# Vulnerabilities published in 2018


- [CVE-2018-10956](https://insights.sbomify.com/CVE-2018-10956/): Path traversal in ipconfigure:orchid core vms (high 7.5)
- [CVE-2018-10955](https://insights.sbomify.com/CVE-2018-10955/): Other in 2345 security guard project:2345 security guard (high 7.8)
- [CVE-2018-10954](https://insights.sbomify.com/CVE-2018-10954/): Other in 2345 security guard project:2345 security guard (high 7.8)
- [CVE-2018-10953](https://insights.sbomify.com/CVE-2018-10953/): Other in 2345 security guard project:2345 security guard (high 7.8)
- [CVE-2018-10952](https://insights.sbomify.com/CVE-2018-10952/): Other in 2345 security guard project:2345 security guard (high 7.8)
- [CVE-2018-10951](https://insights.sbomify.com/CVE-2018-10951/): Missing authorization in synacor:zimbra collaboration suite (medium 6.5)
- [CVE-2018-10950](https://insights.sbomify.com/CVE-2018-10950/): Information disclosure in synacor:zimbra collaboration suite (medium 5.3)
- [CVE-2018-1095](https://insights.sbomify.com/CVE-2018-1095/): Null dereference in Linux kernel through version 4.15 (medium 5.5)
- [CVE-2018-10949](https://insights.sbomify.com/CVE-2018-10949/): Information disclosure in synacor:zimbra collaboration suite (medium 5.3)
- [CVE-2018-10948](https://insights.sbomify.com/CVE-2018-10948/): Cross-site scripting in synacor:zimbra collaboration suite (medium 4.8)
- [CVE-2018-10947](https://insights.sbomify.com/CVE-2018-10947/): Auth bypass in polycom:realpresence debut firmware (low 3.1)
- [CVE-2018-10946](https://insights.sbomify.com/CVE-2018-10946/): Information disclosure in polycom:realpresence debut firmware (medium 6.8)
- [CVE-2018-10945](https://insights.sbomify.com/CVE-2018-10945/): Memory corruption in cesanta:mongoose (high 7.5)
- [CVE-2018-10944](https://insights.sbomify.com/CVE-2018-10944/): Business logic in rasputinonline:rasputin online coin (medium 5.9)
- [CVE-2018-10943](https://insights.sbomify.com/CVE-2018-10943/): Denial of service in barco:clickshare cs-100 firmware (high 7.5)
- [CVE-2018-10942](https://insights.sbomify.com/CVE-2018-10942/): File upload in attribute wizard project:attribute wizard (critical 9.8)
- [CVE-2018-10940](https://insights.sbomify.com/CVE-2018-10940/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2018-1094](https://insights.sbomify.com/CVE-2018-1094/): Null dereference in Linux kernel through version 4.15 (medium 5.5)
- [CVE-2018-10939](https://insights.sbomify.com/CVE-2018-10939/): Cross-site scripting in synacor:zimbra collaboration suite (medium 6.1)
- [CVE-2018-10938](https://insights.sbomify.com/CVE-2018-10938/): Denial of service in canonical:ubuntu linux (medium 5.9)
- [CVE-2018-10937](https://insights.sbomify.com/CVE-2018-10937/): Cross-site scripting in Openshift Container Platform (medium 4.6)
- [CVE-2018-10936](https://insights.sbomify.com/CVE-2018-10936/): Moderate severity vulnerability that affects org.postgresql:pgjdbc-aggregate (high 8.1)
- [CVE-2018-10935](https://insights.sbomify.com/CVE-2018-10935/): Denial of service in 389-ds-base (medium 6.5)
- [CVE-2018-10934](https://insights.sbomify.com/CVE-2018-10934/): Cross-site scripting in wildfly-core (medium 5.4)
- [CVE-2018-10933](https://insights.sbomify.com/CVE-2018-10933/): Auth bypass in libssh (critical 9.1)
- [CVE-2018-10932](https://insights.sbomify.com/CVE-2018-10932/): Other in lldptool (medium 4.3)
- [CVE-2018-10931](https://insights.sbomify.com/CVE-2018-10931/): Cobbler has Exposed Dangerous Method or Function (critical 9.8)
- [CVE-2018-10930](https://insights.sbomify.com/CVE-2018-10930/): Path traversal in glusterfs (medium 6.5)
- [CVE-2018-1093](https://insights.sbomify.com/CVE-2018-1093/): Memory corruption in Linux kernel through version 4.15 (medium 5.5)
- [CVE-2018-10929](https://insights.sbomify.com/CVE-2018-10929/): Other in glusterfs (high 8.8)
- [CVE-2018-10928](https://insights.sbomify.com/CVE-2018-10928/): Path traversal in glusterfs (high 8.8)
