# Vulnerabilities published in 2018


- [CVE-2018-11616](https://insights.sbomify.com/CVE-2018-11616/): Command injection in Tencent Foxmail (high 8.8)
- [CVE-2018-11615](https://insights.sbomify.com/CVE-2018-11615/): Mosca REDoS Vulnerability (high 7.5)
- [CVE-2018-11614](https://insights.sbomify.com/CVE-2018-11614/): Privilege escalation in Samsung Members (high 8.8)
- [CVE-2018-1161](https://insights.sbomify.com/CVE-2018-1161/): Memory corruption in Quest NetVault Backup (critical 9.8)
- [CVE-2018-1160](https://insights.sbomify.com/CVE-2018-1160/): Memory corruption in Netatalk (critical 9.8)
- [CVE-2018-11598](https://insights.sbomify.com/CVE-2018-11598/): Memory corruption in espruino:espruino (high 7.1)
- [CVE-2018-11597](https://insights.sbomify.com/CVE-2018-11597/): Denial of service in espruino:espruino (medium 5.5)
- [CVE-2018-11596](https://insights.sbomify.com/CVE-2018-11596/): Memory corruption in espruino:espruino (medium 5.5)
- [CVE-2018-11595](https://insights.sbomify.com/CVE-2018-11595/): Memory corruption in espruino:espruino (high 7.8)
- [CVE-2018-11594](https://insights.sbomify.com/CVE-2018-11594/): Memory corruption in espruino:espruino (medium 5.5)
- [CVE-2018-11593](https://insights.sbomify.com/CVE-2018-11593/): Memory corruption in espruino:espruino (high 7.1)
- [CVE-2018-11592](https://insights.sbomify.com/CVE-2018-11592/): Memory corruption in espruino:espruino (medium 5.5)
- [CVE-2018-11591](https://insights.sbomify.com/CVE-2018-11591/): Null dereference in espruino:espruino (medium 5.5)
- [CVE-2018-11590](https://insights.sbomify.com/CVE-2018-11590/): Integer overflow in espruino:espruino (medium 5.5)
- [CVE-2018-1159](https://insights.sbomify.com/CVE-2018-1159/): Memory corruption in mikrotik:routeros (medium 6.5)
- [CVE-2018-11589](https://insights.sbomify.com/CVE-2018-11589/): SQL injection in centreon:centreon (critical 9.8)
- [CVE-2018-11588](https://insights.sbomify.com/CVE-2018-11588/): Cross-site scripting in centreon:centreon (medium 5.4)
- [CVE-2018-11587](https://insights.sbomify.com/CVE-2018-11587/): Centreon RCE Vulnerability (critical 9.8)
- [CVE-2018-11586](https://insights.sbomify.com/CVE-2018-11586/): XML external entity in searchblox:searchblox (critical 9.8)
- [CVE-2018-11583](https://insights.sbomify.com/CVE-2018-11583/): Cross-site scripting in seacms:seacms (medium 6.1)
- [CVE-2018-11581](https://insights.sbomify.com/CVE-2018-11581/): Cross-site scripting in brother:hl-l2340d firmware (medium 4.8)
- [CVE-2018-11580](https://insights.sbomify.com/CVE-2018-11580/): Missing authorization in multidots:mass pages\/posts creator (medium 5.4)
- [CVE-2018-1158](https://insights.sbomify.com/CVE-2018-1158/): Denial of service in mikrotik:routeros (medium 6.5)
- [CVE-2018-11579](https://insights.sbomify.com/CVE-2018-11579/): Missing authorization in multidots:woocommerce category banner management (medium 5.3)
- [CVE-2018-11578](https://insights.sbomify.com/CVE-2018-11578/): Memory corruption in miniupnp project:ngiflib (medium 6.5)
- [CVE-2018-11577](https://insights.sbomify.com/CVE-2018-11577/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2018-11576](https://insights.sbomify.com/CVE-2018-11576/): Memory corruption in miniupnp project:ngiflib (critical 9.8)
- [CVE-2018-11575](https://insights.sbomify.com/CVE-2018-11575/): Memory corruption in miniupnp project:ngiflib (critical 9.8)
- [CVE-2018-11574](https://insights.sbomify.com/CVE-2018-11574/): Integer overflow in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-11572](https://insights.sbomify.com/CVE-2018-11572/): Cross-site scripting in clippercms:clippercms (medium 5.4)
- [CVE-2018-11571](https://insights.sbomify.com/CVE-2018-11571/): Auth bypass in clippercms:clippercms (high 8.8)
- [CVE-2018-1157](https://insights.sbomify.com/CVE-2018-1157/): Denial of service in mikrotik:routeros (medium 6.5)
- [CVE-2018-11569](https://insights.sbomify.com/CVE-2018-11569/): Deserialization in eventum project:eventum (critical 9.8)
- [CVE-2018-11568](https://insights.sbomify.com/CVE-2018-11568/): Cross-site scripting in cactusthemes:gameplan-event and gym fitness (medium 6.1)
