# Vulnerabilities published in 2018


- [CVE-2018-11070](https://insights.sbomify.com/CVE-2018-11070/): Weak cryptography in RSA BSAFE Crypto-J (medium 5.9)
- [CVE-2018-1107](https://insights.sbomify.com/CVE-2018-1107/): Regular expression deinal of service (ReDoS) in is-my-json-valid (medium 5.3)
- [CVE-2018-11069](https://insights.sbomify.com/CVE-2018-11069/): Weak cryptography in RSA BSAFE SSL-J (medium 5.9)
- [CVE-2018-11068](https://insights.sbomify.com/CVE-2018-11068/): Information disclosure in RSA BSAFE SSL-J (low 3.9)
- [CVE-2018-11067](https://insights.sbomify.com/CVE-2018-11067/): Dell EMC Avamar and Integrated Data Protection Appliance Open Redirection Vulnerability (medium 6.1)
- [CVE-2018-11066](https://insights.sbomify.com/CVE-2018-11066/): Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2018-11065](https://insights.sbomify.com/CVE-2018-11065/): SQL injection in RSA Archer (low 2.7)
- [CVE-2018-11064](https://insights.sbomify.com/CVE-2018-11064/): Misconfiguration in Dell EMC Unity (high 7.8)
- [CVE-2018-11063](https://insights.sbomify.com/CVE-2018-11063/): Privilege escalation in Wyse Management Suite (high 7.8)
- [CVE-2018-11062](https://insights.sbomify.com/CVE-2018-11062/): Dell EMC Integrated Data Protection Appliance Undocumented Accounts Vulnerability (high 8.8)
- [CVE-2018-11061](https://insights.sbomify.com/CVE-2018-11061/): Code injection in RSA NetWitness (critical 9.1)
- [CVE-2018-11060](https://insights.sbomify.com/CVE-2018-11060/): Privilege escalation in RSA Archer (high 8.8)
- [CVE-2018-1106](https://insights.sbomify.com/CVE-2018-1106/): Auth bypass in PackageKit (medium 5.5)
- [CVE-2018-11059](https://insights.sbomify.com/CVE-2018-11059/): Cross-site scripting in RSA Archer (high 8.2)
- [CVE-2018-11058](https://insights.sbomify.com/CVE-2018-11058/): Memory corruption in BSAFE Crypto-C Micro Edition (high 7.5)
- [CVE-2018-11057](https://insights.sbomify.com/CVE-2018-11057/): Weak cryptography in BSAFE Micro Edition Suite (medium 5.9)
- [CVE-2018-11056](https://insights.sbomify.com/CVE-2018-11056/): Denial of service in BSAFE Crypto-C Micro Edition (medium 6.5)
- [CVE-2018-11055](https://insights.sbomify.com/CVE-2018-11055/): Information disclosure in BSAFE Micro Edition Suite (medium 4.4)
- [CVE-2018-11054](https://insights.sbomify.com/CVE-2018-11054/): Integer overflow in BSAFE Micro Edition Suite (high 7.5)
- [CVE-2018-11053](https://insights.sbomify.com/CVE-2018-11053/): iSM: Dell EMC iDRAC Service Module Improper File Permission Vulnerability (medium 6.6)
- [CVE-2018-11052](https://insights.sbomify.com/CVE-2018-11052/): Dell EMC ECS S3 Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2018-11051](https://insights.sbomify.com/CVE-2018-11051/): RSA Certificate Manager Path Traversal Vulnerability (high 7.5)
- [CVE-2018-11050](https://insights.sbomify.com/CVE-2018-11050/): Information disclosure in Networker (high 8.8)
- [CVE-2018-11049](https://insights.sbomify.com/CVE-2018-11049/): RSA Identity Governance and Lifecycle Uncontrolled Search Path Vulnerability (high 7.3)
- [CVE-2018-11048](https://insights.sbomify.com/CVE-2018-11048/): XML external entity in Data Protection Advisor (high 8.1)
- [CVE-2018-11047](https://insights.sbomify.com/CVE-2018-11047/): Cloud Foundry UAA accepts refresh token as access token on admin endpoints (high 7.5)
- [CVE-2018-11046](https://insights.sbomify.com/CVE-2018-11046/): Supply chain in Operations Manager (medium 6.5)
- [CVE-2018-11045](https://insights.sbomify.com/CVE-2018-11045/): Weak cryptography in Pivotal Operations Manager (medium 5.9)
- [CVE-2018-11044](https://insights.sbomify.com/CVE-2018-11044/): Other in Pivotal Application Service (medium 6.5)
- [CVE-2018-11041](https://insights.sbomify.com/CVE-2018-11041/): Cloud Foundry UAA open redirect (medium 6.1)
- [CVE-2018-11040](https://insights.sbomify.com/CVE-2018-11040/): Moderate severity vulnerability that affects org.springframework:spring-core (high 7.5)
- [CVE-2018-1104](https://insights.sbomify.com/CVE-2018-1104/): Code injection in Ansible Tower (high 8.8)