- [CVE-2018-10927](https://insights.sbomify.com/CVE-2018-10927/): Information disclosure in glusterfs (high 7.1)
- [CVE-2018-10926](https://insights.sbomify.com/CVE-2018-10926/): Path traversal in glusterfs (high 8.1)
- [CVE-2018-10925](https://insights.sbomify.com/CVE-2018-10925/): Missing authorization in postgresql (high 7.1)
- [CVE-2018-10924](https://insights.sbomify.com/CVE-2018-10924/): Denial of service in glusterfs (medium 5.3)
- [CVE-2018-10923](https://insights.sbomify.com/CVE-2018-10923/): Path traversal in glusterfs (high 7.6)
- [CVE-2018-10922](https://insights.sbomify.com/CVE-2018-10922/): Denial of service in ttembed (high 7.5)
- [CVE-2018-10921](https://insights.sbomify.com/CVE-2018-10921/): Integer overflow in ttembed (medium 4.3)
- [CVE-2018-10920](https://insights.sbomify.com/CVE-2018-10920/): Other in knot-resolver (high 7.5)
- [CVE-2018-1092](https://insights.sbomify.com/CVE-2018-1092/): Null dereference in Linux kernel through version 4.15 (medium 5.5)
- [CVE-2018-10919](https://insights.sbomify.com/CVE-2018-10919/): Information disclosure in samba (medium 4.3)
- [CVE-2018-10918](https://insights.sbomify.com/CVE-2018-10918/): Null dereference in samba (medium 5.2)
- [CVE-2018-10917](https://insights.sbomify.com/CVE-2018-10917/): Path traversal in pulp (medium 6.8)
- [CVE-2018-10916](https://insights.sbomify.com/CVE-2018-10916/): Path traversal in lftp (medium 5.3)
- [CVE-2018-10915](https://insights.sbomify.com/CVE-2018-10915/): Security feature bypass in postgresql (high 8.5)
- [CVE-2018-10914](https://insights.sbomify.com/CVE-2018-10914/): Null dereference in glusterfs (medium 5.5)
- [CVE-2018-10913](https://insights.sbomify.com/CVE-2018-10913/): Information disclosure in glusterfs (low 3.5)
- [CVE-2018-10912](https://insights.sbomify.com/CVE-2018-10912/): Moderate severity vulnerability that affects org.keycloak:keycloak-core (medium 4.4)
- [CVE-2018-10911](https://insights.sbomify.com/CVE-2018-10911/): Memory corruption in glusterfs: (medium 6.5)
- [CVE-2018-10910](https://insights.sbomify.com/CVE-2018-10910/): Auth bypass in bluez (medium 4.5)
- [CVE-2018-1091](https://insights.sbomify.com/CVE-2018-1091/): Denial of service in Linux kernel v4.13 and newer (medium 5.5)
- [CVE-2018-10908](https://insights.sbomify.com/CVE-2018-10908/): Denial of service in vdsm (medium 6.5)
- [CVE-2018-10907](https://insights.sbomify.com/CVE-2018-10907/): Memory corruption in glusterfs (high 8.8)
- [CVE-2018-10906](https://insights.sbomify.com/CVE-2018-10906/): Security feature bypass in fuse (medium 5.3)
- [CVE-2018-10905](https://insights.sbomify.com/CVE-2018-10905/): Privilege escalation in cfme (high 7.8)
- [CVE-2018-10904](https://insights.sbomify.com/CVE-2018-10904/): Path traversal in glusterfs (high 8.8)
- [CVE-2018-10903](https://insights.sbomify.com/CVE-2018-10903/): PyCA Cryptography vulnerable to GCM tag forgery (high 7.5)
- [CVE-2018-10902](https://insights.sbomify.com/CVE-2018-10902/): Memory corruption in Linux (high 7.8)
- [CVE-2018-10901](https://insights.sbomify.com/CVE-2018-10901/): Privilege escalation in kernel: (high 7.8)
- [CVE-2018-10900](https://insights.sbomify.com/CVE-2018-10900/): Command injection in networkmanager-vpnc (high 8.8)
- [CVE-2018-1090](https://insights.sbomify.com/CVE-2018-1090/): Information disclosure in pulp (medium 5.5)
- [CVE-2018-10899](https://insights.sbomify.com/CVE-2018-10899/): Cross-Site Request Forgery in Jolokia (high 8.1)
- [CVE-2018-10898](https://insights.sbomify.com/CVE-2018-10898/): Hardcoded credentials in openstack-tripleo-heat-templates (high 8.8)
- [CVE-2018-10897](https://insights.sbomify.com/CVE-2018-10897/): Path traversal in yum-utils: (high 8.8)
- [CVE-2018-10896](https://insights.sbomify.com/CVE-2018-10896/): Misconfiguration in cloud-init (medium 4.6)
- [CVE-2018-10895](https://insights.sbomify.com/CVE-2018-10895/): Qutebrowser CSRF Vulnerability (critical 9.3)