- [CVE-2018-11567](https://insights.sbomify.com/CVE-2018-11567/): Information disclosure in amazon:echo dot firmware (low 3.3)
- [CVE-2018-11565](https://insights.sbomify.com/CVE-2018-11565/): Information disclosure in mahara:mahara (medium 5.3)
- [CVE-2018-11564](https://insights.sbomify.com/CVE-2018-11564/): Pagekit Stored Cross-site Scripting (medium 4.8)
- [CVE-2018-11563](https://insights.sbomify.com/CVE-2018-11563/): Cross-site scripting in debian:debian linux (medium 4.6)
- [CVE-2018-11562](https://insights.sbomify.com/CVE-2018-11562/): Cross-site scripting in misp-project:misp (medium 6.1)
- [CVE-2018-11561](https://insights.sbomify.com/CVE-2018-11561/): Integer overflow in erc20token project:erc20token (high 7.5)
- [CVE-2018-11560](https://insights.sbomify.com/CVE-2018-11560/): Memory corruption in insteon:2864-222 firmware (critical 9.8)
- [CVE-2018-1156](https://insights.sbomify.com/CVE-2018-1156/): Memory corruption in mikrotik:routeros (high 8.8)
- [CVE-2018-11559](https://insights.sbomify.com/CVE-2018-11559/): Cross-site scripting in domainmod:domainmod (medium 5.4)
- [CVE-2018-11558](https://insights.sbomify.com/CVE-2018-11558/): Cross-site scripting in domainmod:domainmod (medium 5.4)
- [CVE-2018-11557](https://insights.sbomify.com/CVE-2018-11557/): Cross-site scripting in yiban:easy class education platform (medium 6.1)
- [CVE-2018-11556](https://insights.sbomify.com/CVE-2018-11556/): Memory corruption in littlecms:little cms (high 7.8)
- [CVE-2018-11555](https://insights.sbomify.com/CVE-2018-11555/): Memory corruption in littlecms:little cms (high 7.8)
- [CVE-2018-11554](https://insights.sbomify.com/CVE-2018-11554/): Information disclosure in yzmcms:yzmcms (critical 9.8)
- [CVE-2018-11553](https://insights.sbomify.com/CVE-2018-11553/): Cross-site scripting in sgin:xiangyun platform (medium 6.1)
- [CVE-2018-11552](https://insights.sbomify.com/CVE-2018-11552/): Cross-site scripting in nch:axon pbx (medium 6.1)
- [CVE-2018-11551](https://insights.sbomify.com/CVE-2018-11551/): Other in nch:axon pbx (high 7.8)
- [CVE-2018-1155](https://insights.sbomify.com/CVE-2018-1155/): Cross-site scripting in SecurityCenter (medium 5.4)
- [CVE-2018-11549](https://insights.sbomify.com/CVE-2018-11549/): Cross-site scripting in wuzhicms:wuzhicms (medium 5.4)
- [CVE-2018-11548](https://insights.sbomify.com/CVE-2018-11548/): Denial of service in block:eos (high 7.5)
- [CVE-2018-11547](https://insights.sbomify.com/CVE-2018-11547/): Memory corruption in md4c project:md4c (critical 9.8)
- [CVE-2018-11546](https://insights.sbomify.com/CVE-2018-11546/): Memory corruption in md4c project:md4c (critical 9.8)
- [CVE-2018-11545](https://insights.sbomify.com/CVE-2018-11545/): Memory corruption in md4c project:md4c (critical 9.8)
- [CVE-2018-11544](https://insights.sbomify.com/CVE-2018-11544/): Information disclosure in theolivetree:ftp server (critical 9.8)
- [CVE-2018-11543](https://insights.sbomify.com/CVE-2018-11543/): Path traversal in ribboncommunications:sbc swe lite firmware (high 7.5)
- [CVE-2018-11542](https://insights.sbomify.com/CVE-2018-11542/): Command injection in ribboncommunications:sbc swe lite firmware (critical 9.8)
- [CVE-2018-11541](https://insights.sbomify.com/CVE-2018-11541/): Missing authorization in ribboncommunications:sbc swe lite web (critical 9.8)
- [CVE-2018-1154](https://insights.sbomify.com/CVE-2018-1154/): Information disclosure in SecurityCenter (high 8.8)
- [CVE-2018-11538](https://insights.sbomify.com/CVE-2018-11538/): Cross-site request forgery in searchblox:searchblox (high 8.8)
- [CVE-2018-11537](https://insights.sbomify.com/CVE-2018-11537/): Auth0 angular-jwt misinterprets allowlist as regex (medium 6.5)
- [CVE-2018-11536](https://insights.sbomify.com/CVE-2018-11536/): Memory corruption in md4c project:md4c (critical 9.8)
- [CVE-2018-11535](https://insights.sbomify.com/CVE-2018-11535/): SQL injection in sitemakin:slac (critical 9.8)
- [CVE-2018-11532](https://insights.sbomify.com/CVE-2018-11532/): Cross-site scripting in changuondyu advanced statistics project:changuondyu advanced statistics (medium 6.1)
