Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 138 of 163.
- CVE-2018-11392 File upload in jigowatt:php login \& user management
- CVE-2018-1139 Weak cryptography in samba
- CVE-2018-11386 Symfony DoS
- CVE-2018-11385 Symfony Session Fixation Vulnerability
- CVE-2018-11384 Memory corruption in radare:radare2
- CVE-2018-11383 Memory corruption in radare:radare2
- CVE-2018-11382 Memory corruption in radare:radare2
- CVE-2018-11381 Memory corruption in radare:radare2
- CVE-2018-11380 Memory corruption in radare:radare2
- CVE-2018-11379 Memory corruption in radare:radare2
- CVE-2018-11378 Memory corruption in radare:radare2
- CVE-2018-11377 Memory corruption in radare:radare2
- CVE-2018-11376 Memory corruption in radare:radare2
- CVE-2018-11375 Memory corruption in radare:radare2
- CVE-2018-11373 SQL injection in iscripts:eswap
- CVE-2018-11372 SQL injection in iscripts:eswap
- CVE-2018-11371 Cross-site request forgery in skycaiji:skycaiji
- CVE-2018-1137 Moodle Portfolio script allows instantiation of class chosen by user
- CVE-2018-11369 SQL injection in pbootcms:pbootcms
- CVE-2018-11367 Denial of service in cppcms:cppcms
- CVE-2018-11366 Cross-site scripting in loginizer:loginizer
- CVE-2018-11365 Denial of service in wizardmac:readstat
- CVE-2018-11364 Denial of service in wizardmac:readstat
- CVE-2018-11363 Memory corruption in pdfgen:pdfgen
- CVE-2018-11362 Memory corruption in debian:debian linux
- CVE-2018-11361 Memory corruption in wireshark:wireshark
- CVE-2018-11360 Memory corruption in debian:debian linux
- CVE-2018-1136 Moodle Cross-site Scripting
- CVE-2018-11359 Null dereference in debian:debian linux
- CVE-2018-11358 Use after free in debian:debian linux
- CVE-2018-11357 Denial of service in debian:debian linux
- CVE-2018-11356 Null dereference in debian:debian linux
- CVE-2018-11355 Memory corruption in wireshark:wireshark
- CVE-2018-11354 Denial of service in wireshark:wireshark
- CVE-2018-11352 Wallabag cross-site scripting (XSS) vulnerability
- CVE-2018-11351 Cross-site scripting in jirafeau:jirafeau
- CVE-2018-11350 Cross-site scripting in jirafeau:jirafeau
- CVE-2018-1135 Moodle Portfolio forum caller class allows a user to download any file
- CVE-2018-11349 Cross-site request forgery in jirafeau:jirafeau
- CVE-2018-11348 Cross-site scripting in yunohost:yunohost
- CVE-2018-11347 Other in yunohost:yunohost
- CVE-2018-11346 Missing authorization in asustor:as6202t firmware
- CVE-2018-11345 File upload in asustor:as6202t firmware
- CVE-2018-11344 Path traversal in asustor:as6202t firmware
- CVE-2018-11343 Cross-site scripting in asustor:soundsgood
- CVE-2018-11342 Path traversal in asustor:as6202t firmware
- CVE-2018-11341 Path traversal in asustor:as6202t firmware
- CVE-2018-11340 File upload in asustor:as6202t firmware
- CVE-2018-1134 Moodle Improper Privilege Management
- CVE-2018-11339 Cross-site scripting in frappe:erpnext
- CVE-2018-11338 Information disclosure in intuit:lacerte
- CVE-2018-11335 Integer overflow in genesis vision:gvtoken
- CVE-2018-11334 Misconfiguration in windscribe:windscribe
- CVE-2018-11332 Cross-site scripting in clippercms:clippercms
- CVE-2018-11331 File upload in pluck-cms:pluck
- CVE-2018-11330 Cross-site scripting in pluck-cms:pluck
- CVE-2018-1133 Moodle calculated question type allows remote code execution by Question authors
- CVE-2018-11329 Missing authorization in ethercartel:ether cartel
- CVE-2018-11328 Cross-site scripting in joomla:joomla\!
- CVE-2018-11327 Information disclosure in joomla:joomla\!
- CVE-2018-11326 Joomla! XSS Vulnerability
- CVE-2018-11325 Information disclosure in joomla:joomla\!
- CVE-2018-11324 Race condition in joomla:joomla\!
- CVE-2018-11323 Privilege escalation in joomla:joomla\!
- CVE-2018-11322 File upload in joomla:joomla\!
- CVE-2018-11321 Other in joomla:joomla\!
- CVE-2018-11320 Information disclosure in octopus:octopus server
- CVE-2018-1132 SQL injection in opendaylight
- CVE-2018-11319 Path traversal in debian:debian linux
- CVE-2018-11317 Subrion CMS XSS
- CVE-2018-11316 Auth bypass in sonos:sonos firmware
- CVE-2018-11315 Auth bypass in radiothermostat:ct50 firmware
- CVE-2018-11314 Auth bypass in roku:roku firmware
- CVE-2018-11311 Hardcoded credentials in myscada:mypro
- CVE-2018-1131 Deserialization of Untrusted Data in Infinispan
- CVE-2018-11309 SQL injection in membermouse:membermouse
- CVE-2018-11307 Deserialization of Untrusted Data in jackson-databind
- CVE-2018-11305 Use after free in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11304 Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11302 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11301 Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11300 Use after free in google:android
- CVE-2018-1130 Null dereference in kernel
- CVE-2018-11299 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11298 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11297 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11296 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11295 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11294 Other in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11293 Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-11292 Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11291 Weak cryptography in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11290 Weak cryptography in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
- CVE-2018-1129 Auth bypass in ceph
- CVE-2018-11289 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
- CVE-2018-11288 Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11287 Other in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11286 Use after free in google:android
- CVE-2018-11285 Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
- CVE-2018-11284 Denial of service in Snapdragon Mobile, Snapdragon Wear