# Vulnerabilities published in 2018


- [CVE-2018-12329](https://insights.sbomify.com/CVE-2018-12329/): Security feature bypass in ecos:secure boot stick firmware (medium 5.9)
- [CVE-2018-12327](https://insights.sbomify.com/CVE-2018-12327/): Memory corruption in ntp:ntp (critical 9.8)
- [CVE-2018-12326](https://insights.sbomify.com/CVE-2018-12326/): Memory corruption in redislabs:redis (high 8.4)
- [CVE-2018-12323](https://insights.sbomify.com/CVE-2018-12323/): Hardcoded credentials in apollotechnologiesinc:momentum axel 720p (medium 6.8)
- [CVE-2018-12322](https://insights.sbomify.com/CVE-2018-12322/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-12321](https://insights.sbomify.com/CVE-2018-12321/): Memory corruption in radare:radare2 (high 7.8)
- [CVE-2018-12320](https://insights.sbomify.com/CVE-2018-12320/): Use after free in radare:radare2 (high 7.8)
- [CVE-2018-1232](https://insights.sbomify.com/CVE-2018-1232/): Memory corruption in RSA Authentication Agent for Web for IIS, RSA Authentication Agent for Web for Apache Web Server (high 7.5)
- [CVE-2018-12319](https://insights.sbomify.com/CVE-2018-12319/): Cross-site scripting in asustor:data master (high 7.5)
- [CVE-2018-12318](https://insights.sbomify.com/CVE-2018-12318/): Information disclosure in asustor:data master (high 8.8)
- [CVE-2018-12317](https://insights.sbomify.com/CVE-2018-12317/): Command injection in asustor:data master (high 8.8)
- [CVE-2018-12316](https://insights.sbomify.com/CVE-2018-12316/): Command injection in asustor:data master (high 8.8)
- [CVE-2018-12315](https://insights.sbomify.com/CVE-2018-12315/): Auth bypass in asustor:data master (medium 6.5)
- [CVE-2018-12314](https://insights.sbomify.com/CVE-2018-12314/): Path traversal in asustor:data master (high 7.5)
- [CVE-2018-12313](https://insights.sbomify.com/CVE-2018-12313/): Command injection in asustor:data master (critical 9.8)
- [CVE-2018-12312](https://insights.sbomify.com/CVE-2018-12312/): Command injection in asustor:data master (high 8.8)
- [CVE-2018-12311](https://insights.sbomify.com/CVE-2018-12311/): Cross-site scripting in asustor:data master (medium 5.4)
- [CVE-2018-12310](https://insights.sbomify.com/CVE-2018-12310/): Cross-site scripting in asustor:data master (medium 5.4)
- [CVE-2018-1231](https://insights.sbomify.com/CVE-2018-1231/): Misconfiguration in pivotal software:bosh cli (high 8.8)
- [CVE-2018-12309](https://insights.sbomify.com/CVE-2018-12309/): Path traversal in asustor:data master (high 7.5)
- [CVE-2018-12308](https://insights.sbomify.com/CVE-2018-12308/): Information disclosure in asustor:data master (medium 6.5)
- [CVE-2018-12307](https://insights.sbomify.com/CVE-2018-12307/): Command injection in asustor:data master (high 8.8)
- [CVE-2018-12306](https://insights.sbomify.com/CVE-2018-12306/): Path traversal in asustor:data master (high 7.5)
- [CVE-2018-12305](https://insights.sbomify.com/CVE-2018-12305/): Cross-site scripting in asustor:data master (medium 6.1)
- [CVE-2018-12304](https://insights.sbomify.com/CVE-2018-12304/): Cross-site scripting in seagate:nas os (medium 6.1)
- [CVE-2018-12303](https://insights.sbomify.com/CVE-2018-12303/): Cross-site scripting in seagate:nas os (medium 5.4)
