# Vulnerabilities published in 2018


- [CVE-2018-12080](https://insights.sbomify.com/CVE-2018-12080/): Business logic in intchain:node token (high 7.5)
- [CVE-2018-12079](https://insights.sbomify.com/CVE-2018-12079/): Business logic in substratum:substratum (high 7.5)
- [CVE-2018-12078](https://insights.sbomify.com/CVE-2018-12078/): Business logic in polyai project:polyai (high 7.5)
- [CVE-2018-12076](https://insights.sbomify.com/CVE-2018-12076/): Auth bypass in avantimarkets:market card (medium 4.2)
- [CVE-2018-12073](https://insights.sbomify.com/CVE-2018-12073/): Business logic in eminent-online:em4544 (medium 5.3)
- [CVE-2018-12072](https://insights.sbomify.com/CVE-2018-12072/): Hardcoded credentials in cloudmedia:popcorn a-200 firmware (critical 9.8)
- [CVE-2018-12071](https://insights.sbomify.com/CVE-2018-12071/): CodeIgniter Session Fixation Vulnerability (critical 9.8)
- [CVE-2018-12070](https://insights.sbomify.com/CVE-2018-12070/): Integer overflow in sec project:sec (high 7.5)
- [CVE-2018-1207](https://insights.sbomify.com/CVE-2018-1207/): Code injection in dell:emc idrac7 (critical 9.8)
- [CVE-2018-12068](https://insights.sbomify.com/CVE-2018-12068/): Integer overflow in tgtcoins:target coin (high 7.5)
- [CVE-2018-12067](https://insights.sbomify.com/CVE-2018-12067/): Integer overflow in substratum:substratum (high 7.5)
- [CVE-2018-12066](https://insights.sbomify.com/CVE-2018-12066/): Denial of service in bird project:bird (medium 5.5)
- [CVE-2018-12065](https://insights.sbomify.com/CVE-2018-12065/): Path traversal in creatiwity:witycms (critical 9.8)
- [CVE-2018-12064](https://insights.sbomify.com/CVE-2018-12064/): Memory corruption in tinyexr project:tinyexr (critical 9.8)
- [CVE-2018-12063](https://insights.sbomify.com/CVE-2018-12063/): Integer overflow in intchain:node token (high 7.5)
- [CVE-2018-12062](https://insights.sbomify.com/CVE-2018-12062/): Integer overflow in swft:swftcoin (high 7.5)
- [CVE-2018-1206](https://insights.sbomify.com/CVE-2018-1206/): Hardcoded credentials in Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 (high 7.8)
- [CVE-2018-12056](https://insights.sbomify.com/CVE-2018-12056/): Weak cryptography in all-for-one:all for one (high 7.5)
- [CVE-2018-12055](https://insights.sbomify.com/CVE-2018-12055/): SQL injection in schools alert management script project:schools alert management script (critical 9.8)
- [CVE-2018-12054](https://insights.sbomify.com/CVE-2018-12054/): Path traversal in schools alert management script project:schools alert management script (high 7.5)
- [CVE-2018-12053](https://insights.sbomify.com/CVE-2018-12053/): Path traversal in schools alert management script project:schools alert management script (high 7.5)
- [CVE-2018-12052](https://insights.sbomify.com/CVE-2018-12052/): SQL injection in schools alert management script project:schools alert management script (critical 9.8)
- [CVE-2018-12051](https://insights.sbomify.com/CVE-2018-12051/): File upload in schools alert management script project:schools alert management script (critical 9.8)
- [CVE-2018-1205](https://insights.sbomify.com/CVE-2018-1205/): Memory corruption in ScaleIO (high 7.5)
- [CVE-2018-12049](https://insights.sbomify.com/CVE-2018-12049/): Auth bypass in canon:lbp6030w firmware (critical 9.8)
- [CVE-2018-12048](https://insights.sbomify.com/CVE-2018-12048/): Auth bypass in canon:lbp7110cw firmware (critical 9.8)
- [CVE-2018-12047](https://insights.sbomify.com/CVE-2018-12047/): Cross-site scripting in ximdex:ximdex (medium 6.1)
- [CVE-2018-12046](https://insights.sbomify.com/CVE-2018-12046/): File upload in dedecms:dedecms (high 7.5)
- [CVE-2018-12045](https://insights.sbomify.com/CVE-2018-12045/): File upload in dedecms:dedecms (critical 9.8)
- [CVE-2018-12043](https://insights.sbomify.com/CVE-2018-12043/): Cross-site scripting in getsymphony:symphony (medium 6.1)
- [CVE-2018-12042](https://insights.sbomify.com/CVE-2018-12042/): Path traversal in roxyfileman:roxy fileman (high 7.5)
- [CVE-2018-12041](https://insights.sbomify.com/CVE-2018-12041/): Denial of service in mediatek:awus036nh firmware (high 7.5)
