# Vulnerabilities published in 2018


- [CVE-2018-12440](https://insights.sbomify.com/CVE-2018-12440/): Information disclosure in google:boringssl (medium 4.7)
- [CVE-2018-1244](https://insights.sbomify.com/CVE-2018-1244/): iDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent. (high 8.8)
- [CVE-2018-12439](https://insights.sbomify.com/CVE-2018-12439/): Information disclosure in matrixssl:matrixssl (medium 4.7)
- [CVE-2018-12438](https://insights.sbomify.com/CVE-2018-12438/): Weak cryptography in libsunec project:libsunec (medium 4.9)
- [CVE-2018-12437](https://insights.sbomify.com/CVE-2018-12437/): Information disclosure in libtom:libtomcrypt (medium 4.9)
- [CVE-2018-12436](https://insights.sbomify.com/CVE-2018-12436/): Information disclosure in wolfssl:wolfssl (medium 4.7)
- [CVE-2018-12435](https://insights.sbomify.com/CVE-2018-12435/): Information disclosure in botan project:botan (medium 5.9)
- [CVE-2018-12434](https://insights.sbomify.com/CVE-2018-12434/): Information disclosure in openbsd:libressl (medium 4.7)
- [CVE-2018-12433](https://insights.sbomify.com/CVE-2018-12433/): Weak cryptography in cryptlib:cryptlib (medium 4.9)
- [CVE-2018-12432](https://insights.sbomify.com/CVE-2018-12432/): Cross-site Scripting in JavaMelody (medium 6.1)
- [CVE-2018-12431](https://insights.sbomify.com/CVE-2018-12431/): Cross-site scripting in seacms:seacms (medium 4.8)
- [CVE-2018-1243](https://insights.sbomify.com/CVE-2018-1243/): iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability (high 7.5)
- [CVE-2018-12429](https://insights.sbomify.com/CVE-2018-12429/): Cross-site scripting in jeesns:jeesns (medium 5.4)
- [CVE-2018-12426](https://insights.sbomify.com/CVE-2018-12426/): File upload in 3cx:live chat (critical 9.8)
- [CVE-2018-12423](https://insights.sbomify.com/CVE-2018-12423/): Matrix Synapse Authorization Error (high 7.5)
- [CVE-2018-12422](https://insights.sbomify.com/CVE-2018-12422/): Memory corruption in gnome:evolution (critical 9.8)
- [CVE-2018-12421](https://insights.sbomify.com/CVE-2018-12421/): Auth bypass in ltb-project:ldap tool box self service password (critical 9.8)
- [CVE-2018-12420](https://insights.sbomify.com/CVE-2018-12420/): Weak cryptography in icehrm:icehrm (high 7.5)
- [CVE-2018-1242](https://insights.sbomify.com/CVE-2018-1242/): Command injection in Dell EMC RecoverPoint (medium 6.5)
- [CVE-2018-12418](https://insights.sbomify.com/CVE-2018-12418/): Junrar vulnerable to Infinite Loop (medium 5.5)
- [CVE-2018-12416](https://insights.sbomify.com/CVE-2018-12416/): TIBCO DataSynapse GridServer Manager Component Vulnerable to Cross-Site Request Forgery (high 7.1)
- [CVE-2018-12415](https://insights.sbomify.com/CVE-2018-12415/): TIBCO Enterprise Message Service Vulnerable to CSRF Attacks (high 7.5)
- [CVE-2018-12414](https://insights.sbomify.com/CVE-2018-12414/): TIBCO Rendezvous Vulnerable to CSRF Attacks (high 7.5)
- [CVE-2018-12413](https://insights.sbomify.com/CVE-2018-12413/): TIBCO Messaging - Apache Kafka Distribution - Schema Repository Vulnerable to CSRF Attacks (high 7.5)
- [CVE-2018-12412](https://insights.sbomify.com/CVE-2018-12412/): TIBCO FTL Realm Server Vulnerable to CSRF Attacks (high 7.5)
- [CVE-2018-12411](https://insights.sbomify.com/CVE-2018-12411/): TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks (high 7.5)
- [CVE-2018-12410](https://insights.sbomify.com/CVE-2018-12410/): TIBCO Spotfire Statistics Services remote execution vulnerabilities (critical 9.8)
- [CVE-2018-1241](https://insights.sbomify.com/CVE-2018-1241/): Information disclosure in Dell EMC RecoverPoint (high 8.8)
- [CVE-2018-12409](https://insights.sbomify.com/CVE-2018-12409/): Cross-site scripting in tibco:silver fabric (medium 6.1)
- [CVE-2018-12408](https://insights.sbomify.com/CVE-2018-12408/): TIBCO ActiveMatrix BusinessWorks 5.X XML eXternal Entity Vulnerability (high 7.5)
- [CVE-2018-12407](https://insights.sbomify.com/CVE-2018-12407/): Memory corruption in Firefox (critical 9.8)
- [CVE-2018-12406](https://insights.sbomify.com/CVE-2018-12406/): Memory corruption in Firefox (high 8.8)