- [CVE-2018-11039](https://insights.sbomify.com/CVE-2018-11039/): Spring Framework Cross Site Tracing (XST) (medium 5.9)
- [CVE-2018-11037](https://insights.sbomify.com/CVE-2018-11037/): Information disclosure in exiv2:exiv2 (medium 6.5)
- [CVE-2018-11036](https://insights.sbomify.com/CVE-2018-11036/): Information disclosure in ruckuswireless:scg-200 firmware (critical 9.1)
- [CVE-2018-11035](https://insights.sbomify.com/CVE-2018-11035/): Other in 2345.cc:security guard (high 7.8)
- [CVE-2018-11034](https://insights.sbomify.com/CVE-2018-11034/): Other in 2345.cc:security guard (high 7.8)
- [CVE-2018-11033](https://insights.sbomify.com/CVE-2018-11033/): Memory corruption in xpdfreader:xpdf (high 7.8)
- [CVE-2018-11032](https://insights.sbomify.com/CVE-2018-11032/): SQL injection in gouguoyin:phprap (critical 9.8)
- [CVE-2018-11031](https://insights.sbomify.com/CVE-2018-11031/): Server-side request forgery in gouguoyin:phprap (critical 9.8)
- [CVE-2018-1103](https://insights.sbomify.com/CVE-2018-1103/): Openshift Enterprise source-to-image vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) (medium 6.1)
- [CVE-2018-11027](https://insights.sbomify.com/CVE-2018-11027/): Cross-site scripting in ruckussecurity:icx7450-48 firmware (medium 6.1)
- [CVE-2018-11025](https://insights.sbomify.com/CVE-2018-11025/): Denial of service in amazon:fire os (high 7.5)
- [CVE-2018-11024](https://insights.sbomify.com/CVE-2018-11024/): Denial of service in amazon:fire os (high 7.5)
- [CVE-2018-11023](https://insights.sbomify.com/CVE-2018-11023/): Denial of service in amazon:fire os (high 7.5)
- [CVE-2018-11022](https://insights.sbomify.com/CVE-2018-11022/): Denial of service in amazon:fire os (high 7.5)
- [CVE-2018-11021](https://insights.sbomify.com/CVE-2018-11021/): Denial of service in amazon:fire os (high 7.5)
- [CVE-2018-11020](https://insights.sbomify.com/CVE-2018-11020/): Denial of service in amazon:fire os (medium 4.4)
- [CVE-2018-1102](https://insights.sbomify.com/CVE-2018-1102/): Path traversal in atomic-openshift (high 8.8)
- [CVE-2018-11019](https://insights.sbomify.com/CVE-2018-11019/): Denial of service in amazon:fire os (high 7.5)
- [CVE-2018-11018](https://insights.sbomify.com/CVE-2018-11018/): Cross-site request forgery in pbootcms:pbootcms (high 8.8)
- [CVE-2018-11017](https://insights.sbomify.com/CVE-2018-11017/): Memory corruption in libming:libming (high 8.8)
- [CVE-2018-11013](https://insights.sbomify.com/CVE-2018-11013/): Memory corruption in d-link:dir-816 a2 firmware (critical 9.8)
- [CVE-2018-11012](https://insights.sbomify.com/CVE-2018-11012/): Cross-site scripting in halo:halo (medium 6.1)
- [CVE-2018-11011](https://insights.sbomify.com/CVE-2018-11011/): Cross-site scripting in halo:halo (medium 6.1)
- [CVE-2018-11010](https://insights.sbomify.com/CVE-2018-11010/): Memory corruption in k7computing:antivrius (high 7.8)
- [CVE-2018-1101](https://insights.sbomify.com/CVE-2018-1101/): Privilege escalation in Ansible Tower (high 7.2)
- [CVE-2018-11009](https://insights.sbomify.com/CVE-2018-11009/): Memory corruption in k7computing:antivrius (high 7.8)
- [CVE-2018-11008](https://insights.sbomify.com/CVE-2018-11008/): Privilege escalation in k7computing:antivrius (medium 5.5)
- [CVE-2018-11007](https://insights.sbomify.com/CVE-2018-11007/): Memory corruption in k7computing:antivrius (medium 5.5)
- [CVE-2018-11006](https://insights.sbomify.com/CVE-2018-11006/): Privilege escalation in k7computing:antivrius (medium 5.5)
- [CVE-2018-11005](https://insights.sbomify.com/CVE-2018-11005/): Memory corruption in k7computing:antivrius (medium 5.5)
- [CVE-2018-11004](https://insights.sbomify.com/CVE-2018-11004/): Cross-site request forgery in sdcms:sdcms (high 8.8)
- [CVE-2018-11003](https://insights.sbomify.com/CVE-2018-11003/): Cross-site request forgery in yxcms:yxcms (medium 6.5)
- [CVE-2018-11002](https://insights.sbomify.com/CVE-2018-11002/): Misconfiguration in pulsesecure:pulse secure desktop client (medium 5.5)
- [CVE-2018-1100](https://insights.sbomify.com/CVE-2018-1100/): Memory corruption in zsh (high 7.8)