- [CVE-2018-12040](https://insights.sbomify.com/CVE-2018-12040/): Cross-site scripting in sensiolabs:symfony (medium 6.1)
- [CVE-2018-1204](https://insights.sbomify.com/CVE-2018-1204/): Path traversal in Isilon OneFS (medium 6.7)
- [CVE-2018-12039](https://insights.sbomify.com/CVE-2018-12039/): SQL injection in joyplus-cms project:joyplus-cms (critical 9.8)
- [CVE-2018-12038](https://insights.sbomify.com/CVE-2018-12038/): Information disclosure in samsung:840 evo firmware (medium 4.2)
- [CVE-2018-12037](https://insights.sbomify.com/CVE-2018-12037/): Weak cryptography in micron:crucial mx100 firmware (medium 4.0)
- [CVE-2018-12036](https://insights.sbomify.com/CVE-2018-12036/): Path Traversal in OWASP Dependency-Check (high 7.8)
- [CVE-2018-12035](https://insights.sbomify.com/CVE-2018-12035/): Memory corruption in virustotal:yara (high 7.8)
- [CVE-2018-12034](https://insights.sbomify.com/CVE-2018-12034/): Memory corruption in virustotal:yara (high 7.8)
- [CVE-2018-12031](https://insights.sbomify.com/CVE-2018-12031/): Path traversal in eaton:intelligent power manager (critical 9.8)
- [CVE-2018-12030](https://insights.sbomify.com/CVE-2018-12030/): Chevereto Free before 1.0.13 has XSS. (medium 5.4)
- [CVE-2018-1203](https://insights.sbomify.com/CVE-2018-1203/): Privilege escalation in Isilon OneFS (medium 6.7)
- [CVE-2018-12029](https://insights.sbomify.com/CVE-2018-12029/): Phusion Passenger Race Condition Allows Privilege Escalation (high 7.0)
- [CVE-2018-12028](https://insights.sbomify.com/CVE-2018-12028/): Incorrect Access Control in Phusion Passenger (high 7.8)
- [CVE-2018-12027](https://insights.sbomify.com/CVE-2018-12027/): Insecure Permissions in Phusion Passenger (high 8.8)
- [CVE-2018-12026](https://insights.sbomify.com/CVE-2018-12026/): Phusion Passenger SpawningKit Contains Arbitrary Read/Write Vulnerability (critical 9.8)
- [CVE-2018-12025](https://insights.sbomify.com/CVE-2018-12025/): Business logic in futurxe:futurxe (high 7.5)
- [CVE-2018-12023](https://insights.sbomify.com/CVE-2018-12023/): Deserialization of Untrusted Data (high 7.5)
- [CVE-2018-12022](https://insights.sbomify.com/CVE-2018-12022/): jackson-databind Deserialization of Untrusted Data vulnerability (high 7.5)
- [CVE-2018-12021](https://insights.sbomify.com/CVE-2018-12021/): Singularity Incorrect Access Control (medium 6.5)
- [CVE-2018-12020](https://insights.sbomify.com/CVE-2018-12020/): Other in canonical:ubuntu linux (high 7.5)
- [CVE-2018-1202](https://insights.sbomify.com/CVE-2018-1202/): Cross-site scripting in Isilon OneFS (medium 4.8)
- [CVE-2018-12019](https://insights.sbomify.com/CVE-2018-12019/): Security feature bypass in enigmail:enigmail (high 7.5)
- [CVE-2018-12018](https://insights.sbomify.com/CVE-2018-12018/): Go Ethereum LES protocol implementation vulnerable to Denial of Service (high 7.5)
- [CVE-2018-12016](https://insights.sbomify.com/CVE-2018-12016/): Denial of service in gnome:epiphany (high 7.5)
- [CVE-2018-12015](https://insights.sbomify.com/CVE-2018-12015/): Path traversal in apple:mac os x (high 7.5)
- [CVE-2018-12014](https://insights.sbomify.com/CVE-2018-12014/): Null dereference in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-12013](https://insights.sbomify.com/CVE-2018-12013/): Auth bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2018-12012](https://insights.sbomify.com/CVE-2018-12012/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2018-12011](https://insights.sbomify.com/CVE-2018-12011/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.5)
- [CVE-2018-12010](https://insights.sbomify.com/CVE-2018-12010/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-1201](https://insights.sbomify.com/CVE-2018-1201/): Cross-site scripting in Isilon OneFS (medium 4.8)
- [CVE-2018-12006](https://insights.sbomify.com/CVE-2018-12006/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.5)
- [CVE-2018-12005](https://insights.sbomify.com/CVE-2018-12005/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (medium 5.5)
- [CVE-2018-12004](https://insights.sbomify.com/CVE-2018-12004/): Security feature bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (medium 5.5)
