# Vulnerabilities published in 2018


- [CVE-2018-8119](https://insights.sbomify.com/CVE-2018-8119/): Security feature bypass in C SDK (medium 5.6)
- [CVE-2018-8118](https://insights.sbomify.com/CVE-2018-8118/): Memory corruption in Internet Explorer 10 (high 7.5)
- [CVE-2018-8117](https://insights.sbomify.com/CVE-2018-8117/): Security feature bypass in Microsoft Wireless Keyboard 850 (medium 6.8)
- [CVE-2018-8116](https://insights.sbomify.com/CVE-2018-8116/): Denial of service in Windows 10 (medium 5.5)
- [CVE-2018-8115](https://insights.sbomify.com/CVE-2018-8115/): Code injection in Windows Host Compute (high 8.6)
- [CVE-2018-8114](https://insights.sbomify.com/CVE-2018-8114/): Memory corruption in Internet Explorer 11 (high 7.5)
- [CVE-2018-8113](https://insights.sbomify.com/CVE-2018-8113/): Security feature bypass in Internet Explorer 11 (medium 6.5)
- [CVE-2018-8112](https://insights.sbomify.com/CVE-2018-8112/): Security feature bypass in Microsoft Edge (medium 4.3)
- [CVE-2018-8111](https://insights.sbomify.com/CVE-2018-8111/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-8110](https://insights.sbomify.com/CVE-2018-8110/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-8108](https://insights.sbomify.com/CVE-2018-8108/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8107](https://insights.sbomify.com/CVE-2018-8107/): Denial of service in n/a (medium 5.5)
- [CVE-2018-8106](https://insights.sbomify.com/CVE-2018-8106/): Denial of service in n/a (medium 5.5)
- [CVE-2018-8105](https://insights.sbomify.com/CVE-2018-8105/): Denial of service in n/a (medium 5.5)
- [CVE-2018-8104](https://insights.sbomify.com/CVE-2018-8104/): Denial of service in n/a (medium 5.5)
- [CVE-2018-8103](https://insights.sbomify.com/CVE-2018-8103/): Denial of service in n/a (medium 5.5)
- [CVE-2018-8102](https://insights.sbomify.com/CVE-2018-8102/): Denial of service in n/a (medium 5.5)
- [CVE-2018-8101](https://insights.sbomify.com/CVE-2018-8101/): Denial of service in n/a (medium 5.5)
- [CVE-2018-8100](https://insights.sbomify.com/CVE-2018-8100/): Memory corruption in n/a (high 7.8)
- [CVE-2018-8099](https://insights.sbomify.com/CVE-2018-8099/): Use after free in n/a (medium 6.5)
- [CVE-2018-8098](https://insights.sbomify.com/CVE-2018-8098/): Integer overflow in n/a (medium 6.5)
- [CVE-2018-8097](https://insights.sbomify.com/CVE-2018-8097/): Eve allows execution of arbitrary code (critical 9.8)
- [CVE-2018-8096](https://insights.sbomify.com/CVE-2018-8096/): Auth bypass in n/a (critical 9.8)
- [CVE-2018-8092](https://insights.sbomify.com/CVE-2018-8092/): CSV Injection vulnerability with exported contact lists in Mautic (critical 9.8)
- [CVE-2018-8090](https://insights.sbomify.com/CVE-2018-8090/): Other in n/a (high 7.8)
- [CVE-2018-8088](https://insights.sbomify.com/CVE-2018-8088/): Improper Access Control in SLF4J (critical 9.8)
- [CVE-2018-8087](https://insights.sbomify.com/CVE-2018-8087/): Denial of service in n/a (medium 5.5)
- [CVE-2018-8078](https://insights.sbomify.com/CVE-2018-8078/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-8076](https://insights.sbomify.com/CVE-2018-8076/): Other in n/a (high 7.5)
- [CVE-2018-8074](https://insights.sbomify.com/CVE-2018-8074/): Yii Framework Code Injection (high 8.1)
- [CVE-2018-8073](https://insights.sbomify.com/CVE-2018-8073/): yii2-redis Potential Remote code execution (critical 9.8)
- [CVE-2018-8072](https://insights.sbomify.com/CVE-2018-8072/): Memory corruption in n/a (high 8.8)
- [CVE-2018-8071](https://insights.sbomify.com/CVE-2018-8071/): XSS vulnerability in theme config file in Mautic (medium 6.1)
- [CVE-2018-8070](https://insights.sbomify.com/CVE-2018-8070/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-8069](https://insights.sbomify.com/CVE-2018-8069/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-8065](https://insights.sbomify.com/CVE-2018-8065/): Denial of service in n/a (high 7.5)
