# Vulnerabilities published in 2018 - [CVE-2018-11281](https://insights.sbomify.com/CVE-2018-11281/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8) - [CVE-2018-11280](https://insights.sbomify.com/CVE-2018-11280/): Denial of service in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.5) - [CVE-2018-1128](https://insights.sbomify.com/CVE-2018-1128/): Auth bypass in ceph (high 7.5) - [CVE-2018-11279](https://insights.sbomify.com/CVE-2018-11279/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 8.8) - [CVE-2018-11278](https://insights.sbomify.com/CVE-2018-11278/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.1) - [CVE-2018-11277](https://insights.sbomify.com/CVE-2018-11277/): Misconfiguration in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8) - [CVE-2018-11276](https://insights.sbomify.com/CVE-2018-11276/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8) - [CVE-2018-11275](https://insights.sbomify.com/CVE-2018-11275/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.5) - [CVE-2018-11274](https://insights.sbomify.com/CVE-2018-11274/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8) - [CVE-2018-11273](https://insights.sbomify.com/CVE-2018-11273/): Memory corruption in google:android (high 7.8) - [CVE-2018-11271](https://insights.sbomify.com/CVE-2018-11271/): Auth bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables (critical 9.8) - [CVE-2018-11270](https://insights.sbomify.com/CVE-2018-11270/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8) - [CVE-2018-1127](https://insights.sbomify.com/CVE-2018-1127/): Auth bypass in Red Hat Gluster Storage (medium 4.2) - [CVE-2018-11269](https://insights.sbomify.com/CVE-2018-11269/): Memory corruption in SSnapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8) - [CVE-2018-11268](https://insights.sbomify.com/CVE-2018-11268/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8) - [CVE-2018-11267](https://insights.sbomify.com/CVE-2018-11267/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8) - [CVE-2018-11266](https://insights.sbomify.com/CVE-2018-11266/): Use after free in google:android (high 7.8) - [CVE-2018-11265](https://insights.sbomify.com/CVE-2018-11265/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8) - [CVE-2018-11264](https://insights.sbomify.com/CVE-2018-11264/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8) - [CVE-2018-11263](https://insights.sbomify.com/CVE-2018-11263/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 8.8) - [CVE-2018-11262](https://insights.sbomify.com/CVE-2018-11262/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8) - [CVE-2018-11261](https://insights.sbomify.com/CVE-2018-11261/): Use after free in google:android (high 7.8) - [CVE-2018-11260](https://insights.sbomify.com/CVE-2018-11260/): Integer overflow in google:android (high 7.8) - [CVE-2018-1126](https://insights.sbomify.com/CVE-2018-1126/): Integer overflow in procps-ng, procps (medium 4.8) - [CVE-2018-11259](https://insights.sbomify.com/CVE-2018-11259/): Missing authorization in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.7) - [CVE-2018-11258](https://insights.sbomify.com/CVE-2018-11258/): Use after free in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8) - [CVE-2018-11257](https://insights.sbomify.com/CVE-2018-11257/): Missing authorization in Snapdragon Mobile (high 7.8) - [CVE-2018-11256](https://insights.sbomify.com/CVE-2018-11256/): Null dereference in podofo project:podofo (medium 6.5) - [CVE-2018-11255](https://insights.sbomify.com/CVE-2018-11255/): Null dereference in podofo project:podofo (medium 5.5) - [CVE-2018-11254](https://insights.sbomify.com/CVE-2018-11254/): Denial of service in podofo project:podofo (medium 5.5) - [CVE-2018-11251](https://insights.sbomify.com/CVE-2018-11251/): Memory corruption in imagemagick:imagemagick (medium 6.5) - [CVE-2018-1125](https://insights.sbomify.com/CVE-2018-1125/): Memory corruption in procps-ng, procps (medium 4.4) - [CVE-2018-11248](https://insights.sbomify.com/CVE-2018-11248/): Path