- [CVE-2018-10894](https://insights.sbomify.com/CVE-2018-10894/): Keycloak Authentication Error (medium 5.4)
- [CVE-2018-10893](https://insights.sbomify.com/CVE-2018-10893/): Integer overflow in spice-client (high 7.6)
- [CVE-2018-10892](https://insights.sbomify.com/CVE-2018-10892/): Security feature bypass in docker (medium 6.3)
- [CVE-2018-10891](https://insights.sbomify.com/CVE-2018-10891/): Moodle XSS Vulnerability (medium 6.3)
- [CVE-2018-10890](https://insights.sbomify.com/CVE-2018-10890/): Moodle Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2018-1089](https://insights.sbomify.com/CVE-2018-1089/): Memory corruption in 389-ds-base (high 7.5)
- [CVE-2018-10889](https://insights.sbomify.com/CVE-2018-10889/): Moodle sensitive information disclosure (medium 4.3)
- [CVE-2018-10888](https://insights.sbomify.com/CVE-2018-10888/): Memory corruption in libgit2 (medium 6.5)
- [CVE-2018-10887](https://insights.sbomify.com/CVE-2018-10887/): Integer overflow in libgit2 (high 8.1)
- [CVE-2018-10885](https://insights.sbomify.com/CVE-2018-10885/): Denial of service in atomic-openshift (medium 6.5)
- [CVE-2018-10884](https://insights.sbomify.com/CVE-2018-10884/): Cross-site request forgery in ansible-tower (high 8.8)
- [CVE-2018-10883](https://insights.sbomify.com/CVE-2018-10883/): Memory corruption in kernel (medium 4.8)
- [CVE-2018-10882](https://insights.sbomify.com/CVE-2018-10882/): Memory corruption in kernel (medium 4.8)
- [CVE-2018-10881](https://insights.sbomify.com/CVE-2018-10881/): Memory corruption in kernel (medium 4.2)
- [CVE-2018-10880](https://insights.sbomify.com/CVE-2018-10880/): Memory corruption in kernel (medium 5.5)
- [CVE-2018-1088](https://insights.sbomify.com/CVE-2018-1088/): Privilege escalation in glusterfs (high 8.1)
- [CVE-2018-10879](https://insights.sbomify.com/CVE-2018-10879/): Use after free in kernel (medium 4.2)
- [CVE-2018-10878](https://insights.sbomify.com/CVE-2018-10878/): Memory corruption in kernel (medium 4.8)
- [CVE-2018-10877](https://insights.sbomify.com/CVE-2018-10877/): Memory corruption in kernel (high 7.3)
- [CVE-2018-10876](https://insights.sbomify.com/CVE-2018-10876/): Use after free in kernel (medium 5.0)
- [CVE-2018-10875](https://insights.sbomify.com/CVE-2018-10875/): Ansible Arbitrary Code Execution (high 7.8)
- [CVE-2018-10874](https://insights.sbomify.com/CVE-2018-10874/): Ansible Improper Input Validation vulnerability (high 7.8)
- [CVE-2018-10873](https://insights.sbomify.com/CVE-2018-10873/): Memory corruption in spice: (high 8.3)
- [CVE-2018-10872](https://insights.sbomify.com/CVE-2018-10872/): Denial of service in kernel (medium 6.5)
- [CVE-2018-10871](https://insights.sbomify.com/CVE-2018-10871/): Information disclosure in 389-ds-base (low 3.8)
- [CVE-2018-10870](https://insights.sbomify.com/CVE-2018-10870/): Path traversal in rhcertstore.py (critical 9.8)
- [CVE-2018-1087](https://insights.sbomify.com/CVE-2018-1087/): Privilege escalation in KVM (high 8.0)
- [CVE-2018-10869](https://insights.sbomify.com/CVE-2018-10869/): Path traversal in redhat-certification (high 7.5)
- [CVE-2018-10868](https://insights.sbomify.com/CVE-2018-10868/): XML external entity in redhat-certification (high 7.5)
- [CVE-2018-10867](https://insights.sbomify.com/CVE-2018-10867/): Missing authorization in redhat-certification (critical 9.1)
- [CVE-2018-10866](https://insights.sbomify.com/CVE-2018-10866/): Missing authorization in redhat-certification (critical 9.1)
- [CVE-2018-10865](https://insights.sbomify.com/CVE-2018-10865/): Missing authorization in redhat-certification (high 7.5)
- [CVE-2018-10864](https://insights.sbomify.com/CVE-2018-10864/): Denial of service in redhat-certification: (medium 5.3)
- [CVE-2018-10863](https://insights.sbomify.com/CVE-2018-10863/): Information disclosure in redhat-certification (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/142/