- [CVE-2018-8062](https://insights.sbomify.com/CVE-2018-8062/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-8061](https://insights.sbomify.com/CVE-2018-8061/): Privilege escalation in n/a (high 7.1)
- [CVE-2018-8060](https://insights.sbomify.com/CVE-2018-8060/): Null dereference in n/a (medium 5.5)
- [CVE-2018-8059](https://insights.sbomify.com/CVE-2018-8059/): Weak cryptography in n/a (high 8.8)
- [CVE-2018-8058](https://insights.sbomify.com/CVE-2018-8058/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2018-8057](https://insights.sbomify.com/CVE-2018-8057/): SQL injection in n/a (critical 9.8)
- [CVE-2018-8056](https://insights.sbomify.com/CVE-2018-8056/): Information disclosure in n/a (high 7.5)
- [CVE-2018-8050](https://insights.sbomify.com/CVE-2018-8050/): Denial of service in n/a (medium 6.5)
- [CVE-2018-8049](https://insights.sbomify.com/CVE-2018-8049/): Denial of service in n/a (high 7.5)
- [CVE-2018-8048](https://insights.sbomify.com/CVE-2018-8048/): Cross-site Scripting in loofah (medium 6.1)
- [CVE-2018-8047](https://insights.sbomify.com/CVE-2018-8047/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8046](https://insights.sbomify.com/CVE-2018-8046/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8045](https://insights.sbomify.com/CVE-2018-8045/): SQL injection in n/a (high 8.8)
- [CVE-2018-8044](https://insights.sbomify.com/CVE-2018-8044/): Privilege escalation in n/a (high 7.8)
- [CVE-2018-8043](https://insights.sbomify.com/CVE-2018-8043/): Null dereference in n/a (medium 5.5)
- [CVE-2018-8042](https://insights.sbomify.com/CVE-2018-8042/): Information disclosure in Apache Ambari (high 8.1)
- [CVE-2018-8041](https://insights.sbomify.com/CVE-2018-8041/): Apache Camel's Mail is vulnerable to path traversal (medium 5.3)
- [CVE-2018-8040](https://insights.sbomify.com/CVE-2018-8040/): Information disclosure in Apache Traffic Server (medium 5.3)
- [CVE-2018-8039](https://insights.sbomify.com/CVE-2018-8039/): Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.* (high 8.1)
- [CVE-2018-8038](https://insights.sbomify.com/CVE-2018-8038/): High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3 (high 7.5)
- [CVE-2018-8037](https://insights.sbomify.com/CVE-2018-8037/): Apache Tomcat Race Condition vulnerability (medium 5.9)
- [CVE-2018-8036](https://insights.sbomify.com/CVE-2018-8036/): Loop with Unreachable Exit Condition in Apache PDFBox (medium 6.5)
- [CVE-2018-8035](https://insights.sbomify.com/CVE-2018-8035/): Cross-site Scripting in Apache UIMA (medium 6.1)
- [CVE-2018-8034](https://insights.sbomify.com/CVE-2018-8034/): The host name verification missing in Apache Tomcat (high 7.5)
- [CVE-2018-8033](https://insights.sbomify.com/CVE-2018-8033/): XML external entity in Apache OFBiz (high 7.5)
- [CVE-2018-8032](https://insights.sbomify.com/CVE-2018-8032/): Moderate severity vulnerability that affects apache axis (medium 6.1)
- [CVE-2018-8031](https://insights.sbomify.com/CVE-2018-8031/): Apache TomEE console vulnerable to Cross-site Scripting (medium 6.1)
- [CVE-2018-8030](https://insights.sbomify.com/CVE-2018-8030/): Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents (high 7.5)
- [CVE-2018-8029](https://insights.sbomify.com/CVE-2018-8029/): Privilege escalation vulnerability in Apache Hadoop (high 8.8)
- [CVE-2018-8028](https://insights.sbomify.com/CVE-2018-8028/): Apache Sentry may allow attacker to access/remove data from Sentry protected table (high 8.8)
- [CVE-2018-8027](https://insights.sbomify.com/CVE-2018-8027/): Apache is vulnerable to XXE in XSD validation processor (critical 9.8)
- [CVE-2018-8026](https://insights.sbomify.com/CVE-2018-8026/): XML external entity expansion in org.apache.solr:solr-core (medium 5.5)
