Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 137 of 163.
- CVE-2018-11495 OpenCart Path Traversal
- CVE-2018-11494 OpenCart Path Traversal
- CVE-2018-11493 Cross-site request forgery in wuzhicms:wuzhicms
- CVE-2018-11492 Denial of service in asus:hg100 firmware
- CVE-2018-11491 Auth bypass in asus:hg100 firmware
- CVE-2018-11490 Memory corruption in canonical:ubuntu linux
- CVE-2018-1149 Memory corruption in NUUO NVRMini2
- CVE-2018-11489 Memory corruption in giflib project:giflib
- CVE-2018-11488 Denial of service in dtsearch:dtsearch
- CVE-2018-11487 Cross-site scripting in phpmywind:phpmywind
- CVE-2018-11486 Cross-site scripting in multidots:advance search for woocommerce
- CVE-2018-11485 Cross-site scripting in multidots:woocommerce quick reports
- CVE-2018-11482 Hardcoded credentials in tp-link:ipc tl-ipc223\(p\)-6 firmware
- CVE-2018-11481 Code injection in tp-link:ipc tl-ipc223\(p\)-6 firmware
- CVE-2018-1148 Auth bypass in Tenable Nessus
- CVE-2018-11479 Privilege escalation in windscribe:windscribe
- CVE-2018-11478 Auth bypass in vgate:icar 2 wi-fi obd2 firmware
- CVE-2018-11477 Information disclosure in vgate:icar 2 wi-fi obd2 firmware
- CVE-2018-11476 Auth bypass in vgate:icar 2 wi-fi obd2 firmware
- CVE-2018-11475 Auth bypass in monstra:monstra
- CVE-2018-11474 Auth bypass in monstra:monstra
- CVE-2018-11473 Cross-site scripting in monstra:monstra
- CVE-2018-11472 Cross-site scripting in monstra:monstra
- CVE-2018-11471 Cross-site scripting in getcockpit:cockpit
- CVE-2018-11470 SQL injection in iscripts:eswap
- CVE-2018-1147 Cross-site scripting in Tenable Nessus
- CVE-2018-11469 Information disclosure in canonical:ubuntu linux
- CVE-2018-11468 Memory corruption in debian:debian linux
- CVE-2018-11466 Other in SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CVE-2018-11465 Memory corruption in SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CVE-2018-11464 Denial of service in SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CVE-2018-11463 Memory corruption in SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CVE-2018-11462 Privilege escalation in SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CVE-2018-11461 Privilege escalation in SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CVE-2018-11460 Privilege escalation in SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CVE-2018-1146 Auth bypass in N750 DB Wi-Fi Dual-Band N+ Gigabit Router (F9K1103)
- CVE-2018-11459 Privilege escalation in SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CVE-2018-11458 Integer overflow in SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CVE-2018-11457 Memory corruption in SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CVE-2018-11456 Server-side request forgery in Automation License Manager 5
- CVE-2018-11455 Path traversal in Automation License Manager 5, Automation License Manager 6
- CVE-2018-11454 Misconfiguration in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15
- CVE-2018-11453 Misconfiguration in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15
- CVE-2018-11452 Denial of service in Firmware variant DNP3 TCP for EN100 Ethernet module
- CVE-2018-11451 Denial of service in Firmware variant DNP3 TCP for EN100 Ethernet module
- CVE-2018-11450 Cross-site scripting in Siemens PLM Software TEAMCENTER
- CVE-2018-1145 Memory corruption in N750 DB Wi-Fi Dual-Band N+ Gigabit Router (F9K1103)
- CVE-2018-11449 Information disclosure in SCALANCE M875
