# Vulnerabilities published in 2018


- [CVE-2018-12206](https://insights.sbomify.com/CVE-2018-12206/): Denial of service in Intel QuickAssist Technology for Linux (medium 5.5)
- [CVE-2018-12205](https://insights.sbomify.com/CVE-2018-12205/): Security feature bypass in Intel Platform Sample / Silicon Reference firmware (medium 6.8)
- [CVE-2018-12204](https://insights.sbomify.com/CVE-2018-12204/): Privilege escalation in Intel Platform Sample / Silicon Reference firmware (medium 6.7)
- [CVE-2018-12203](https://insights.sbomify.com/CVE-2018-12203/): Other in Intel Platform Sample / Silicon Reference firmware (medium 6.7)
- [CVE-2018-12202](https://insights.sbomify.com/CVE-2018-12202/): Privilege escalation in Intel Platform Sample / Silicon Reference firmware (medium 6.7)
- [CVE-2018-12201](https://insights.sbomify.com/CVE-2018-12201/): Memory corruption in Intel Platform Sample / Silicon Reference firmware (medium 6.7)
- [CVE-2018-12200](https://insights.sbomify.com/CVE-2018-12200/): Privilege escalation in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (medium 6.7)
- [CVE-2018-1220](https://insights.sbomify.com/CVE-2018-1220/): Open redirect in EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8 (medium 6.1)
- [CVE-2018-12199](https://insights.sbomify.com/CVE-2018-12199/): Memory corruption in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (medium 6.2)
- [CVE-2018-12198](https://insights.sbomify.com/CVE-2018-12198/): Denial of service in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (medium 6.0)
- [CVE-2018-12196](https://insights.sbomify.com/CVE-2018-12196/): Other in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (medium 6.7)
- [CVE-2018-12193](https://insights.sbomify.com/CVE-2018-12193/): Missing authorization in Intel QuickAssit Technology for Linux (medium 5.5)
- [CVE-2018-12192](https://insights.sbomify.com/CVE-2018-12192/): Auth bypass in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (medium 6.8)
- [CVE-2018-12191](https://insights.sbomify.com/CVE-2018-12191/): Memory corruption in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (high 7.6)
- [CVE-2018-12190](https://insights.sbomify.com/CVE-2018-12190/): Privilege escalation in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (medium 6.7)
- [CVE-2018-1219](https://insights.sbomify.com/CVE-2018-1219/): Missing authorization in EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8 (medium 4.3)
- [CVE-2018-12189](https://insights.sbomify.com/CVE-2018-12189/): Other in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (medium 4.4)
- [CVE-2018-12188](https://insights.sbomify.com/CVE-2018-12188/): Other in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (medium 4.6)
- [CVE-2018-12187](https://insights.sbomify.com/CVE-2018-12187/): Denial of service in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (high 7.5)
- [CVE-2018-12185](https://insights.sbomify.com/CVE-2018-12185/): Other in Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology (medium 6.8)
- [CVE-2018-12183](https://insights.sbomify.com/CVE-2018-12183/): Memory corruption in Extensible Firmware Interface Development Kit (EDK II) (medium 6.8)
- [CVE-2018-12182](https://insights.sbomify.com/CVE-2018-12182/): Memory corruption in Extensible Firmware Interface Development Kit (EDK II) (medium 6.7)
