# Vulnerabilities published in 2018


- [CVE-2018-11178](https://insights.sbomify.com/CVE-2018-11178/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11177](https://insights.sbomify.com/CVE-2018-11177/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11176](https://insights.sbomify.com/CVE-2018-11176/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11175](https://insights.sbomify.com/CVE-2018-11175/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11174](https://insights.sbomify.com/CVE-2018-11174/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11173](https://insights.sbomify.com/CVE-2018-11173/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11172](https://insights.sbomify.com/CVE-2018-11172/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11171](https://insights.sbomify.com/CVE-2018-11171/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11170](https://insights.sbomify.com/CVE-2018-11170/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-1117](https://insights.sbomify.com/CVE-2018-1117/): Information disclosure in ovirt-ansible-roles (medium 5.0)
- [CVE-2018-11169](https://insights.sbomify.com/CVE-2018-11169/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11168](https://insights.sbomify.com/CVE-2018-11168/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11167](https://insights.sbomify.com/CVE-2018-11167/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11166](https://insights.sbomify.com/CVE-2018-11166/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11165](https://insights.sbomify.com/CVE-2018-11165/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11164](https://insights.sbomify.com/CVE-2018-11164/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11163](https://insights.sbomify.com/CVE-2018-11163/): Command injection in quest:disk backup (high 7.2)
- [CVE-2018-11162](https://insights.sbomify.com/CVE-2018-11162/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11161](https://insights.sbomify.com/CVE-2018-11161/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11160](https://insights.sbomify.com/CVE-2018-11160/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-1116](https://insights.sbomify.com/CVE-2018-1116/): Missing authorization in polkit (medium 4.7)
- [CVE-2018-11159](https://insights.sbomify.com/CVE-2018-11159/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11158](https://insights.sbomify.com/CVE-2018-11158/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11157](https://insights.sbomify.com/CVE-2018-11157/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11156](https://insights.sbomify.com/CVE-2018-11156/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11155](https://insights.sbomify.com/CVE-2018-11155/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11154](https://insights.sbomify.com/CVE-2018-11154/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11153](https://insights.sbomify.com/CVE-2018-11153/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11152](https://insights.sbomify.com/CVE-2018-11152/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11151](https://insights.sbomify.com/CVE-2018-11151/): Command injection in quest:disk backup (high 7.2)
- [CVE-2018-11150](https://insights.sbomify.com/CVE-2018-11150/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-1115](https://insights.sbomify.com/CVE-2018-1115/): Missing authorization in postgresql (medium 4.2)
- [CVE-2018-11149](https://insights.sbomify.com/CVE-2018-11149/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11148](https://insights.sbomify.com/CVE-2018-11148/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11147](https://insights.sbomify.com/CVE-2018-11147/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11146](https://insights.sbomify.com/CVE-2018-11146/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11145](https://insights.sbomify.com/CVE-2018-11145/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11144](https://insights.sbomify.com/CVE-2018-11144/): Command injection in quest:disk backup (high 8.8)
