Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 143 of 163.
- CVE-2018-10862 Improper Limitation of a Pathname to a Restricted Directory in WildFly
- CVE-2018-10861 Missing authorization in ceph
- CVE-2018-10860 Path traversal in perl-archive-zip
- CVE-2018-1086 Information disclosure in pcs
- CVE-2018-10859 Information disclosure in git-annex
- CVE-2018-10858 Memory corruption in samba
- CVE-2018-10857 Information disclosure in git-annex
- CVE-2018-10856 Podman Elevated Container Privileges
- CVE-2018-10855 Ansible exposes sensitive data in log files and on the terminal
- CVE-2018-10854 Cross-site scripting in cloudforms
- CVE-2018-10853 Privilege escalation in kernel
- CVE-2018-10852 Information disclosure in sssd
- CVE-2018-10851 Denial of service in pdns
- CVE-2018-10850 Race condition in 389-ds-base
- CVE-2018-1085 Misconfiguration in openshift-ansible
- CVE-2018-10847 Auth bypass in prosody
- CVE-2018-10846 Weak cryptography in gnutls
- CVE-2018-10845 Weak cryptography in gnutls
- CVE-2018-10844 Weak cryptography in gnutls
- CVE-2018-10843 Privilege escalation in source-to-image
- CVE-2018-10841 Privilege escalation in glusterfs
- CVE-2018-10840 Memory corruption in heap-based buffer overflow in fs/ext4/xattr.c
- CVE-2018-1084 Integer overflow in corosync
- CVE-2018-10839 Integer overflow in Qemu-kvm
- CVE-2018-10832 XML external entity in modbuspal project:modbuspal
- CVE-2018-10831 Weak cryptography in zclassic:z-nomp
- CVE-2018-10830 Memory corruption in 2345 security guard project:2345 security guard
- CVE-2018-1083 Memory corruption in zsh
- CVE-2018-10828 Denial of service in alps:pointing-device driver
- CVE-2018-10827 Denial of service in litecart:litecart
- CVE-2018-10825 Auth bypass in mimobaby:mimo baby 2 firmware
- CVE-2018-10824 Information disclosure in dlink:dir-140l firmware
- CVE-2018-10823 Command injection in dlink:dwr-111 firmware
- CVE-2018-10822 Path traversal in dlink:dir-140l firmware
- CVE-2018-10821 Cross-site scripting in blackcat-cms:blackcat cms
- CVE-2018-1082 Moodle Improper Authentication
- CVE-2018-10817 Cross-site scripting in severalnines:clustercontrol
- CVE-2018-10815 Information disclosure in cloudera:cloudera manager
- CVE-2018-10814 Information disclosure in synametrics:synaman
- CVE-2018-10813 Hardcoded credentials in aprendecondedos:dedos-web
- CVE-2018-10812 Information disclosure in bitpie:bitcoin wallet
- CVE-2018-10811 Denial of service in canonical:ubuntu linux
- CVE-2018-10810 Cross-site scripting in livezilla:livezilla
- CVE-2018-1081 Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script
- CVE-2018-10809 Other in 2345 security guard project:2345 security guard
- CVE-2018-10806 Cross-site scripting in frogcms project:frogcms
- CVE-2018-10805 Denial of service in canonical:ubuntu linux
- CVE-2018-10804 Denial of service in canonical:ubuntu linux
- CVE-2018-10803 Cross-site scripting in zohocorp:manageengine netflow analyzer
- CVE-2018-10801 Denial of service in libtiff:libtiff
- CVE-2018-1080 Auth bypass in pki-core
- CVE-2018-10799 Denial of service in brave:brave
- CVE-2018-10798 Denial of service in brave:brave
- CVE-2018-10796 Memory corruption in 2345 security guard project:2345 security guard
- CVE-2018-10795 File upload in liferay:liferay portal
- CVE-2018-10790 Denial of service in axiosys:bento4
- CVE-2018-1079 Path traversal in pcs
- CVE-2018-10780 Memory corruption in exiv2:exiv2
- CVE-2018-1078 Business logic in OpenDayLight
- CVE-2018-10779 Memory corruption in canonical:ubuntu linux
- CVE-2018-10778 Memory corruption in mp3gain:mp3gain
- CVE-2018-10777 Memory corruption in mp3gain:mp3gain
- CVE-2018-10776 Memory corruption in mp3gain:mp3gain
- CVE-2018-10775 Null dereference in bibutils project:bibutils
- CVE-2018-10774 Memory corruption in bibutils project:bibutils
- CVE-2018-10773 Null dereference in bibutils project:bibutils
- CVE-2018-10772 Memory corruption in exiv2:exiv2
- CVE-2018-10771 Memory corruption in debian:debian linux
- CVE-2018-10770 Missing authorization in annigroup:5 in 1 xvr firmware
- CVE-2018-1077 XML external entity in spacewalk
- CVE-2018-10769 Business logic in first project:first
- CVE-2018-10768 Null dereference in canonical:ubuntu linux
- CVE-2018-10767 Memory corruption in gnome:libgxps
- CVE-2018-10763 Cross-site scripting in synametrics:synaman
- CVE-2018-10760 File upload in projectpier:projectpier
- CVE-2018-10759 Code injection in projectpier:projectpier
- CVE-2018-10758 Cross-site request forgery in datenstrom:yellow
- CVE-2018-10757 SQL injection in csp mysql user manager project:csp mysql user manager
- CVE-2018-10756 Use after free in debian:debian linux
- CVE-2018-10753 Memory corruption in debian:debian linux
- CVE-2018-10752 Cross-site scripting in tagregator project:tagregator
- CVE-2018-10751 Integer overflow in samsung:samsung mobile
- CVE-2018-10750 Memory corruption in d-link:dsl-3782 firmware
- CVE-2018-1075 Information disclosure in ovirt-engine
- CVE-2018-10749 Memory corruption in d-link:dsl-3782 firmware
- CVE-2018-10748 Memory corruption in d-link:dsl-3782 firmware
- CVE-2018-10747 Memory corruption in d-link:dsl-3782 firmware
- CVE-2018-10746 Memory corruption in d-link:dsl-3782 firmware
- CVE-2018-10740 Code injection in axublog:axublog
- CVE-2018-1074 Information disclosure in ovirt-engine
- CVE-2018-10739 Security feature bypass in 2345 security guard project:2345 security guard
- CVE-2018-10738 SQL injection in nagios:nagios xi
- CVE-2018-10737 SQL injection in nagios:nagios xi
- CVE-2018-10736 SQL injection in nagios:nagios xi
- CVE-2018-10735 SQL injection in nagios:nagios xi
- CVE-2018-10734 Hardcoded credentials in kongtop:a303 firmware
- CVE-2018-10733 Memory corruption in gnome:libgxps
- CVE-2018-10732 Information disclosure in dataiku:data science studio
- CVE-2018-10731 Memory corruption in phoenixcontact:fl switch 3004t-fx firmware
- CVE-2018-10730 Command injection in phoenixcontact:fl switch 3004t-fx firmware