# Vulnerabilities published in 2018


- [CVE-2018-11392](https://insights.sbomify.com/CVE-2018-11392/): File upload in jigowatt:php login \& user management (high 8.8)
- [CVE-2018-1139](https://insights.sbomify.com/CVE-2018-1139/): Weak cryptography in samba (medium 5.4)
- [CVE-2018-11386](https://insights.sbomify.com/CVE-2018-11386/): Symfony DoS (medium 5.9)
- [CVE-2018-11385](https://insights.sbomify.com/CVE-2018-11385/): Symfony Session Fixation Vulnerability (high 8.1)
- [CVE-2018-11384](https://insights.sbomify.com/CVE-2018-11384/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-11383](https://insights.sbomify.com/CVE-2018-11383/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-11382](https://insights.sbomify.com/CVE-2018-11382/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-11381](https://insights.sbomify.com/CVE-2018-11381/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-11380](https://insights.sbomify.com/CVE-2018-11380/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-11379](https://insights.sbomify.com/CVE-2018-11379/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-11378](https://insights.sbomify.com/CVE-2018-11378/): Memory corruption in radare:radare2 (high 7.8)
- [CVE-2018-11377](https://insights.sbomify.com/CVE-2018-11377/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-11376](https://insights.sbomify.com/CVE-2018-11376/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-11375](https://insights.sbomify.com/CVE-2018-11375/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-11373](https://insights.sbomify.com/CVE-2018-11373/): SQL injection in iscripts:eswap (critical 9.8)
- [CVE-2018-11372](https://insights.sbomify.com/CVE-2018-11372/): SQL injection in iscripts:eswap (critical 9.8)
- [CVE-2018-11371](https://insights.sbomify.com/CVE-2018-11371/): Cross-site request forgery in skycaiji:skycaiji (high 8.8)
- [CVE-2018-1137](https://insights.sbomify.com/CVE-2018-1137/): Moodle Portfolio script allows instantiation of class chosen by user (high 8.1)
- [CVE-2018-11369](https://insights.sbomify.com/CVE-2018-11369/): SQL injection in pbootcms:pbootcms (critical 9.8)
- [CVE-2018-11367](https://insights.sbomify.com/CVE-2018-11367/): Denial of service in cppcms:cppcms (high 7.5)
- [CVE-2018-11366](https://insights.sbomify.com/CVE-2018-11366/): Cross-site scripting in loginizer:loginizer (medium 6.1)
- [CVE-2018-11365](https://insights.sbomify.com/CVE-2018-11365/): Denial of service in wizardmac:readstat (high 7.5)
- [CVE-2018-11364](https://insights.sbomify.com/CVE-2018-11364/): Denial of service in wizardmac:readstat (high 7.5)
- [CVE-2018-11363](https://insights.sbomify.com/CVE-2018-11363/): Memory corruption in pdfgen:pdfgen (high 7.5)
- [CVE-2018-11362](https://insights.sbomify.com/CVE-2018-11362/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2018-11361](https://insights.sbomify.com/CVE-2018-11361/): Memory corruption in wireshark:wireshark (high 7.5)
- [CVE-2018-11360](https://insights.sbomify.com/CVE-2018-11360/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2018-1136](https://insights.sbomify.com/CVE-2018-1136/): Moodle Cross-site Scripting (medium 4.3)
- [CVE-2018-11359](https://insights.sbomify.com/CVE-2018-11359/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2018-11358](https://insights.sbomify.com/CVE-2018-11358/): Use after free in debian:debian linux (high 7.5)
- [CVE-2018-11357](https://insights.sbomify.com/CVE-2018-11357/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2018-11356](https://insights.sbomify.com/CVE-2018-11356/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2018-11355](https://insights.sbomify.com/CVE-2018-11355/): Memory corruption in wireshark:wireshark (high 7.5)
- [CVE-2018-11354](https://insights.sbomify.com/CVE-2018-11354/): Denial of service in wireshark:wireshark (high 7.5)
