Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 134 of 163.
- CVE-2018-11846 Information disclosure in Snapdragon Mobile
- CVE-2018-11845 Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
- CVE-2018-11843 Use after free in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11842 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11840 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-1184 Command injection in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, EMC RecoverPoint versions prior to 5.0.1.3
- CVE-2018-11838 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
- CVE-2018-11836 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11832 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11830 Integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
- CVE-2018-1183 XML external entity in Dell EMC Unisphere for VMAX Virtual Appliance, Dell EMC Solutions Enabler Virtual Appliance, Dell EMC VASA Provider Virtual Appliance, Dell EMC SMIS, Dell EMC VMAX Embedded Management (eManagement), Dell EMC VNX2 Operating Environment (OE) for File, Dell EMC VNX2 Operating Environment (OE) for Block, Dell EMC VNX1 Operating Environment (OE) for File, Dell EMC VNX1 Operating Environment (OE) for Block, Dell EMC VNXe3200 Operating Environment (OE), Dell EMC VNXe1600 Operating Environment (OE), Dell EMC VNXe 3100/3150/3300 Operating Environment (OE), Dell EMC ViPR SRM, Dell EMC ViPR SRM, Dell EMC XtremIO, Dell EMC VMAX eNAS, Dell EMC Unity Operating Environment (OE)
- CVE-2018-11828 Denial of service in Snapdragon Mobile
- CVE-2018-11827 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11826 Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11824 Memory corruption in Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11823 Memory corruption in google:android
- CVE-2018-11822 Integer overflow in Snapdragon Mobile
- CVE-2018-11821 Integer overflow in Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11820 Weak cryptography in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
- CVE-2018-1182 Privilege escalation in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and Governance version 7.0, all patch levels (hardware appliance and software bundle deployments only); RSA Identity Management & Governance (RSA IMG) versions 6.9.0, 6.9.1, all patch levels (hardware appliance and software bundle deployments only)
- CVE-2018-11819 Use after free in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
- CVE-2018-11818 Race condition in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11816 Use After Free in Video
- CVE-2018-11813 Denial of service in ijg:libjpeg
- CVE-2018-11808 Missing authorization in zohocorp:manageengine applications manager
- CVE-2018-11806 Memory corruption in canonical:ubuntu linux
- CVE-2018-11805 Command injection in Apache SpamAssassin
- CVE-2018-11804 Improper Input Validation in Apache Spark
- CVE-2018-11803 Null dereference in Apache Subversion
- CVE-2018-11802 Incorrect Authorization in Apache Solr
- CVE-2018-11801 SQL injection in Apache Fineract
- CVE-2018-11800 SQL injection in Apache Fineract
- CVE-2018-1180 Use after free in Foxit Reader
- CVE-2018-11799 Moderate severity vulnerability that affects org.apache.oozie:oozie-core
- CVE-2018-11798 Apache Thrift Node.js static web server sandbox escape
- CVE-2018-11797 In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation
- CVE-2018-11796 Apache Tika is vulnerable to entity expansions which can lead to a denial of service attack
- CVE-2018-11793 Stack Overflow in Apache Mesos
- CVE-2018-11792 Privilege escalation in Apache Impala
- CVE-2018-11790 Integer overflow in Apache OpenOffice
- CVE-2018-1179 Memory corruption in Foxit Reader
- CVE-2018-11789 Path traversal in Apache Incubator Heron
- CVE-2018-11788 XML External Entity Reference in Apache Karaf
- CVE-2018-11787 Improper Authentication in Apache Karaf
- CVE-2018-11786 Improper Privilege Management in Apache Karaf
- CVE-2018-11785 Missing authorization in Apache Impala
- CVE-2018-11784 Apache Tomcat Open Redirect vulnerability
- CVE-2018-11783 Information disclosure in Apache Traffic Server
- CVE-2018-11782 Denial of service in Apache Subversion
- CVE-2018-11781 Code injection in Apache SpamAssassin
- CVE-2018-11780 Code injection in Apache SpamAssassin
- CVE-2018-1178 Use after free in Foxit Reader
- CVE-2018-11779 Deserialization of Untrusted Data in Apache Storm
- CVE-2018-11778 UnixAuthenticationService in Apache Ranger was updated to correctly handle user input to avoid Stack-based buffer overflow
- CVE-2018-11777 Improper Authentication in hive:hive-exec
- CVE-2018-11776 Apache Struts Remote Code Execution
- CVE-2018-11775 Improper Certificate Validation in Apache activemq-client
- CVE-2018-11774 SQL injection in VCL
- CVE-2018-11773 Other in VCL
- CVE-2018-11772 SQL injection in VCL
- CVE-2018-11771 Moderate severity vulnerability that affects org.apache.commons:commons-compress
- CVE-2018-11770 org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability
- CVE-2018-1177 Use after free in Foxit Reader
- CVE-2018-11769 Privilege escalation in Apache CouchDB
- CVE-2018-11768 user/group information can be corrupted across storing in fsimage and reading back from fsimage
- CVE-2018-11767 Improper Privilege Management in org.apache.hadoop:hadoop-main
- CVE-2018-11766 Arbitrary Command Execution in Hadoop
- CVE-2018-11765 Improper Authentication in Apache Hadoop
- CVE-2018-11764 Authentication bypass in Apache Hadoop
- CVE-2018-11763 Denial of service in Apache HTTP Server
- CVE-2018-11762 Moderate severity vulnerability that affects org.apache.tika:tika-core
- CVE-2018-11761 High severity vulnerability that affects org.apache.tika:tika-core
- CVE-2018-11760 Pyspark User Impersonation Vulnerability
- CVE-2018-1176 Memory corruption in Foxit Reader
- CVE-2018-11759 Path traversal in Apache Tomcat Connectors
- CVE-2018-11758 XML External Entity Reference in Apache Cayenne
- CVE-2018-11757 Code injection in Docker Skeleton Runtime for Apache OpenWhisk
- CVE-2018-11756 Code injection in PHP Runtime for Apache OpenWhisk
- CVE-2018-11752 Information disclosure in puppet:cisco ios
- CVE-2018-11751 Security feature bypass in Puppet Agent, Puppet
- CVE-2018-11750 Auth bypass in puppet:cisco ios module
- CVE-2018-1175 Information disclosure in Foxit Reader
- CVE-2018-11749 Information disclosure in Puppet Enterprise
- CVE-2018-11748 Information disclosure in puppet:device manager
- CVE-2018-11747 Hardcoded credentials in Puppet Discovery
- CVE-2018-11746 Puppet Discovery can leak authentication information
- CVE-2018-11744 Missing authorization in cloudera:cloudera manager
- CVE-2018-11743 Memory corruption in debian:debian linux
- CVE-2018-11742 Information disclosure in nec:univerge sv9100 webpro firmware
- CVE-2018-11741 Information disclosure in nec:univerge sv9100 webpro firmware
- CVE-2018-11740 Memory corruption in sleuthkit:the sleuth kit
- CVE-2018-1174 Information disclosure in Foxit Reader
- CVE-2018-11739 Memory corruption in sleuthkit:the sleuth kit
- CVE-2018-11738 Memory corruption in sleuthkit:the sleuth kit
- CVE-2018-11737 Memory corruption in sleuthkit:the sleuth kit
- CVE-2018-11736 File upload in pluck-cms:pluck
- CVE-2018-11735 Cross-site scripting in ximdex:ximdex
- CVE-2018-11734 Cross-site scripting in e107:e107
- CVE-2018-11731 Memory corruption in libfsntfs project:libfsntfs
- CVE-2018-11730 Memory corruption in libfsntfs project:libfsntfs