- [CVE-2018-12302](https://insights.sbomify.com/CVE-2018-12302/): Misconfiguration in seagate:nas os (medium 6.1)
- [CVE-2018-12301](https://insights.sbomify.com/CVE-2018-12301/): Server-side request forgery in seagate:nas os (high 7.5)
- [CVE-2018-12300](https://insights.sbomify.com/CVE-2018-12300/): Open redirect in seagate:nas os (medium 6.1)
- [CVE-2018-1230](https://insights.sbomify.com/CVE-2018-1230/): Cross-site request forgery in Spring Batch Admin (high 8.8)
- [CVE-2018-12299](https://insights.sbomify.com/CVE-2018-12299/): Cross-site scripting in seagate:nas os (medium 5.4)
- [CVE-2018-12298](https://insights.sbomify.com/CVE-2018-12298/): Path traversal in seagate:nas os (high 7.5)
- [CVE-2018-12297](https://insights.sbomify.com/CVE-2018-12297/): Cross-site scripting in seagate:nas os (medium 6.1)
- [CVE-2018-12296](https://insights.sbomify.com/CVE-2018-12296/): Missing authorization in seagate:nas os (high 7.5)
- [CVE-2018-12295](https://insights.sbomify.com/CVE-2018-12295/): SQL injection in seagate:nas os (critical 9.8)
- [CVE-2018-12294](https://insights.sbomify.com/CVE-2018-12294/): Use after free in webkit:webkitgtk\+ (high 8.8)
- [CVE-2018-12293](https://insights.sbomify.com/CVE-2018-12293/): Integer overflow in canonical:ubuntu linux (high 8.8)
- [CVE-2018-12292](https://insights.sbomify.com/CVE-2018-12292/): Use after free in palemoon:pale moon (critical 9.8)
- [CVE-2018-12291](https://insights.sbomify.com/CVE-2018-12291/): Matrix Synapse Security Filtering Flaw (high 7.5)
- [CVE-2018-12290](https://insights.sbomify.com/CVE-2018-12290/): Yii2-StateMachine extension for Yii2 XSS Vulnerability (medium 6.1)
- [CVE-2018-1229](https://insights.sbomify.com/CVE-2018-1229/): Cross-site Scripting in Pivotal Spring Batch Admin (medium 6.1)
- [CVE-2018-12273](https://insights.sbomify.com/CVE-2018-12273/): Cross-site scripting in ximdex:ximdex (medium 6.1)
- [CVE-2018-12272](https://insights.sbomify.com/CVE-2018-12272/): Cross-site scripting in ximdex:ximdex (medium 6.1)
- [CVE-2018-12271](https://insights.sbomify.com/CVE-2018-12271/): Auth bypass in dropbox:dropbox (medium 6.4)
- [CVE-2018-12270](https://insights.sbomify.com/CVE-2018-12270/): Other in valvesoftware:steam client (medium 5.4)
- [CVE-2018-1227](https://insights.sbomify.com/CVE-2018-1227/): Supply chain in Concourse CI: As of 2018-03-13, Pivotal does not believe that any resources or builds of Concourse have been compromised. (high 7.5)
- [CVE-2018-12268](https://insights.sbomify.com/CVE-2018-12268/): Command injection in acccheck project:acccheck.pl (critical 9.8)
- [CVE-2018-12266](https://insights.sbomify.com/CVE-2018-12266/): Cross-site scripting in hongcms project:hongcms (medium 6.1)
- [CVE-2018-12265](https://insights.sbomify.com/CVE-2018-12265/): Integer overflow in canonical:ubuntu linux (high 8.8)
- [CVE-2018-12264](https://insights.sbomify.com/CVE-2018-12264/): Integer overflow in canonical:ubuntu linux (high 8.8)
- [CVE-2018-12263](https://insights.sbomify.com/CVE-2018-12263/): File upload in portfoliocms project:portfoliocms (high 8.8)
- [CVE-2018-12261](https://insights.sbomify.com/CVE-2018-12261/): Privilege escalation in apollotechnologiesinc:momentum axel 720p firmware (medium 4.4)