- [CVE-2018-12181](https://insights.sbomify.com/CVE-2018-12181/): Memory corruption in Extensible Firmware Interface Development Kit (EDK II) (medium 6.0)
- [CVE-2018-12180](https://insights.sbomify.com/CVE-2018-12180/): Memory corruption in Extensible Firmware Interface Development Kit (EDK II) (high 8.8)
- [CVE-2018-1218](https://insights.sbomify.com/CVE-2018-1218/): Memory corruption in Dell EMC NetWorker (high 7.5)
- [CVE-2018-12179](https://insights.sbomify.com/CVE-2018-12179/): Misconfiguration in Extensible Firmware Interface Development Kit (EDK II) (high 7.8)
- [CVE-2018-12178](https://insights.sbomify.com/CVE-2018-12178/): Memory corruption in Extensible Firmware Interface Development Kit (EDK II) (critical 9.1)
- [CVE-2018-12177](https://insights.sbomify.com/CVE-2018-12177/): Privilege escalation in Intel(R) PROSet/Wireless WiFi Software (high 7.8)
- [CVE-2018-12176](https://insights.sbomify.com/CVE-2018-12176/): Other in Intel(R) NUC Kits and Intel(R) Compute Cards (high 8.2)
- [CVE-2018-12175](https://insights.sbomify.com/CVE-2018-12175/): Misconfiguration in Intel(R) Distribution for Python 2018 (high 7.8)
- [CVE-2018-12174](https://insights.sbomify.com/CVE-2018-12174/): Memory corruption in Intel Parallel Studio XE 2018 (high 7.8)
- [CVE-2018-12173](https://insights.sbomify.com/CVE-2018-12173/): Misconfiguration in Intel Server Boards Firmware (high 7.6)
- [CVE-2018-12172](https://insights.sbomify.com/CVE-2018-12172/): Weak cryptography in Intel Server Board (medium 5.5)
- [CVE-2018-12171](https://insights.sbomify.com/CVE-2018-12171/): Privilege escalation in Intel(R) Baseboard Management Controller (BMC) firmware (critical 9.8)
- [CVE-2018-1217](https://insights.sbomify.com/CVE-2018-1217/): Missing authorization in Avamar, Integrated Data Protection Appliance (critical 9.8)
- [CVE-2018-12169](https://insights.sbomify.com/CVE-2018-12169/): Auth bypass in intel:core i3 (high 7.6)
- [CVE-2018-12168](https://insights.sbomify.com/CVE-2018-12168/): Privilege escalation in Intel(R) Computing Improvement Program (high 7.8)
- [CVE-2018-12167](https://insights.sbomify.com/CVE-2018-12167/): Denial of service in Intel(R) Optane(TM) SSD DC P4800X (medium 4.4)
- [CVE-2018-12166](https://insights.sbomify.com/CVE-2018-12166/): Other in Intel(R) Optane(TM) SSD DC P4800X (medium 4.4)
- [CVE-2018-12163](https://insights.sbomify.com/CVE-2018-12163/): Privilege escalation in Intel IoT Developers Kit (medium 4.8)
- [CVE-2018-12162](https://insights.sbomify.com/CVE-2018-12162/): Misconfiguration in Intel(R) OpenVINO(TM) Toolkit for Windows (high 7.8)
- [CVE-2018-12161](https://insights.sbomify.com/CVE-2018-12161/): Information disclosure in Intel RAID Web Server 3 (medium 6.5)
- [CVE-2018-12160](https://insights.sbomify.com/CVE-2018-12160/): Other in Intel(R) Data Migration Software (medium 5.3)
- [CVE-2018-1216](https://insights.sbomify.com/CVE-2018-1216/): Hardcoded credentials in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management (eManagement) (critical 9.8)
- [CVE-2018-12159](https://insights.sbomify.com/CVE-2018-12159/): Memory corruption in intel:proset\/wireless (medium 5.5)
- [CVE-2018-12158](https://insights.sbomify.com/CVE-2018-12158/): Other in Intel NUC Firmware Kits (medium 6.0)
- [CVE-2018-12155](https://insights.sbomify.com/CVE-2018-12155/): Information disclosure in Intel Integrated Performance Primitives (medium 5.5)