- [CVE-2018-12405](https://insights.sbomify.com/CVE-2018-12405/): Memory corruption in Firefox (critical 9.8)
- [CVE-2018-12404](https://insights.sbomify.com/CVE-2018-12404/): Weak cryptography in Network Security Services (NSS) (medium 5.9)
- [CVE-2018-12403](https://insights.sbomify.com/CVE-2018-12403/): Security feature bypass in Firefox (medium 5.3)
- [CVE-2018-12402](https://insights.sbomify.com/CVE-2018-12402/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2018-12401](https://insights.sbomify.com/CVE-2018-12401/): Denial of service in Firefox (high 7.5)
- [CVE-2018-12400](https://insights.sbomify.com/CVE-2018-12400/): Information disclosure in Firefox (medium 5.3)
- [CVE-2018-1240](https://insights.sbomify.com/CVE-2018-1240/): Information disclosure in ViPR Controller (high 8.0)
- [CVE-2018-12399](https://insights.sbomify.com/CVE-2018-12399/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2018-12398](https://insights.sbomify.com/CVE-2018-12398/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2018-12397](https://insights.sbomify.com/CVE-2018-12397/): Security feature bypass in Firefox (high 7.1)
- [CVE-2018-12396](https://insights.sbomify.com/CVE-2018-12396/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2018-12395](https://insights.sbomify.com/CVE-2018-12395/): Security feature bypass in Firefox (high 7.5)
- [CVE-2018-12393](https://insights.sbomify.com/CVE-2018-12393/): Integer overflow in Firefox (high 7.5)
- [CVE-2018-12392](https://insights.sbomify.com/CVE-2018-12392/): Memory corruption in Firefox (critical 9.8)
- [CVE-2018-12391](https://insights.sbomify.com/CVE-2018-12391/): Security feature bypass in Firefox (high 8.8)
- [CVE-2018-12390](https://insights.sbomify.com/CVE-2018-12390/): Memory corruption in Firefox (critical 9.8)
- [CVE-2018-1239](https://insights.sbomify.com/CVE-2018-1239/): Command injection in Unity Operating Environment (OE) (high 7.2)
- [CVE-2018-12389](https://insights.sbomify.com/CVE-2018-12389/): Memory corruption in Firefox ESR (high 8.8)
- [CVE-2018-12388](https://insights.sbomify.com/CVE-2018-12388/): Memory corruption in Firefox (high 8.8)
- [CVE-2018-12387](https://insights.sbomify.com/CVE-2018-12387/): Information disclosure in Firefox (critical 9.1)
- [CVE-2018-12386](https://insights.sbomify.com/CVE-2018-12386/): Memory corruption in Firefox (high 8.1)
- [CVE-2018-12385](https://insights.sbomify.com/CVE-2018-12385/): Memory corruption in Firefox (high 7.0)
- [CVE-2018-12384](https://insights.sbomify.com/CVE-2018-12384/): Weak cryptography in Network Security Services (NSS) (medium 5.9)
- [CVE-2018-12383](https://insights.sbomify.com/CVE-2018-12383/): Information disclosure in Firefox (medium 5.5)
- [CVE-2018-12382](https://insights.sbomify.com/CVE-2018-12382/): Other in Firefox (medium 5.3)
- [CVE-2018-12381](https://insights.sbomify.com/CVE-2018-12381/): Other in Firefox (medium 5.3)
- [CVE-2018-1238](https://insights.sbomify.com/CVE-2018-1238/): Command injection in ScaleIO (high 7.5)
- [CVE-2018-12379](https://insights.sbomify.com/CVE-2018-12379/): Memory corruption in Firefox (high 7.8)
- [CVE-2018-12378](https://insights.sbomify.com/CVE-2018-12378/): Use after free in Firefox (critical 9.8)
- [CVE-2018-12377](https://insights.sbomify.com/CVE-2018-12377/): Use after free in Firefox (critical 9.8)
- [CVE-2018-12376](https://insights.sbomify.com/CVE-2018-12376/): Memory corruption in Firefox (critical 9.8)
- [CVE-2018-12375](https://insights.sbomify.com/CVE-2018-12375/): Memory corruption in Firefox (high 8.8)
- [CVE-2018-12374](https://insights.sbomify.com/CVE-2018-12374/): Information disclosure in Thunderbird (medium 4.3)
- [CVE-2018-12373](https://insights.sbomify.com/CVE-2018-12373/): Information disclosure in Thunderbird (medium 6.5)
- [CVE-2018-12372](https://insights.sbomify.com/CVE-2018-12372/): Information disclosure in Thunderbird (medium 6.5)
- [CVE-2018-12371](https://insights.sbomify.com/CVE-2018-12371/): Integer overflow in Firefox (high 8.8)