- [CVE-2018-12260](https://insights.sbomify.com/CVE-2018-12260/): Information disclosure in apollotechnologiesinc:momentum axel 720p firmware (medium 6.7)
- [CVE-2018-12259](https://insights.sbomify.com/CVE-2018-12259/): Misconfiguration in apollotechnologiesinc:momentum axel 720p firmware (medium 6.8)
- [CVE-2018-12258](https://insights.sbomify.com/CVE-2018-12258/): Security feature bypass in apollotechnologiesinc:momentum axel 720p firmware (medium 6.8)
- [CVE-2018-12257](https://insights.sbomify.com/CVE-2018-12257/): Security feature bypass in apollotechnologiesinc:momentum axel 720p firmware (medium 4.4)
- [CVE-2018-12256](https://insights.sbomify.com/CVE-2018-12256/): File upload in litecart:litecart (high 8.8)
- [CVE-2018-12255](https://insights.sbomify.com/CVE-2018-12255/): Cross-site scripting in invoiceplane:invoiceplane (medium 6.1)
- [CVE-2018-12254](https://insights.sbomify.com/CVE-2018-12254/): SQL injection in harmistechnology:ek rishta (high 8.8)
- [CVE-2018-12250](https://insights.sbomify.com/CVE-2018-12250/): SQL injection in elitecms:elite cms (high 7.2)
- [CVE-2018-12249](https://insights.sbomify.com/CVE-2018-12249/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2018-12248](https://insights.sbomify.com/CVE-2018-12248/): Memory corruption in mruby:mruby (high 7.5)
- [CVE-2018-12247](https://insights.sbomify.com/CVE-2018-12247/): Null dereference in mruby:mruby (high 7.5)
- [CVE-2018-12246](https://insights.sbomify.com/CVE-2018-12246/): Cross-site scripting in Symantec Web Isolation (medium 6.1)
- [CVE-2018-12245](https://insights.sbomify.com/CVE-2018-12245/): Other in Symantec Endpoint Protection (SEP) (high 7.8)
- [CVE-2018-12244](https://insights.sbomify.com/CVE-2018-12244/): Code injection in Symantec Endpoint Protection (Mac Client) (medium 6.3)
- [CVE-2018-12243](https://insights.sbomify.com/CVE-2018-12243/): XML external entity in Symantec Messaging Gateway (high 8.8)
- [CVE-2018-12242](https://insights.sbomify.com/CVE-2018-12242/): Auth bypass in Symantec Messaging Gateway (critical 9.8)
- [CVE-2018-12241](https://insights.sbomify.com/CVE-2018-12241/): Cross-site scripting in Symantec Security Analytics (SA) (medium 6.1)
- [CVE-2018-12240](https://insights.sbomify.com/CVE-2018-12240/): Hardcoded credentials in Norton Identity Safe for Android (medium 5.9)
- [CVE-2018-12239](https://insights.sbomify.com/CVE-2018-12239/): Security feature bypass in Norton; Symantec Endpoint Protection (SEP); Symantec Endpoint Protection Small Business Edition (SEP SBE); Symantec Endpoint Protection Cloud (SEP Cloud) (medium 6.8)
- [CVE-2018-12238](https://insights.sbomify.com/CVE-2018-12238/): Security feature bypass in Norton; Symantec Endpoint Protection (SEP); Symantec Endpoint Protection Small Business Edition (SEP SBE); Symantec Endpoint Protection Cloud (SEP Cloud) (high 7.8)
- [CVE-2018-12237](https://insights.sbomify.com/CVE-2018-12237/): Command injection in Symantec Reporter (high 7.2)
- [CVE-2018-12234](https://insights.sbomify.com/CVE-2018-12234/): Cross-site scripting in myadrenalin:adrenalin (medium 6.1)
- [CVE-2018-12233](https://insights.sbomify.com/CVE-2018-12233/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2018-12232](https://insights.sbomify.com/CVE-2018-12232/): Race condition in linux:linux kernel (medium 5.9)