traversal in liulishuo:filedownloader (critical 9.8) - [CVE-2018-11247](https://insights.sbomify.com/CVE-2018-11247/): Missing authorization in nasdaq:bwise (critical 9.8) - [CVE-2018-11246](https://insights.sbomify.com/CVE-2018-11246/): Denial of service in k7computing:antivrius (high 7.5) - [CVE-2018-11245](https://insights.sbomify.com/CVE-2018-11245/): Cross-site scripting in misp-project:misp (medium 6.1) - [CVE-2018-11244](https://insights.sbomify.com/CVE-2018-11244/): Missing authorization in dopewp:bbe theme (medium 5.3) - [CVE-2018-11243](https://insights.sbomify.com/CVE-2018-11243/): Memory corruption in upx:upx (high 7.8) - [CVE-2018-11242](https://insights.sbomify.com/CVE-2018-11242/): Information disclosure in makemytrip:makemytrip (medium 6.5) - [CVE-2018-11241](https://insights.sbomify.com/CVE-2018-11241/): Path traversal in softcase:t-router firmware (critical 9.8) - [CVE-2018-11240](https://insights.sbomify.com/CVE-2018-11240/): Command injection in softcase:t-router firmware (critical 9.8) - [CVE-2018-1124](https://insights.sbomify.com/CVE-2018-1124/): Integer overflow in procps-ng (high 7.3) - [CVE-2018-11239](https://insights.sbomify.com/CVE-2018-11239/): Integer overflow in hexagontoken:hexagon (high 7.5) - [CVE-2018-11237](https://insights.sbomify.com/CVE-2018-11237/): Memory corruption in canonical:ubuntu linux (high 7.8) - [CVE-2018-11236](https://insights.sbomify.com/CVE-2018-11236/): Integer overflow in gnu:glibc (critical 9.8) - [CVE-2018-11235](https://insights.sbomify.com/CVE-2018-11235/): Path traversal in canonical:ubuntu linux (high 7.8) - [CVE-2018-11233](https://insights.sbomify.com/CVE-2018-11233/): Memory corruption in canonical:ubuntu linux (high 7.5) - [CVE-2018-11232](https://insights.sbomify.com/CVE-2018-11232/): Memory corruption in linux:linux kernel (medium 5.5) - [CVE-2018-11231](https://insights.sbomify.com/CVE-2018-11231/): SQL injection in divido:divido (high 8.1) - [CVE-2018-11230](https://insights.sbomify.com/CVE-2018-11230/): Use after free in jbig2enc project:jbig2enc (high 8.8) - [CVE-2018-1123](https://insights.sbomify.com/CVE-2018-1123/): Memory corruption in procps-ng, procps (low 3.9) - [CVE-2018-11229](https://insights.sbomify.com/CVE-2018-11229/): Command injection in crestron:crestron toolbox protocol firmware (critical 9.8) - [CVE-2018-11228](https://insights.sbomify.com/CVE-2018-11228/): Code injection in crestron:crestron toolbox protocol firmware (critical 9.8) - [CVE-2018-11227](https://insights.sbomify.com/CVE-2018-11227/): Cross-site scripting in monstra:monstra cms (medium 6.1) - [CVE-2018-11226](https://insights.sbomify.com/CVE-2018-11226/): Memory corruption in libming:libming (high 8.8) - [CVE-2018-11225](https://insights.sbomify.com/CVE-2018-11225/): Memory corruption in libming:libming (high 8.8) - [CVE-2018-11224](https://insights.sbomify.com/CVE-2018-11224/): Memory corruption in libav:libav (medium 6.5) - [CVE-2018-11223](https://insights.sbomify.com/CVE-2018-11223/): Cross-site scripting in pandorafms:artica pandora fms (medium 5.4) - [CVE-2018-11222](https://insights.sbomify.com/CVE-2018-11222/): Path traversal in artica:pandora fms (high 7.5) - [CVE-2018-11221](https://insights.sbomify.com/CVE-2018-11221/): File upload in artica:pandora fms (critical 9.8) - [CVE-2018-11220](https://insights.sbomify.com/CVE-2018-11220/): Command injection in bitmain:antminer d3 firmware (high 8.8) - [CVE-2018-1122](https://insights.sbomify.com/CVE-2018-1122/): Privilege escalation in procps-ng, procps (high 7.3) - [CVE-2018-11219](https://insights.sbomify.com/CVE-2018-11219/): Integer overflow in debian:debian linux (critical 9.8) - [CVE-2018-11218](https://insights.sbomify.com/CVE-2018-11218/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2018-11215](https://insights.sbomify.com/CVE-2018-11215/): Command injection in cloudera:data science workbench (critical 9.8) - [CVE-2018-11214](https://insights.sbomify.com/CVE-2018-11214/): Memory corruption in canonical:ubuntu linux (medium 