- [CVE-2018-11143](https://insights.sbomify.com/CVE-2018-11143/): Command injection in quest:disk backup (critical 9.8)
- [CVE-2018-11142](https://insights.sbomify.com/CVE-2018-11142/): Auth bypass in quest:kace system management appliance (medium 5.5)
- [CVE-2018-11141](https://insights.sbomify.com/CVE-2018-11141/): Path traversal in quest:kace system management appliance (critical 9.8)
- [CVE-2018-11140](https://insights.sbomify.com/CVE-2018-11140/): SQL injection in quest:kace system management appliance (critical 9.8)
- [CVE-2018-1114](https://insights.sbomify.com/CVE-2018-1114/): Uncontrolled Resource Consumption in Undertow (medium 6.5)
- [CVE-2018-11139](https://insights.sbomify.com/CVE-2018-11139/): Command injection in quest:kace system management appliance (high 8.8)
- [CVE-2018-11138](https://insights.sbomify.com/CVE-2018-11138/): Quest KACE System Management Appliance Remote Command Execution (critical 9.8, exploited in the wild)
- [CVE-2018-11137](https://insights.sbomify.com/CVE-2018-11137/): Path traversal in quest:kace system management appliance (medium 6.5)
- [CVE-2018-11136](https://insights.sbomify.com/CVE-2018-11136/): SQL injection in quest:kace system management appliance (critical 9.8)
- [CVE-2018-11135](https://insights.sbomify.com/CVE-2018-11135/): Deserialization in quest:kace system management appliance (high 8.8)
- [CVE-2018-11134](https://insights.sbomify.com/CVE-2018-11134/): Privilege escalation in quest:kace system management appliance (high 8.8)
- [CVE-2018-11133](https://insights.sbomify.com/CVE-2018-11133/): Cross-site scripting in quest:kace system management appliance (medium 6.1)
- [CVE-2018-11132](https://insights.sbomify.com/CVE-2018-11132/): Command injection in quest:kace system management appliance (high 8.8)
- [CVE-2018-11130](https://insights.sbomify.com/CVE-2018-11130/): Use after free in vcftools project:vcftools (high 7.8)
- [CVE-2018-1113](https://insights.sbomify.com/CVE-2018-1113/): Misconfiguration in setup (medium 4.8)
- [CVE-2018-11129](https://insights.sbomify.com/CVE-2018-11129/): Use after free in vcftools project:vcftools (high 7.8)
- [CVE-2018-11128](https://insights.sbomify.com/CVE-2018-11128/): Memory corruption in pdfparser:pdfparser (high 7.8)
- [CVE-2018-11127](https://insights.sbomify.com/CVE-2018-11127/): Cross-site request forgery in e107:e107 (medium 6.5)
- [CVE-2018-11126](https://insights.sbomify.com/CVE-2018-11126/): Cross-site request forgery in doorgets:doorgets (high 8.8)
- [CVE-2018-11124](https://insights.sbomify.com/CVE-2018-11124/): Cross-site scripting in opmantek:open-audit (medium 5.4)
- [CVE-2018-11120](https://insights.sbomify.com/CVE-2018-11120/): Cross-site scripting in ilias:ilias (medium 6.1)
- [CVE-2018-1112](https://insights.sbomify.com/CVE-2018-1112/): Auth bypass in glusterfs (high 8.0)
- [CVE-2018-11119](https://insights.sbomify.com/CVE-2018-11119/): Open redirect in ilias:ilias (medium 6.1)
- [CVE-2018-11118](https://insights.sbomify.com/CVE-2018-11118/): Cross-site scripting in ilias:ilias (medium 6.1)
- [CVE-2018-11117](https://insights.sbomify.com/CVE-2018-11117/): Cross-site scripting in ilias:ilias (medium 6.1)
- [CVE-2018-11116](https://insights.sbomify.com/CVE-2018-11116/): Missing authorization in openwrt:openwrt (high 8.8)
- [CVE-2018-1111](https://insights.sbomify.com/CVE-2018-1111/): Command injection in dhcp (high 7.5)
- [CVE-2018-11106](https://insights.sbomify.com/CVE-2018-11106/): Command injection in WC7500 (critical 9.8)
- [CVE-2018-11105](https://insights.sbomify.com/CVE-2018-11105/): Cross-site scripting in 3cx:live chat (medium 6.1)
- [CVE-2018-11102](https://insights.sbomify.com/CVE-2018-11102/): Memory corruption in libav:libav (high 7.5)
- [CVE-2018-11101](https://insights.sbomify.com/CVE-2018-11101/): Cross-site scripting in signal:signal-desktop (medium 6.1)
- [CVE-2018-11100](https://insights.sbomify.com/CVE-2018-11100/): Memory corruption in libming:libming (high 8.8)