- [CVE-2018-12154](https://insights.sbomify.com/CVE-2018-12154/): Denial of service in Intel Graphics Driver (medium 5.5)
- [CVE-2018-12153](https://insights.sbomify.com/CVE-2018-12153/): Denial of service in Intel Graphics Driver (medium 6.5)
- [CVE-2018-12152](https://insights.sbomify.com/CVE-2018-12152/): Memory corruption in Intel Graphics Driver (high 7.8)
- [CVE-2018-12151](https://insights.sbomify.com/CVE-2018-12151/): Memory corruption in Intel(R) Extreme Tuning Utility (medium 5.5)
- [CVE-2018-12150](https://insights.sbomify.com/CVE-2018-12150/): Memory corruption in Intel(R) Extreme Tuning Utility (medium 6.7)
- [CVE-2018-1215](https://insights.sbomify.com/CVE-2018-1215/): File upload in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management (eManagement) (high 8.8)
- [CVE-2018-12149](https://insights.sbomify.com/CVE-2018-12149/): Memory corruption in Intel(R) Extreme Tuning Utility (medium 5.5)
- [CVE-2018-12148](https://insights.sbomify.com/CVE-2018-12148/): Privilege escalation in Intel(R) Driver & Support Assistant (high 7.8)
- [CVE-2018-12147](https://insights.sbomify.com/CVE-2018-12147/): Privilege escalation in Intel(R) CSME Assets Advisory (medium 6.7)
- [CVE-2018-1214](https://insights.sbomify.com/CVE-2018-1214/): Hardcoded credentials in Dell SupportAssist Enterprise version 1.1 (high 7.0)
- [CVE-2018-12131](https://insights.sbomify.com/CVE-2018-12131/): Privilege escalation in Intel NVMe and Intel RSTe (high 7.8)
- [CVE-2018-12130](https://insights.sbomify.com/CVE-2018-12130/): Information disclosure in Central Processing Units (CPUs) (medium 5.9)
- [CVE-2018-1213](https://insights.sbomify.com/CVE-2018-1213/): Cross-site request forgery in Isilon OneFS (high 8.8)
- [CVE-2018-12127](https://insights.sbomify.com/CVE-2018-12127/): Information disclosure in Central Processing Units (CPUs) (medium 5.6)
- [CVE-2018-12126](https://insights.sbomify.com/CVE-2018-12126/): Information disclosure in Central ProcCVE-2018-12126essing Units (CPUs) (medium 5.6)
- [CVE-2018-12123](https://insights.sbomify.com/CVE-2018-12123/): Security feature bypass in Node.js (medium 4.3)
- [CVE-2018-12122](https://insights.sbomify.com/CVE-2018-12122/): Denial of service in Node.js (high 7.5)
- [CVE-2018-12121](https://insights.sbomify.com/CVE-2018-12121/): Denial of service in Node.js (high 7.5)
- [CVE-2018-12120](https://insights.sbomify.com/CVE-2018-12120/): Misconfiguration in Node.js (high 8.1)
- [CVE-2018-1212](https://insights.sbomify.com/CVE-2018-1212/): Authenticated remote code execution in iDRAC 6 (high 8.8)
- [CVE-2018-12116](https://insights.sbomify.com/CVE-2018-12116/): Other in Node.js (high 7.5)
- [CVE-2018-12115](https://insights.sbomify.com/CVE-2018-12115/): Memory corruption in Node.js (high 7.5)
- [CVE-2018-12114](https://insights.sbomify.com/CVE-2018-12114/): Cross-site request forgery in maccms:maccms (high 8.8)
- [CVE-2018-12113](https://insights.sbomify.com/CVE-2018-12113/): Memory corruption in coreftp:core ftp (critical 9.8)
- [CVE-2018-12112](https://insights.sbomify.com/CVE-2018-12112/): Memory corruption in md4c project:md4c (high 7.8)
- [CVE-2018-12111](https://insights.sbomify.com/CVE-2018-12111/): Cross-site scripting in canon:efi printme (medium 6.1)