- [CVE-2018-12230](https://insights.sbomify.com/CVE-2018-12230/): Integer overflow in remicoin project:remicoin (high 7.5)
- [CVE-2018-1223](https://insights.sbomify.com/CVE-2018-1223/): Information disclosure in Container Runtime (high 8.8)
- [CVE-2018-12229](https://insights.sbomify.com/CVE-2018-12229/): Cross-site scripting in sfu:open journal system (medium 6.1)
- [CVE-2018-12228](https://insights.sbomify.com/CVE-2018-12228/): Denial of service in sangoma:asterisk (medium 6.5)
- [CVE-2018-12227](https://insights.sbomify.com/CVE-2018-12227/): Information disclosure in debian:debian linux (medium 5.3)
- [CVE-2018-12224](https://insights.sbomify.com/CVE-2018-12224/): Information disclosure in Intel(R) Graphics Driver for Windows (low 3.3)
- [CVE-2018-12223](https://insights.sbomify.com/CVE-2018-12223/): Privilege escalation in Intel(R) Graphics Driver for Windows (medium 6.3)
- [CVE-2018-12222](https://insights.sbomify.com/CVE-2018-12222/): Memory corruption in Intel(R) Graphics Driver for Windows (low 3.3)
- [CVE-2018-12221](https://insights.sbomify.com/CVE-2018-12221/): Integer overflow in Intel(R) Graphics Driver for Windows (high 7.8)
- [CVE-2018-12220](https://insights.sbomify.com/CVE-2018-12220/): Other in Intel(R) Graphics Driver for Windows (high 8.2)
- [CVE-2018-12219](https://insights.sbomify.com/CVE-2018-12219/): Information disclosure in Intel(R) Graphics Driver for Windows (medium 5.5)
- [CVE-2018-12218](https://insights.sbomify.com/CVE-2018-12218/): Denial of service in Intel(R) Graphics Driver for Windows (low 3.3)
- [CVE-2018-12217](https://insights.sbomify.com/CVE-2018-12217/): Missing authorization in Intel(R) Graphics Driver for Windows (low 2.3)
- [CVE-2018-12216](https://insights.sbomify.com/CVE-2018-12216/): Other in Intel(R) Graphics Driver for Windows (high 8.2)
- [CVE-2018-12215](https://insights.sbomify.com/CVE-2018-12215/): Denial of service in Intel(R) Graphics Driver for Windows (medium 6.0)
- [CVE-2018-12214](https://insights.sbomify.com/CVE-2018-12214/): Memory corruption in Intel(R) Graphics Driver for Windows (high 8.2)
- [CVE-2018-12213](https://insights.sbomify.com/CVE-2018-12213/): Memory corruption in Intel(R) Graphics Driver for Windows (medium 6.0)
- [CVE-2018-12212](https://insights.sbomify.com/CVE-2018-12212/): Memory corruption in Intel(R) Graphics Driver for Windows (medium 6.5)
- [CVE-2018-12211](https://insights.sbomify.com/CVE-2018-12211/): Denial of service in Intel(R) Graphics Driver for Windows (medium 6.5)
- [CVE-2018-12210](https://insights.sbomify.com/CVE-2018-12210/): Memory corruption in Intel(R) Graphics Driver for Windows (medium 6.5)
- [CVE-2018-1221](https://insights.sbomify.com/CVE-2018-1221/): Other in The Cloud Foundry Gorouter (high 8.1)
- [CVE-2018-12209](https://insights.sbomify.com/CVE-2018-12209/): Missing authorization in Intel(R) Graphics Driver for Windows (low 3.3)
- [CVE-2018-12208](https://insights.sbomify.com/CVE-2018-12208/): Memory corruption in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (high 7.6)
- [CVE-2018-12207](https://insights.sbomify.com/CVE-2018-12207/): Other in 2019.2 IPU – Intel(R) Processor Machine Check Error (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/130/