6.5) - [CVE-2018-11213](https://insights.sbomify.com/CVE-2018-11213/): Memory corruption in canonical:ubuntu linux (medium 6.5) - [CVE-2018-11212](https://insights.sbomify.com/CVE-2018-11212/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2018-11210](https://insights.sbomify.com/CVE-2018-11210/): Memory corruption in tinyxml2 project:tinyxml2 (critical 9.8) - [CVE-2018-1121](https://insights.sbomify.com/CVE-2018-1121/): Race condition in procps-ng, procps (low 3.9) - [CVE-2018-11209](https://insights.sbomify.com/CVE-2018-11209/): Weak cryptography in zblogcn:z-blogphp (high 7.2) - [CVE-2018-11208](https://insights.sbomify.com/CVE-2018-11208/): Cross-site scripting in zblogcn:z-blogphp (medium 4.8) - [CVE-2018-11207](https://insights.sbomify.com/CVE-2018-11207/): Denial of service in hdfgroup:hdf5 (medium 6.5) - [CVE-2018-11206](https://insights.sbomify.com/CVE-2018-11206/): Memory corruption in hdfgroup:hdf5 (high 8.1) - [CVE-2018-11205](https://insights.sbomify.com/CVE-2018-11205/): Memory corruption in hdfgroup:hdf5 (high 8.1) - [CVE-2018-11204](https://insights.sbomify.com/CVE-2018-11204/): Null dereference in hdfgroup:hdf5 (medium 6.5) - [CVE-2018-11203](https://insights.sbomify.com/CVE-2018-11203/): Denial of service in hdfgroup:hdf5 (medium 6.5) - [CVE-2018-11202](https://insights.sbomify.com/CVE-2018-11202/): Null dereference in hdfgroup:hdf5 (medium 6.5) - [CVE-2018-11200](https://insights.sbomify.com/CVE-2018-11200/): XSS vulnerability in company name field in Mautic (medium 6.1) - [CVE-2018-1120](https://insights.sbomify.com/CVE-2018-1120/): Memory corruption in kernel (low 2.8) - [CVE-2018-11198](https://insights.sbomify.com/CVE-2018-11198/): XSS vulnerability in Author URL of themes in Mautic (medium 6.1) - [CVE-2018-11196](https://insights.sbomify.com/CVE-2018-11196/): Security feature bypass in mahara:mahara (high 7.5) - [CVE-2018-11195](https://insights.sbomify.com/CVE-2018-11195/): Information disclosure in mahara:mahara (medium 6.8) - [CVE-2018-11194](https://insights.sbomify.com/CVE-2018-11194/): Privilege escalation in quest:disk backup (high 8.8) - [CVE-2018-11193](https://insights.sbomify.com/CVE-2018-11193/): Privilege escalation in quest:disk backup (high 8.8) - [CVE-2018-11192](https://insights.sbomify.com/CVE-2018-11192/): Privilege escalation in quest:disk backup (high 8.8) - [CVE-2018-11191](https://insights.sbomify.com/CVE-2018-11191/): Privilege escalation in quest:disk backup (high 8.8) - [CVE-2018-11190](https://insights.sbomify.com/CVE-2018-11190/): Privilege escalation in quest:disk backup (high 8.8) - [CVE-2018-11189](https://insights.sbomify.com/CVE-2018-11189/): Command injection in quest:disk backup (high 8.8) - [CVE-2018-11188](https://insights.sbomify.com/CVE-2018-11188/): Command injection in quest:disk backup (high 8.8) - [CVE-2018-11187](https://insights.sbomify.com/CVE-2018-11187/): Command injection in quest:disk backup (high 8.8) - [CVE-2018-11186](https://insights.sbomify.com/CVE-2018-11186/): Command injection in quest:disk backup (high 8.8) - [CVE-2018-11185](https://insights.sbomify.com/CVE-2018-11185/): Command injection in quest:disk backup (high 8.8) - [CVE-2018-11184](https://insights.sbomify.com/CVE-2018-11184/): Command injection in quest:disk backup (high 7.2) - [CVE-2018-11183](https://insights.sbomify.com/CVE-2018-11183/): Command injection in quest:disk backup (high 8.8) - [CVE-2018-11182](https://insights.sbomify.com/CVE-2018-11182/): Command injection in quest:disk backup (high 8.8) - [CVE-2018-11181](https://insights.sbomify.com/CVE-2018-11181/): Command injection in quest:disk backup (high 8.8) - [CVE-2018-11180](https://insights.sbomify.com/CVE-2018-11180/): Command injection in quest:disk backup (high 8.8) - [CVE-2018-1118](https://insights.sbomify.com/CVE-2018-1118/): Information disclosure in vhost (low 2.3) - [CVE-2018-11179](https://insights.sbomify.com/CVE-2018-11179/): Command injection in quest:disk backup (high 8.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/139/