- [CVE-2018-11531](https://insights.sbomify.com/CVE-2018-11531/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-1153](https://insights.sbomify.com/CVE-2018-1153/): Security feature bypass in Burp Suite Community Edition (high 7.4)
- [CVE-2018-11529](https://insights.sbomify.com/CVE-2018-11529/): Use after free in debian:debian linux (high 8.0)
- [CVE-2018-11528](https://insights.sbomify.com/CVE-2018-11528/): SQL injection in wuzhicms:wuzhicms (critical 9.8)
- [CVE-2018-11527](https://insights.sbomify.com/CVE-2018-11527/): Cross-site request forgery in cscms project:cscms (high 8.8)
- [CVE-2018-11526](https://insights.sbomify.com/CVE-2018-11526/): Code injection in webtoffee:wordpress comments import and export (high 7.8)
- [CVE-2018-11525](https://insights.sbomify.com/CVE-2018-11525/): Code injection in algolplus:advanced order export for woocommerce (high 7.8)
- [CVE-2018-11523](https://insights.sbomify.com/CVE-2018-11523/): File upload in nuuo:nvrmini 2 firmware (critical 9.8)
- [CVE-2018-11522](https://insights.sbomify.com/CVE-2018-11522/): Yosoro 1.0.4 has stored XSS. (medium 6.1)
- [CVE-2018-1152](https://insights.sbomify.com/CVE-2018-1152/): Denial of service in libjpeg-turbo (medium 6.5)
- [CVE-2018-11518](https://insights.sbomify.com/CVE-2018-11518/): Auth bypass in hcltech:legacy ivr firmware (high 8.1)
- [CVE-2018-11517](https://insights.sbomify.com/CVE-2018-11517/): Information disclosure in myscada:mypro (medium 5.3)
- [CVE-2018-11516](https://insights.sbomify.com/CVE-2018-11516/): Use after free in videolan:vlc media player (high 8.8)
- [CVE-2018-11515](https://insights.sbomify.com/CVE-2018-11515/): SQL injection in gvectors:wpforo (critical 9.8)
- [CVE-2018-11514](https://insights.sbomify.com/CVE-2018-11514/): File upload in naukri clone script project:naukri clone script (high 8.8)
- [CVE-2018-11512](https://insights.sbomify.com/CVE-2018-11512/): Cross-site scripting in creatiwity:witycms (medium 4.8)
- [CVE-2018-11511](https://insights.sbomify.com/CVE-2018-11511/): SQL injection in asustor:asustor data master (critical 9.8)
- [CVE-2018-11510](https://insights.sbomify.com/CVE-2018-11510/): Command injection in asustor:adm (critical 9.8)
- [CVE-2018-1151](https://insights.sbomify.com/CVE-2018-1151/): Memory corruption in TV Live Hub (critical 9.8)
- [CVE-2018-11509](https://insights.sbomify.com/CVE-2018-11509/): Hardcoded credentials in asustor:asustor data master (critical 9.8)
- [CVE-2018-11508](https://insights.sbomify.com/CVE-2018-11508/): Information disclosure in canonical:ubuntu linux (medium 5.5)
- [CVE-2018-11507](https://insights.sbomify.com/CVE-2018-11507/): Denial of service in flif:flif (medium 6.5)
- [CVE-2018-11506](https://insights.sbomify.com/CVE-2018-11506/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2018-11505](https://insights.sbomify.com/CVE-2018-11505/): Information disclosure in werewolf online project:werewolf online (high 7.5)
- [CVE-2018-11504](https://insights.sbomify.com/CVE-2018-11504/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2018-11503](https://insights.sbomify.com/CVE-2018-11503/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2018-11502](https://insights.sbomify.com/CVE-2018-11502/): Cross-site request forgery in moderator log notes project:moderator log notes (medium 6.5)
- [CVE-2018-11501](https://insights.sbomify.com/CVE-2018-11501/): Cross-site request forgery in website seller script project:website seller script (high 8.8)
- [CVE-2018-11500](https://insights.sbomify.com/CVE-2018-11500/): Cross-site request forgery in publiccms:publiccms (high 8.8)
- [CVE-2018-1150](https://insights.sbomify.com/CVE-2018-1150/): Hardcoded credentials in NUUO NVRMini2 (high 7.3)
- [CVE-2018-11499](https://insights.sbomify.com/CVE-2018-11499/): Use after free in sass-lang:libsass (critical 9.8)
- [CVE-2018-11498](https://insights.sbomify.com/CVE-2018-11498/): Memory corruption in lizard project:lizard (high 7.8)
- [CVE-2018-11496](https://insights.sbomify.com/CVE-2018-11496/): Use after free in debian:debian linux (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/136/