- [CVE-2018-1200](https://insights.sbomify.com/CVE-2018-1200/): Information disclosure in Apps Manager for PCF (medium 6.5)
- [CVE-2018-11999](https://insights.sbomify.com/CVE-2018-11999/): Denial of service in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2018-11998](https://insights.sbomify.com/CVE-2018-11998/): Race condition in Snapdragon Mobile, Snapdragon Wear (high 7.5)
- [CVE-2018-11996](https://insights.sbomify.com/CVE-2018-11996/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2018-11995](https://insights.sbomify.com/CVE-2018-11995/): Memory corruption in google:android (high 7.8)
- [CVE-2018-11994](https://insights.sbomify.com/CVE-2018-11994/): Security feature bypass in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2018-11993](https://insights.sbomify.com/CVE-2018-11993/): Memory corruption in Snapdragon Wear (high 8.8)
- [CVE-2018-1199](https://insights.sbomify.com/CVE-2018-1199/): Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core (medium 5.3)
- [CVE-2018-11988](https://insights.sbomify.com/CVE-2018-11988/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11987](https://insights.sbomify.com/CVE-2018-11987/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11986](https://insights.sbomify.com/CVE-2018-11986/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11985](https://insights.sbomify.com/CVE-2018-11985/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11984](https://insights.sbomify.com/CVE-2018-11984/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11983](https://insights.sbomify.com/CVE-2018-11983/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11982](https://insights.sbomify.com/CVE-2018-11982/): Memory corruption in Snapdragon Mobile, Snapdragon Wear (high 8.8)
- [CVE-2018-11980](https://insights.sbomify.com/CVE-2018-11980/): Memory corruption in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (high 7.8)
- [CVE-2018-1198](https://insights.sbomify.com/CVE-2018-1198/): Information disclosure in Cloud Cache (high 8.8)
- [CVE-2018-11976](https://insights.sbomify.com/CVE-2018-11976/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 5.5)
- [CVE-2018-11971](https://insights.sbomify.com/CVE-2018-11971/): Security feature bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, (medium 5.5)
- [CVE-2018-11970](https://insights.sbomify.com/CVE-2018-11970/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2018-1197](https://insights.sbomify.com/CVE-2018-1197/): Information disclosure in Windows Stemcells (high 8.5)
- [CVE-2018-11968](https://insights.sbomify.com/CVE-2018-11968/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2018-11967](https://insights.sbomify.com/CVE-2018-11967/): Security feature bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.8)
- [CVE-2018-11966](https://insights.sbomify.com/CVE-2018-11966/): Other in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.8)
- [CVE-2018-11965](https://insights.sbomify.com/CVE-2018-11965/): Privilege escalation in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11964](https://insights.sbomify.com/CVE-2018-11964/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11963](https://insights.sbomify.com/CVE-2018-11963/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11962](https://insights.sbomify.com/CVE-2018-11962/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11961](https://insights.sbomify.com/CVE-2018-11961/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11960](https://insights.sbomify.com/CVE-2018-11960/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-1196](https://insights.sbomify.com/CVE-2018-1196/): Moderate severity vulnerability that affects org.springframework.boot:spring-boot (medium 5.9)
- [CVE-2018-11958](https://insights.sbomify.com/CVE-2018-11958/): Information disclosure in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (medium 5.5)
- [CVE-2018-11956](https://insights.sbomify.com/CVE-2018-11956/): Misconfiguration in google:android (high 7.8)
- [CVE-2018-11955](https://insights.sbomify.com/CVE-2018-11955/): Memory corruption in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/132/