- [CVE-2018-8025](https://insights.sbomify.com/CVE-2018-8025/): Race condition in org.apache.hbase:hbase-thrift (high 8.1)
- [CVE-2018-8024](https://insights.sbomify.com/CVE-2018-8024/): Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL (medium 5.4)
- [CVE-2018-8023](https://insights.sbomify.com/CVE-2018-8023/): Moderate severity vulnerability that affects org.apache.mesos:mesos (medium 5.9)
- [CVE-2018-8022](https://insights.sbomify.com/CVE-2018-8022/): Denial of service in Apache Traffic Server (high 7.5)
- [CVE-2018-8021](https://insights.sbomify.com/CVE-2018-8021/): Deserialization of Untrusted Data in superset (critical 9.8)
- [CVE-2018-8020](https://insights.sbomify.com/CVE-2018-8020/): Auth bypass in Apache Tomcat Native (high 7.4)
- [CVE-2018-8019](https://insights.sbomify.com/CVE-2018-8019/): Auth bypass in Apache Tomcat Native (high 7.4)
- [CVE-2018-8018](https://insights.sbomify.com/CVE-2018-8018/): Code execution via deserialization in org.apache.ignite:ignite-core (critical 9.8)
- [CVE-2018-8017](https://insights.sbomify.com/CVE-2018-8017/): Comparison errorr in org.apache.tika:tika-core (medium 5.5)
- [CVE-2018-8016](https://insights.sbomify.com/CVE-2018-8016/): Missing Authentication for Critical Function in Apache Cassandra (critical 9.8)
- [CVE-2018-8015](https://insights.sbomify.com/CVE-2018-8015/): Apache ORC vulnerable to Uncontrolled Recursion (high 7.5)
- [CVE-2018-8014](https://insights.sbomify.com/CVE-2018-8014/): The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins (critical 9.8)
- [CVE-2018-8013](https://insights.sbomify.com/CVE-2018-8013/): Deserialization of Untrusted Data in Apache Batik (critical 9.8)
- [CVE-2018-8012](https://insights.sbomify.com/CVE-2018-8012/): Missing Authorization in Apache ZooKeeper (high 7.5)
- [CVE-2018-8011](https://insights.sbomify.com/CVE-2018-8011/): mod_md, DoS via Coredumps on specially crafted requests (high 7.5)
- [CVE-2018-8010](https://insights.sbomify.com/CVE-2018-8010/): There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files (medium 5.5)
- [CVE-2018-8009](https://insights.sbomify.com/CVE-2018-8009/): Path Traversal in Hadoop (high 8.8)
- [CVE-2018-8008](https://insights.sbomify.com/CVE-2018-8008/): ZipSlip in org.apache.storm:storm-core (medium 5.5)
- [CVE-2018-8007](https://insights.sbomify.com/CVE-2018-8007/): Privilege escalation in Apache CouchDB (high 7.2)
- [CVE-2018-8006](https://insights.sbomify.com/CVE-2018-8006/): Apache ActiveMQ web console vulnerable to Cross-site Scripting (medium 6.1)
- [CVE-2018-8005](https://insights.sbomify.com/CVE-2018-8005/): Denial of service in Apache Traffic Server (medium 5.3)
- [CVE-2018-8004](https://insights.sbomify.com/CVE-2018-8004/): Other in Apache Traffic Server (medium 6.5)
- [CVE-2018-8003](https://insights.sbomify.com/CVE-2018-8003/): Path traversal in Apache Ambari (medium 5.3)
- [CVE-2018-8002](https://insights.sbomify.com/CVE-2018-8002/): Denial of service in n/a (high 8.8)
- [CVE-2018-8001](https://insights.sbomify.com/CVE-2018-8001/): Memory corruption in n/a (high 7.8)
- [CVE-2018-8000](https://insights.sbomify.com/CVE-2018-8000/): Memory corruption in n/a (high 8.8)
- [CVE-2018-7999](https://insights.sbomify.com/CVE-2018-7999/): Null dereference in n/a (high 8.8)
- [CVE-2018-7998](https://insights.sbomify.com/CVE-2018-7998/): Null dereference in n/a (high 7.5)
- [CVE-2018-7997](https://insights.sbomify.com/CVE-2018-7997/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-7996](https://insights.sbomify.com/CVE-2018-7996/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-7995](https://insights.sbomify.com/CVE-2018-7995/): Race condition in n/a (medium 4.7)
- [CVE-2018-7994](https://insights.sbomify.com/CVE-2018-7994/): Denial of service in NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500 (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/14/