- [CVE-2018-1110](https://insights.sbomify.com/CVE-2018-1110/): Denial of service in knot-resolver (high 7.5)
- [CVE-2018-11099](https://insights.sbomify.com/CVE-2018-11099/): Memory corruption in vcftools project:vcftools (medium 5.5)
- [CVE-2018-11098](https://insights.sbomify.com/CVE-2018-11098/): File upload in frog cms project:frog cms (high 7.2)
- [CVE-2018-11097](https://insights.sbomify.com/CVE-2018-11097/): Denial of service in cstring project:cstring (high 7.5)
- [CVE-2018-11096](https://insights.sbomify.com/CVE-2018-11096/): Cross-site request forgery in horse market sell \& rent portal project:horse market sell \& rent portal (medium 6.5)
- [CVE-2018-11095](https://insights.sbomify.com/CVE-2018-11095/): Memory corruption in libming:libming (high 8.8)
- [CVE-2018-11094](https://insights.sbomify.com/CVE-2018-11094/): Missing authorization in intelbras:ncloud 300 firmware (critical 9.8)
- [CVE-2018-11093](https://insights.sbomify.com/CVE-2018-11093/): Cross-Site Scripting in @ckeditor/ckeditor5-link (medium 6.1)
- [CVE-2018-11092](https://insights.sbomify.com/CVE-2018-11092/): Cross-site request forgery in admin notes project:admin notes (medium 6.5)
- [CVE-2018-11091](https://insights.sbomify.com/CVE-2018-11091/): File upload in mybiz:myprocurenet (critical 9.9)
- [CVE-2018-11090](https://insights.sbomify.com/CVE-2018-11090/): Cross-site scripting in mybiz:myprocurenet (medium 6.1)
- [CVE-2018-1109](https://insights.sbomify.com/CVE-2018-1109/): Regular Expression Denial of Service (ReDoS) in braces (medium 5.3)
- [CVE-2018-11088](https://insights.sbomify.com/CVE-2018-11088/): Privilege escalation in Application Service (high 8.8)
- [CVE-2018-11087](https://insights.sbomify.com/CVE-2018-11087/): TLS validation error (medium 5.9)
- [CVE-2018-11086](https://insights.sbomify.com/CVE-2018-11086/): Privilege escalation in Application Service (high 8.8)
- [CVE-2018-11084](https://insights.sbomify.com/CVE-2018-11084/): Garden-runC prevents deletion of some app environments (medium 6.8)
- [CVE-2018-11083](https://insights.sbomify.com/CVE-2018-11083/): Bosh accepts refresh tokens in place of an access token (high 8.4)
- [CVE-2018-11082](https://insights.sbomify.com/CVE-2018-11082/): Cloud Foundry UAA MFA does not prevent brute force of MFA code (medium 6.6)
- [CVE-2018-11081](https://insights.sbomify.com/CVE-2018-11081/): Pivotal Operations Manager UAA config - temp Ram Disk (high 7.9)
- [CVE-2018-11080](https://insights.sbomify.com/CVE-2018-11080/): Misconfiguration in ESRS Virtual Edition (high 7.3)
- [CVE-2018-1108](https://insights.sbomify.com/CVE-2018-1108/): Weak cryptography in drivers (medium 5.9)
- [CVE-2018-11079](https://insights.sbomify.com/CVE-2018-11079/): Information disclosure in ESRS Virtual Edition (medium 5.5)
- [CVE-2018-11078](https://insights.sbomify.com/CVE-2018-11078/): Misconfiguration in VPlex Software: GeoSynchrony (medium 4.0)
- [CVE-2018-11077](https://insights.sbomify.com/CVE-2018-11077/): Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability (medium 6.7)
- [CVE-2018-11076](https://insights.sbomify.com/CVE-2018-11076/): Dell EMC Avamar and Integrated Data Protection Appliance Information Exposure Vulnerability (medium 6.5)
- [CVE-2018-11075](https://insights.sbomify.com/CVE-2018-11075/): DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities (medium 5.8)
- [CVE-2018-11074](https://insights.sbomify.com/CVE-2018-11074/): DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities (medium 6.1)
- [CVE-2018-11073](https://insights.sbomify.com/CVE-2018-11073/): DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities (medium 6.5)
- [CVE-2018-11072](https://insights.sbomify.com/CVE-2018-11072/): Privilege escalation in Dell Digital Delivery (high 7.8)
- [CVE-2018-11071](https://insights.sbomify.com/CVE-2018-11071/): DSA-2018-147: Dell EMC Isilon OneFS and IsilonSD Edge Remote Process Crash Vulnerability (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/140/