- [CVE-2018-11352](https://insights.sbomify.com/CVE-2018-11352/): Wallabag cross-site scripting (XSS) vulnerability (medium 4.0)
- [CVE-2018-11351](https://insights.sbomify.com/CVE-2018-11351/): Cross-site scripting in jirafeau:jirafeau (medium 6.1)
- [CVE-2018-11350](https://insights.sbomify.com/CVE-2018-11350/): Cross-site scripting in jirafeau:jirafeau (medium 6.1)
- [CVE-2018-1135](https://insights.sbomify.com/CVE-2018-1135/): Moodle Portfolio forum caller class allows a user to download any file (medium 6.5)
- [CVE-2018-11349](https://insights.sbomify.com/CVE-2018-11349/): Cross-site request forgery in jirafeau:jirafeau (high 8.8)
- [CVE-2018-11348](https://insights.sbomify.com/CVE-2018-11348/): Cross-site scripting in yunohost:yunohost (medium 5.4)
- [CVE-2018-11347](https://insights.sbomify.com/CVE-2018-11347/): Other in yunohost:yunohost (high 8.8)
- [CVE-2018-11346](https://insights.sbomify.com/CVE-2018-11346/): Missing authorization in asustor:as6202t firmware (medium 4.3)
- [CVE-2018-11345](https://insights.sbomify.com/CVE-2018-11345/): File upload in asustor:as6202t firmware (high 8.8)
- [CVE-2018-11344](https://insights.sbomify.com/CVE-2018-11344/): Path traversal in asustor:as6202t firmware (medium 6.5)
- [CVE-2018-11343](https://insights.sbomify.com/CVE-2018-11343/): Cross-site scripting in asustor:soundsgood (medium 5.4)
- [CVE-2018-11342](https://insights.sbomify.com/CVE-2018-11342/): Path traversal in asustor:as6202t firmware (medium 4.3)
- [CVE-2018-11341](https://insights.sbomify.com/CVE-2018-11341/): Path traversal in asustor:as6202t firmware (high 7.2)
- [CVE-2018-11340](https://insights.sbomify.com/CVE-2018-11340/): File upload in asustor:as6202t firmware (high 7.2)
- [CVE-2018-1134](https://insights.sbomify.com/CVE-2018-1134/): Moodle Improper Privilege Management (medium 6.5)
- [CVE-2018-11339](https://insights.sbomify.com/CVE-2018-11339/): Cross-site scripting in frappe:erpnext (medium 6.1)
- [CVE-2018-11338](https://insights.sbomify.com/CVE-2018-11338/): Information disclosure in intuit:lacerte (high 7.5)
- [CVE-2018-11335](https://insights.sbomify.com/CVE-2018-11335/): Integer overflow in genesis vision:gvtoken (high 7.5)
- [CVE-2018-11334](https://insights.sbomify.com/CVE-2018-11334/): Misconfiguration in windscribe:windscribe (high 7.8)
- [CVE-2018-11332](https://insights.sbomify.com/CVE-2018-11332/): Cross-site scripting in clippercms:clippercms (medium 4.8)
- [CVE-2018-11331](https://insights.sbomify.com/CVE-2018-11331/): File upload in pluck-cms:pluck (critical 9.8)
- [CVE-2018-11330](https://insights.sbomify.com/CVE-2018-11330/): Cross-site scripting in pluck-cms:pluck (medium 4.8)
- [CVE-2018-1133](https://insights.sbomify.com/CVE-2018-1133/): Moodle calculated question type allows remote code execution by Question authors (high 8.8)
- [CVE-2018-11329](https://insights.sbomify.com/CVE-2018-11329/): Missing authorization in ethercartel:ether cartel (high 7.5)
- [CVE-2018-11328](https://insights.sbomify.com/CVE-2018-11328/): Cross-site scripting in joomla:joomla\! (medium 4.7)
- [CVE-2018-11327](https://insights.sbomify.com/CVE-2018-11327/): Information disclosure in joomla:joomla\! (medium 4.3)
- [CVE-2018-11326](https://insights.sbomify.com/CVE-2018-11326/): Joomla! XSS Vulnerability (medium 4.8)
- [CVE-2018-11325](https://insights.sbomify.com/CVE-2018-11325/): Information disclosure in joomla:joomla\! (critical 9.8)
- [CVE-2018-11324](https://insights.sbomify.com/CVE-2018-11324/): Race condition in joomla:joomla\! (medium 5.9)
- [CVE-2018-11323](https://insights.sbomify.com/CVE-2018-11323/): Privilege escalation in joomla:joomla\! (high 8.8)
- [CVE-2018-11322](https://insights.sbomify.com/CVE-2018-11322/): File upload in joomla:joomla\! (high 7.5)
- [CVE-2018-11321](https://insights.sbomify.com/CVE-2018-11321/): Other in joomla:joomla\! (medium 6.5)
- [CVE-2018-11320](https://insights.sbomify.com/CVE-2018-11320/): Information disclosure in octopus:octopus server (critical 9.8)
