CVE-2018-12628 Cross-site request forgery in eventum project:eventum
- CVE-2018-12627 Cross-site scripting in eventum project:eventum
- CVE-2018-12626 Cross-site scripting in eventum project:eventum
- CVE-2018-12625 Cross-site scripting in eventum project:eventum
- CVE-2018-12624 Cross-site scripting in eventum project:eventum
- CVE-2018-12623 Cross-site scripting in eventum project:eventum
- CVE-2018-12622 Cross-site scripting in eventum project:eventum
- CVE-2018-12621 Open redirect in eventum project:eventum
- CVE-2018-1262 UAA privilege escalation across identity zones
- CVE-2018-12617 Integer overflow in canonical:ubuntu linux
- CVE-2018-12615 Phusion Passenger incorrect permission assignment
- CVE-2018-12613 phpMyAdmin Improper Authentication
- CVE-2018-12611 Path traversal in open-xchange:open-xchange appsuite
- CVE-2018-12610 Information disclosure in open-xchange:open-xchange appsuite
- CVE-2018-1261 Path traversal in org.springframework.integration:spring-integration-zip
- CVE-2018-12609 Server-side request forgery in open-xchange:open-xchange appsuite
- CVE-2018-12608 Docker Authentication Bypass
- CVE-2018-12607 Cross-site scripting in gitlab:gitlab
- CVE-2018-12606 Cross-site scripting in gitlab:gitlab
- CVE-2018-12605 Cross-site scripting in gitlab:gitlab
- CVE-2018-12604 Information disclosure in njtech:greencms
- CVE-2018-12603 Cross-site request forgery in lfdycms:lfcms
- CVE-2018-12602 Cross-site request forgery in lfdycms:lfcms
- CVE-2018-12601 Memory corruption in debian:debian linux
- CVE-2018-12600 Memory corruption in canonical:ubuntu linux
- CVE-2018-1260 Spring Security OAuth vulnerable to remote code execution (RCE)
- CVE-2018-12599 Memory corruption in canonical:ubuntu linux
- CVE-2018-12596 Missing authorization in episerver:ektron cms
- CVE-2018-12594 Information disclosure in reliablecontrols:mach-prowebcom firmware
- CVE-2018-12592 Information disclosure in polycom:realpresence web suite
- CVE-2018-12591 Command injection in ubnt:edgeswitch firmware
- CVE-2018-12590 Code injection in ui:edgeswitch firmware
- CVE-2018-1259 Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references
- CVE-2018-12589 Code injection in polarisoffice:polaris office 2017
- CVE-2018-12588 Cross-site scripting in public knowledge project:open monograph press
- CVE-2018-12587 Cross-site scripting in german spelling dictionary project:german spelling dictionary
- CVE-2018-12585 XML external entity in opcfoundation:ua-.net-legacy
- CVE-2018-12584 Memory corruption in debian:debian linux
- CVE-2018-12583 Cross-site request forgery in akcms project:akcms
- CVE-2018-12582 Cross-site request forgery in akcms project:akcms
- CVE-2018-12581 phpMyAdmin XSS Vulnerability
- CVE-2018-12580 Cross-site scripting in dragonbyte-tech:vbsecurity
- CVE-2018-1258 Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass
- CVE-2018-12579 Auth bypass in oxid-esales:eshop
- CVE-2018-12578 Memory corruption in sam2p project:sam2p
- CVE-2018-12577 Command injection in tp-link:tl-wr841n firmware
- CVE-2018-12576 Other in tp-link:tl-wr841n firmware
- CVE-2018-12575 Auth bypass in tp-link:tl-wr841n firmware
- CVE-2018-12574 Cross-site request forgery in tp-link:tl-wr841n firmware
- CVE-2018-12572 Information disclosure in avast:free antivirus
- CVE-2018-12571 Server-side request forgery in microsoft:forefront unified access gateway
- CVE-2018-1257 Denial of Service in org.springframework:spring-core