- [CVE-2018-10999](https://insights.sbomify.com/CVE-2018-10999/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-10998](https://insights.sbomify.com/CVE-2018-10998/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-10997](https://insights.sbomify.com/CVE-2018-10997/): SQL injection in etere:etereweb (critical 9.8)
- [CVE-2018-10996](https://insights.sbomify.com/CVE-2018-10996/): Memory corruption in d-link:dir-629-b firmware (critical 9.8)
- [CVE-2018-10995](https://insights.sbomify.com/CVE-2018-10995/): Other in debian:debian linux (medium 5.3)
- [CVE-2018-10994](https://insights.sbomify.com/CVE-2018-10994/): Cross-site scripting in signal:signal-desktop (medium 6.1)
- [CVE-2018-10992](https://insights.sbomify.com/CVE-2018-10992/): Command injection in lilypond:lilypond (critical 9.8)
- [CVE-2018-10990](https://insights.sbomify.com/CVE-2018-10990/): Auth bypass in commscope:arris tg1682g firmware (high 8.0)
- [CVE-2018-1099](https://insights.sbomify.com/CVE-2018-1099/): DNS Rebinding in etcd (medium 5.5)
- [CVE-2018-10989](https://insights.sbomify.com/CVE-2018-10989/): Hardcoded credentials in commscope:arris tg1682g firmware (medium 6.6)
- [CVE-2018-10988](https://insights.sbomify.com/CVE-2018-10988/): Security feature bypass in diqee:diqee360 firmware (high 7.8)
- [CVE-2018-10987](https://insights.sbomify.com/CVE-2018-10987/): Command injection in diqee:diqee360 firmware (high 7.5)
- [CVE-2018-10986](https://insights.sbomify.com/CVE-2018-10986/): OX Guard 2.8.0 has CSRF. (high 8.8)
- [CVE-2018-10982](https://insights.sbomify.com/CVE-2018-10982/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2018-10981](https://insights.sbomify.com/CVE-2018-10981/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2018-1098](https://insights.sbomify.com/CVE-2018-1098/): etcd Cross-site Request Forgery (CSRF) (high 8.8)
- [CVE-2018-10977](https://insights.sbomify.com/CVE-2018-10977/): Other in 2345.cc:security guard (high 7.8)
- [CVE-2018-10976](https://insights.sbomify.com/CVE-2018-10976/): Other in 2345.cc:security guard (high 7.8)
- [CVE-2018-10975](https://insights.sbomify.com/CVE-2018-10975/): Other in 2345.cc:security guard (high 7.8)
- [CVE-2018-10974](https://insights.sbomify.com/CVE-2018-10974/): Other in 2345.cc:security guard (high 7.8)
- [CVE-2018-10973](https://insights.sbomify.com/CVE-2018-10973/): Integer overflow in koreashow project:koreashow (high 7.5)
- [CVE-2018-10972](https://insights.sbomify.com/CVE-2018-10972/): Memory corruption in flif:free lossless image format (high 7.8)
- [CVE-2018-10971](https://insights.sbomify.com/CVE-2018-10971/): Denial of service in flif:flif (medium 5.5)
- [CVE-2018-1097](https://insights.sbomify.com/CVE-2018-1097/): Information disclosure in foreman (high 8.8)
- [CVE-2018-10969](https://insights.sbomify.com/CVE-2018-10969/): SQL injection in genetechsolutions:pie register (critical 9.8)
- [CVE-2018-10968](https://insights.sbomify.com/CVE-2018-10968/): Hardcoded credentials in d-link:dir-550a firmware (critical 9.8)
- [CVE-2018-10967](https://insights.sbomify.com/CVE-2018-10967/): Command injection in d-link:dir-550a firmware (high 8.8)
- [CVE-2018-10966](https://insights.sbomify.com/CVE-2018-10966/): Hardcoded credentials in gamerpolls:gamerpolls (high 7.3)
- [CVE-2018-10963](https://insights.sbomify.com/CVE-2018-10963/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-10962](https://insights.sbomify.com/CVE-2018-10962/): Security feature bypass in 2345 security guard project:2345 security guard (medium 5.5)
- [CVE-2018-1096](https://insights.sbomify.com/CVE-2018-1096/): SQL injection in Foreman (medium 6.5)
- [CVE-2018-10959](https://insights.sbomify.com/CVE-2018-10959/): Privilege escalation in beyondtrust:avecto defendpoint (high 7.5)
- [CVE-2018-10958](https://insights.sbomify.com/CVE-2018-10958/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-10957](https://insights.sbomify.com/CVE-2018-10957/): Cross-site request forgery in dlink:dir-868l firmware (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/141/