- [CVE-2018-1132](https://insights.sbomify.com/CVE-2018-1132/): SQL injection in opendaylight (high 7.5)
- [CVE-2018-11319](https://insights.sbomify.com/CVE-2018-11319/): Path traversal in debian:debian linux (high 7.5)
- [CVE-2018-11317](https://insights.sbomify.com/CVE-2018-11317/): Subrion CMS XSS (medium 6.1)
- [CVE-2018-11316](https://insights.sbomify.com/CVE-2018-11316/): Auth bypass in sonos:sonos firmware (critical 9.6)
- [CVE-2018-11315](https://insights.sbomify.com/CVE-2018-11315/): Auth bypass in radiothermostat:ct50 firmware (medium 6.5)
- [CVE-2018-11314](https://insights.sbomify.com/CVE-2018-11314/): Auth bypass in roku:roku firmware (critical 9.6)
- [CVE-2018-11311](https://insights.sbomify.com/CVE-2018-11311/): Hardcoded credentials in myscada:mypro (critical 9.1)
- [CVE-2018-1131](https://insights.sbomify.com/CVE-2018-1131/): Deserialization of Untrusted Data in Infinispan (high 8.8)
- [CVE-2018-11309](https://insights.sbomify.com/CVE-2018-11309/): SQL injection in membermouse:membermouse (critical 9.8)
- [CVE-2018-11307](https://insights.sbomify.com/CVE-2018-11307/): Deserialization of Untrusted Data in jackson-databind (critical 9.8)
- [CVE-2018-11305](https://insights.sbomify.com/CVE-2018-11305/): Use after free in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2018-11304](https://insights.sbomify.com/CVE-2018-11304/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11302](https://insights.sbomify.com/CVE-2018-11302/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11301](https://insights.sbomify.com/CVE-2018-11301/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11300](https://insights.sbomify.com/CVE-2018-11300/): Use after free in google:android (high 7.8)
- [CVE-2018-1130](https://insights.sbomify.com/CVE-2018-1130/): Null dereference in kernel (medium 5.5)
- [CVE-2018-11299](https://insights.sbomify.com/CVE-2018-11299/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11298](https://insights.sbomify.com/CVE-2018-11298/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11297](https://insights.sbomify.com/CVE-2018-11297/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11296](https://insights.sbomify.com/CVE-2018-11296/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11295](https://insights.sbomify.com/CVE-2018-11295/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2018-11294](https://insights.sbomify.com/CVE-2018-11294/): Other in Android for MSM, Firefox OS for MSM, QRD Android (high 8.0)
- [CVE-2018-11293](https://insights.sbomify.com/CVE-2018-11293/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.7)
- [CVE-2018-11292](https://insights.sbomify.com/CVE-2018-11292/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2018-11291](https://insights.sbomify.com/CVE-2018-11291/): Weak cryptography in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.5)
- [CVE-2018-11290](https://insights.sbomify.com/CVE-2018-11290/): Weak cryptography in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.5)
- [CVE-2018-1129](https://insights.sbomify.com/CVE-2018-1129/): Auth bypass in ceph (medium 6.5)
- [CVE-2018-11289](https://insights.sbomify.com/CVE-2018-11289/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2018-11288](https://insights.sbomify.com/CVE-2018-11288/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2018-11287](https://insights.sbomify.com/CVE-2018-11287/): Other in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2018-11286](https://insights.sbomify.com/CVE-2018-11286/): Use after free in google:android (high 7.8)
- [CVE-2018-11285](https://insights.sbomify.com/CVE-2018-11285/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2018-11284](https://insights.sbomify.com/CVE-2018-11284/): Denial of service in Snapdragon Mobile, Snapdragon Wear (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/138/