- [CVE-2018-12370](https://insights.sbomify.com/CVE-2018-12370/): Cross-site request forgery in Firefox (high 8.8)
- [CVE-2018-1237](https://insights.sbomify.com/CVE-2018-1237/): Auth bypass in ScaleIO (critical 9.8)
- [CVE-2018-12369](https://insights.sbomify.com/CVE-2018-12369/): Missing authorization in Firefox (critical 9.8)
- [CVE-2018-12368](https://insights.sbomify.com/CVE-2018-12368/): Security feature bypass in Firefox (high 8.1)
- [CVE-2018-12367](https://insights.sbomify.com/CVE-2018-12367/): Information disclosure in Firefox (medium 4.3)
- [CVE-2018-12366](https://insights.sbomify.com/CVE-2018-12366/): Memory corruption in Firefox (medium 6.5)
- [CVE-2018-12365](https://insights.sbomify.com/CVE-2018-12365/): Information disclosure in Firefox (medium 6.5)
- [CVE-2018-12364](https://insights.sbomify.com/CVE-2018-12364/): Cross-site request forgery in Firefox (high 8.8)
- [CVE-2018-12363](https://insights.sbomify.com/CVE-2018-12363/): Use after free in Firefox (high 8.8)
- [CVE-2018-12362](https://insights.sbomify.com/CVE-2018-12362/): Integer overflow in Firefox (high 8.8)
- [CVE-2018-12361](https://insights.sbomify.com/CVE-2018-12361/): Integer overflow in Firefox (high 8.8)
- [CVE-2018-12360](https://insights.sbomify.com/CVE-2018-12360/): Use after free in Firefox (high 8.8)
- [CVE-2018-12359](https://insights.sbomify.com/CVE-2018-12359/): Memory corruption in Firefox (high 8.8)
- [CVE-2018-12358](https://insights.sbomify.com/CVE-2018-12358/): Information disclosure in Firefox (medium 4.3)
- [CVE-2018-12357](https://insights.sbomify.com/CVE-2018-12357/): Misconfiguration in arista:cloudvision portal (medium 6.5)
- [CVE-2018-12356](https://insights.sbomify.com/CVE-2018-12356/): Security feature bypass in simple password store project:simple password store (critical 9.8)
- [CVE-2018-12355](https://insights.sbomify.com/CVE-2018-12355/): Cross-site scripting in eng:knowage (medium 6.1)
- [CVE-2018-12354](https://insights.sbomify.com/CVE-2018-12354/): Cross-site request forgery in knowage-suite:knowage (high 8.8)
- [CVE-2018-12353](https://insights.sbomify.com/CVE-2018-12353/): Cross-site scripting in knowage-suite:knowage (medium 6.1)
- [CVE-2018-1235](https://insights.sbomify.com/CVE-2018-1235/): Command injection in Dell EMC RecoverPoint (critical 9.8)
- [CVE-2018-1234](https://insights.sbomify.com/CVE-2018-1234/): Information disclosure in RSA Authentication Agent for Web for IIS (medium 5.5)
- [CVE-2018-12339](https://insights.sbomify.com/CVE-2018-12339/): Cross-site scripting in articlecms project:articlecms (medium 5.4)
- [CVE-2018-12338](https://insights.sbomify.com/CVE-2018-12338/): Hardcoded credentials in ecos:system management appliance (critical 9.8)
- [CVE-2018-12337](https://insights.sbomify.com/CVE-2018-12337/): Information disclosure in ecos:secure boot stick firmware (medium 4.6)
- [CVE-2018-12336](https://insights.sbomify.com/CVE-2018-12336/): Hardcoded credentials in ecos:secure boot stick firmware (critical 9.8)
- [CVE-2018-12335](https://insights.sbomify.com/CVE-2018-12335/): Missing authorization in ecos:system management appliance (high 7.3)
- [CVE-2018-12334](https://insights.sbomify.com/CVE-2018-12334/): Security feature bypass in ecos:secure boot stick firmware (high 7.5)
- [CVE-2018-12333](https://insights.sbomify.com/CVE-2018-12333/): Security feature bypass in ecos:secure boot stick firmware (high 8.1)
- [CVE-2018-12332](https://insights.sbomify.com/CVE-2018-12332/): Information disclosure in ecos:secure boot stick firmware (medium 4.2)
- [CVE-2018-12331](https://insights.sbomify.com/CVE-2018-12331/): Auth bypass in ecos:system management appliance (high 7.4)
- [CVE-2018-12330](https://insights.sbomify.com/CVE-2018-12330/): Security feature bypass in ecos:secure boot stick firmware (high 8.1)
- [CVE-2018-1233](https://insights.sbomify.com/CVE-2018-1233/): Cross-site scripting in RSA Authentication Agent for Web for IIS, RSA Authentication Agent for Web for Apache Web Server (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/129/