- [CVE-2018-12110](https://insights.sbomify.com/CVE-2018-12110/): SQL injection in portfoliocms project:portfoliocms (high 7.2)
- [CVE-2018-1211](https://insights.sbomify.com/CVE-2018-1211/): Path traversal in iDRAC7/iDRAC8 (high 7.5)
- [CVE-2018-12109](https://insights.sbomify.com/CVE-2018-12109/): Memory corruption in flif:flif (high 7.8)
- [CVE-2018-12108](https://insights.sbomify.com/CVE-2018-12108/): Denial of service in dropbox:lepton (medium 5.5)
- [CVE-2018-12104](https://insights.sbomify.com/CVE-2018-12104/): Airbnb Knowledge Repo XSS In Comments (medium 6.1)
- [CVE-2018-12103](https://insights.sbomify.com/CVE-2018-12103/): Security feature bypass in d-link:dir-885l\/r firmware (medium 6.5)
- [CVE-2018-12102](https://insights.sbomify.com/CVE-2018-12102/): Null dereference in md4c project:md4c (medium 5.5)
- [CVE-2018-12101](https://insights.sbomify.com/CVE-2018-12101/): Cross-site scripting in clippercms:clippercms (medium 5.4)
- [CVE-2018-12100](https://insights.sbomify.com/CVE-2018-12100/): Cross-site scripting in sonatype:nexus repository manager (medium 4.8)
- [CVE-2018-12099](https://insights.sbomify.com/CVE-2018-12099/): Grafana Cross-site Scripting (XSS) (medium 6.1)
- [CVE-2018-12098](https://insights.sbomify.com/CVE-2018-12098/): Memory corruption in liblnk project:liblnk (medium 5.5)
- [CVE-2018-12097](https://insights.sbomify.com/CVE-2018-12097/): Memory corruption in liblnk project:liblnk (medium 5.5)
- [CVE-2018-12096](https://insights.sbomify.com/CVE-2018-12096/): Memory corruption in liblnk project:liblnk (medium 5.5)
- [CVE-2018-12095](https://insights.sbomify.com/CVE-2018-12095/): Cross-site scripting in oecms project:oecms (medium 5.4)
- [CVE-2018-12094](https://insights.sbomify.com/CVE-2018-12094/): Cross-site scripting in dimofinf:dimofinf cms (medium 5.4)
- [CVE-2018-12093](https://insights.sbomify.com/CVE-2018-12093/): Denial of service in tinyexr project:tinyexr (high 7.5)
- [CVE-2018-12092](https://insights.sbomify.com/CVE-2018-12092/): Memory corruption in tinyexr project:tinyexr (critical 9.8)
- [CVE-2018-12090](https://insights.sbomify.com/CVE-2018-12090/): Cross-site scripting in lamsfoundation:lams (medium 6.1)
- [CVE-2018-12089](https://insights.sbomify.com/CVE-2018-12089/): Information disclosure in octopus:octopus server (high 7.5)
- [CVE-2018-12088](https://insights.sbomify.com/CVE-2018-12088/): Security feature bypass in s3ql project:s3ql (high 7.5)
- [CVE-2018-12087](https://insights.sbomify.com/CVE-2018-12087/): Moderate severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua (medium 5.3)
- [CVE-2018-12086](https://insights.sbomify.com/CVE-2018-12086/): High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua (high 7.5)
- [CVE-2018-12085](https://insights.sbomify.com/CVE-2018-12085/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2018-12084](https://insights.sbomify.com/CVE-2018-12084/): Business logic in bitasean:bitasean (high 7.5)
- [CVE-2018-12083](https://insights.sbomify.com/CVE-2018-12083/): Business logic in goal bonanza project:goal bonanza (high 7.5)
- [CVE-2018-12082](https://insights.sbomify.com/CVE-2018-12082/): Business logic in fujinto project:fujinto (high 7.5)
- [CVE-2018-12081](https://insights.sbomify.com/CVE-2018-12081/): Business logic in tgtcoins:target coin (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/131/