Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 128 of 163.
- CVE-2018-12565 Deserialization in debian:debian linux
- CVE-2018-12564 Server-side request forgery in debian:debian linux
- CVE-2018-12563 Path traversal in linaro:lava
- CVE-2018-12562 Command injection in cantata project:cantata
- CVE-2018-12561 Other in cantata project:cantata
- CVE-2018-12560 Path traversal in cantata project:cantata
- CVE-2018-1256 Issuer validation regression in Spring Cloud SSO Connector
- CVE-2018-12559 Path traversal in cantata project:cantata
- CVE-2018-12558 Denial of service in email\:\
- CVE-2018-12557 Information disclosure in zuul-ci:zuul
- CVE-2018-12556 Security feature bypass in yarnpkg:website
- CVE-2018-12551 Auth bypass in Eclipse Mosquitto
- CVE-2018-12550 Misconfiguration in Eclipse Mosquitto
- CVE-2018-1255 Reflected Cross-Site Scripting Vulnerability
- CVE-2018-12549 Null dereference in Eclipse OpenJ9
- CVE-2018-12548 Memory corruption in Eclipse OpenJ9
- CVE-2018-12547 Memory corruption in Eclipse OpenJ9
- CVE-2018-12546 Security feature bypass in Eclipse Mosquitto
- CVE-2018-12545 Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
- CVE-2018-12544 Moderate severity vulnerability that affects io.vertx:vertx-core
- CVE-2018-12543 Denial of service in Eclipse Mosquitto
- CVE-2018-12542 Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location
- CVE-2018-12541 Excessive memory allocation
- CVE-2018-12540 High severity vulnerability that affects io.vertx:vertx-web
- CVE-2018-1254 Cross-site scripting in RSA Authentication Manager
- CVE-2018-12539 Code injection in Eclipse OpenJ9
- CVE-2018-12538 Access and integrity issue within Eclipse Jetty
- CVE-2018-12537 Moderate severity vulnerability that affects io.vertx:vertx-core
- CVE-2018-12536 Eclipse Jetty Server generates error message containing sensitive information
- CVE-2018-12534 SQL injection in quick chat project:quick chat
- CVE-2018-12533 Arbitrary code execution in Richfaces
- CVE-2018-12532 RichFaces vulnerable to Expression Language Injection
- CVE-2018-12531 Code injection in metinfo:metinfo
- CVE-2018-12530 Path traversal in metinfo:metinfo
- CVE-2018-1253 Stored cross-site scripting vulnerability
- CVE-2018-12529 Cross-site request forgery in intex:n150 firmware
- CVE-2018-12528 File upload in intex:n150 firmware
- CVE-2018-12526 Hardcoded credentials in telesquare:sdt-cs3b1 firmware
- CVE-2018-12525 Information disclosure in perfsonar:monitoring and debugging dashboard
- CVE-2018-12524 Information disclosure in perfsonar:monitoring and debugging dashboard
- CVE-2018-12523 Information disclosure in perfsonar:monitoring and debugging dashboard
- CVE-2018-12522 Information disclosure in perfsonar:monitoring and debugging dashboard
- CVE-2018-12520 Weak cryptography in ntop:ntopng
- CVE-2018-1252 RSA Web Threat Detection SQL Injection Vulnerability
- CVE-2018-12519 File upload in codenx:shopnx
- CVE-2018-12511 Integer overflow in substratum:substratum
- CVE-2018-1251 Open redirect in Dell EMC Unity
- CVE-2018-12504 Denial of service in tinyexr project:tinyexr
- CVE-2018-12503 Memory corruption in tinyexr project:tinyexr
- CVE-2018-12501 Cross-site scripting in nagios:fusion
- CVE-2018-1250 Missing authorization in Dell EMC Unity
- CVE-2018-12499 Security feature bypass in motorola:mbp853 firmware
- CVE-2018-12498 SQL injection in icmsdev:icms
- CVE-2018-12495 Memory corruption in debian:debian linux
- CVE-2018-12494 Path traversal in publiccms:publiccms
- CVE-2018-12493 Path traversal in publiccms:publiccms
- CVE-2018-12492 Path traversal in phpok:phpok
- CVE-2018-12491 File upload in phpok:phpok
- CVE-2018-1249 Security feature bypass in iDRAC9
- CVE-2018-12483 Command injection in ocsinventory-ng:ocsinventory ng
- CVE-2018-12482 SQL injection in ocsinventory-ng:ocsinventory ng
- CVE-2018-12481 Information disclosure in the olive tree ftp server project:the olive tree ftp server
- CVE-2018-12480 NetIQ Access Manager XSS vulnerability in versions prior to 4.4 SP3
- CVE-2018-1248 Open redirect in RSA Authentication Manager Security Console, Operation Console and Self-Service Console
- CVE-2018-12479 Request controller allows to create requests with arbitrary request IDs
- CVE-2018-12478 obs-service-replace_using_package_version allows to specify arbitrary input files
- CVE-2018-12477 obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories
- CVE-2018-12476 obs-service-extract_file's outfilename parameter allows to write files outside of package directory
- CVE-2018-12475 obs-service-download_files allows downloading from localhost or intranet hosts
- CVE-2018-12474 Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scm
- CVE-2018-12473 path traversal in obs-service-tar_scm
- CVE-2018-12472 Authentication bypass in sibling check
- CVE-2018-12471 External Entity processing in the RegistrationSharing module
- CVE-2018-12470 SQL injection in RegistrationSharing module
- CVE-2018-1247 XML external entity in RSA Authentication Manager Security Console
- CVE-2018-12469 Null dereference in Micro Focus Enterprise Developer, Micro Focus Enterprise Server
- CVE-2018-12468 Arbitrary File Upload in GroupWise Administration Console
- CVE-2018-12467 delete package via link exploit in open buildservice
- CVE-2018-12466 openbuildservice allowed deleting packages via project links
- CVE-2018-12465 Remote Code Execution in Micro Focus Secure Messaging Gateway
- CVE-2018-12464 Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway
- CVE-2018-12463 MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities
- CVE-2018-12462 NetIQ iManager XSS vulnerabilities
- CVE-2018-12461 Certificate Revocation Check failure
- CVE-2018-12460 Null dereference in ffmpeg:ffmpeg
- CVE-2018-1246 Cross-site scripting in Dell EMC Unity
- CVE-2018-12459 Denial of service in ffmpeg:ffmpeg
- CVE-2018-12458 Denial of service in debian:debian linux
- CVE-2018-12457 express-cart allows any user to create an admin user
- CVE-2018-12456 Cross-site request forgery in intelbras:nplug firmware
- CVE-2018-12455 Auth bypass in intelbras:nplug firmware
- CVE-2018-12454 Weak cryptography in 1000guess:1000 guess
- CVE-2018-12453 Memory corruption in redislabs:redis
- CVE-2018-1245 Authorization ByPass Vulnerability
- CVE-2018-12449 Other in Whale Browser Installer
- CVE-2018-12448 Security feature bypass in Whale Browser
- CVE-2018-12447 Integer overflow in libbpg project:libbpg
- CVE-2018-12446 Auth bypass in dropbox:dropbox
- CVE-2018-12445 Auth bypass in dropbox:dropbox
- CVE-2018-12441 Misconfiguration in corsair:corsair utility engine