Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 14 of 163.
- CVE-2018-8119 Security feature bypass in C SDK
- CVE-2018-8118 Memory corruption in Internet Explorer 10
- CVE-2018-8117 Security feature bypass in Microsoft Wireless Keyboard 850
- CVE-2018-8116 Denial of service in Windows 10
- CVE-2018-8115 Code injection in Windows Host Compute
- CVE-2018-8114 Memory corruption in Internet Explorer 11
- CVE-2018-8113 Security feature bypass in Internet Explorer 11
- CVE-2018-8112 Security feature bypass in Microsoft Edge
- CVE-2018-8111 Memory corruption in Microsoft Edge
- CVE-2018-8110 Memory corruption in Microsoft Edge
- CVE-2018-8108 Cross-site scripting in n/a
- CVE-2018-8107 Denial of service in n/a
- CVE-2018-8106 Denial of service in n/a
- CVE-2018-8105 Denial of service in n/a
- CVE-2018-8104 Denial of service in n/a
- CVE-2018-8103 Denial of service in n/a
- CVE-2018-8102 Denial of service in n/a
- CVE-2018-8101 Denial of service in n/a
- CVE-2018-8100 Memory corruption in n/a
- CVE-2018-8099 Use after free in n/a
- CVE-2018-8098 Integer overflow in n/a
- CVE-2018-8097 Eve allows execution of arbitrary code
- CVE-2018-8096 Auth bypass in n/a
- CVE-2018-8092 CSV Injection vulnerability with exported contact lists in Mautic
- CVE-2018-8090 Other in n/a
- CVE-2018-8088 Improper Access Control in SLF4J
- CVE-2018-8087 Denial of service in n/a
- CVE-2018-8078 Cross-site scripting in n/a
- CVE-2018-8076 Other in n/a
- CVE-2018-8074 Yii Framework Code Injection
- CVE-2018-8073 yii2-redis Potential Remote code execution
- CVE-2018-8072 Memory corruption in n/a
- CVE-2018-8071 XSS vulnerability in theme config file in Mautic
- CVE-2018-8070 Cross-site scripting in n/a
- CVE-2018-8069 Cross-site scripting in n/a
- CVE-2018-8065 Denial of service in n/a
- CVE-2018-8062 Cross-site scripting in n/a
- CVE-2018-8061 Privilege escalation in n/a
- CVE-2018-8060 Null dereference in n/a
- CVE-2018-8059 Weak cryptography in n/a
- CVE-2018-8058 Cross-site scripting in n/a
- CVE-2018-8057 SQL injection in n/a
- CVE-2018-8056 Information disclosure in n/a
- CVE-2018-8050 Denial of service in n/a
- CVE-2018-8049 Denial of service in n/a
- CVE-2018-8048 Cross-site Scripting in loofah
- CVE-2018-8047 Cross-site scripting in n/a
- CVE-2018-8046 Cross-site scripting in n/a
- CVE-2018-8045 SQL injection in n/a
- CVE-2018-8044 Privilege escalation in n/a
- CVE-2018-8043 Null dereference in n/a
- CVE-2018-8042 Information disclosure in Apache Ambari
- CVE-2018-8041 Apache Camel's Mail is vulnerable to path traversal
- CVE-2018-8040 Information disclosure in Apache Traffic Server
- CVE-2018-8039 Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*
- CVE-2018-8038 High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3
- CVE-2018-8037 Apache Tomcat Race Condition vulnerability
- CVE-2018-8036 Loop with Unreachable Exit Condition in Apache PDFBox
- CVE-2018-8035 Cross-site Scripting in Apache UIMA
- CVE-2018-8034 The host name verification missing in Apache Tomcat
- CVE-2018-8033 XML external entity in Apache OFBiz
- CVE-2018-8032 Moderate severity vulnerability that affects apache axis
- CVE-2018-8031 Apache TomEE console vulnerable to Cross-site Scripting
- CVE-2018-8030 Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
- CVE-2018-8029 Privilege escalation vulnerability in Apache Hadoop
- CVE-2018-8028 Apache Sentry may allow attacker to access/remove data from Sentry protected table
- CVE-2018-8027 Apache is vulnerable to XXE in XSD validation processor
- CVE-2018-8026 XML external entity expansion in org.apache.solr:solr-core
- CVE-2018-8025 Race condition in org.apache.hbase:hbase-thrift
- CVE-2018-8024 Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL
- CVE-2018-8023 Moderate severity vulnerability that affects org.apache.mesos:mesos
- CVE-2018-8022 Denial of service in Apache Traffic Server
- CVE-2018-8021 Deserialization of Untrusted Data in superset
- CVE-2018-8020 Auth bypass in Apache Tomcat Native
- CVE-2018-8019 Auth bypass in Apache Tomcat Native
- CVE-2018-8018 Code execution via deserialization in org.apache.ignite:ignite-core
- CVE-2018-8017 Comparison errorr in org.apache.tika:tika-core
- CVE-2018-8016 Missing Authentication for Critical Function in Apache Cassandra
- CVE-2018-8015 Apache ORC vulnerable to Uncontrolled Recursion
- CVE-2018-8014 The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins
- CVE-2018-8013 Deserialization of Untrusted Data in Apache Batik
- CVE-2018-8012 Missing Authorization in Apache ZooKeeper
- CVE-2018-8011 mod_md, DoS via Coredumps on specially crafted requests
- CVE-2018-8010 There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files
- CVE-2018-8009 Path Traversal in Hadoop
- CVE-2018-8008 ZipSlip in org.apache.storm:storm-core
- CVE-2018-8007 Privilege escalation in Apache CouchDB
- CVE-2018-8006 Apache ActiveMQ web console vulnerable to Cross-site Scripting
- CVE-2018-8005 Denial of service in Apache Traffic Server
- CVE-2018-8004 Other in Apache Traffic Server
- CVE-2018-8003 Path traversal in Apache Ambari
- CVE-2018-8002 Denial of service in n/a
- CVE-2018-8001 Memory corruption in n/a
- CVE-2018-8000 Memory corruption in n/a
- CVE-2018-7999 Null dereference in n/a
- CVE-2018-7998 Null dereference in n/a
- CVE-2018-7997 Cross-site scripting in n/a
- CVE-2018-7996 Cross-site scripting in n/a
- CVE-2018-7995 Race condition in n/a
- CVE-2018-7994 Denial of service in NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500