- CVE-2018-11448 Cross-site scripting in SCALANCE M875
- CVE-2018-11447 Cross-site request forgery in SCALANCE M875
- CVE-2018-11446 Integer overflow in gold reward project:gold reward
- CVE-2018-11445 Cross-site request forgery in easyservice billing project:easyservice billing
- CVE-2018-11444 SQL injection in easyservice billing project:easyservice billing
- CVE-2018-11443 Cross-site scripting in easyservice billing project:easyservice billing
- CVE-2018-11442 Cross-site request forgery in easyservice billing project:easyservice billing
- CVE-2018-11440 Memory corruption in canonical:ubuntu linux
- CVE-2018-1144 Command injection in N750 DB Wi-Fi Dual-Band N+ Gigabit Router (F9K1103)
- CVE-2018-11439 Memory corruption in debian:debian linux
- CVE-2018-11438 Memory corruption in libmobi project:libmobi
- CVE-2018-11437 Information disclosure in libmobi project:libmobi
- CVE-2018-11436 Memory corruption in libmobi project:libmobi
- CVE-2018-11435 Information disclosure in libmobi project:libmobi
- CVE-2018-11434 Memory corruption in libmobi project:libmobi
- CVE-2018-11433 Memory corruption in libmobi project:libmobi
- CVE-2018-11432 Memory corruption in libmobi project:libmobi
- CVE-2018-11430 Cross-site scripting in moderator log notes project:moderator log notes
- CVE-2018-1143 Command injection in N750 DB Wi-Fi Dual-Band N+ Gigabit Router (F9K1103)
- CVE-2018-11429 Integer overflow in atlant:atlant
- CVE-2018-11427 Cross-site request forgery in moxa:oncell g3150-hspa-t firmware
- CVE-2018-11426 Auth bypass in moxa:oncell g3150-hspa-t firmware
- CVE-2018-11425 Memory corruption in moxa:oncell g3470a-lte-eu-t firmware
- CVE-2018-11424 Memory corruption in moxa:oncell g3470a-lte-eu-t firmware
- CVE-2018-11423 Memory corruption in moxa:oncell g3150-hspa-t firmware
- CVE-2018-11422 Auth bypass in moxa:oncell g3150-hspa-t firmware
- CVE-2018-11421 Information disclosure in moxa:oncell g3150-hspa-t firmware
- CVE-2018-11420 Memory corruption in moxa:oncell g3150-hspa-t firmware
- CVE-2018-1142 Cross-site scripting in Tenable Appliance
- CVE-2018-11419 Memory corruption in jerryscript:jerryscript
- CVE-2018-11418 Memory corruption in jerryscript:jerryscript
- CVE-2018-11416 Memory corruption in jpegoptim project:jpegoptim
- CVE-2018-11415 Cross-site scripting in sap:internet transaction server
- CVE-2018-11414 SQL injection in bearadmin project:bearadmin
- CVE-2018-11413 Path traversal in bearadmin project:bearadmin
- CVE-2018-11412 Memory corruption in canonical:ubuntu linux
- CVE-2018-11411 Business logic in dimoncoin:dimoncoin
- CVE-2018-11410 Memory corruption in canonical:ubuntu linux
- CVE-2018-1141 Misconfiguration in Nessus
- CVE-2018-11409 Information disclosure in splunk:splunk
- CVE-2018-11408 Symfony Open Redirect
- CVE-2018-11407 Symfony Authentication Bypass
- CVE-2018-11406 Symfony CSRF Token Fixation
- CVE-2018-11405 Cross-site request forgery in kliqqi:kliqqi cms
- CVE-2018-11404 Cross-site scripting in domainmod:domainmod
- CVE-2018-11403 Cross-site scripting in domainmod:domainmod
- CVE-2018-11402 Information disclosure in simplisafe:u9k-kp1000 firmware
- CVE-2018-11401 Security feature bypass in simplisafe:u9k-bs1000 firmware
- CVE-2018-11400 Security feature bypass in simplisafe:u9k-bs1000 firmware
- CVE-2018-1140 Denial of service in samba
- CVE-2018-11399 Information disclosure in simplisafe:u9k-es1000 firmware
- CVE-2018-11396 Null dereference in gnome:epiphany