# Vulnerabilities published in 2018


- [CVE-2018-10862](https://insights.sbomify.com/CVE-2018-10862/): Improper Limitation of a Pathname to a Restricted Directory in WildFly (medium 5.5)
- [CVE-2018-10861](https://insights.sbomify.com/CVE-2018-10861/): Missing authorization in ceph (high 8.1)
- [CVE-2018-10860](https://insights.sbomify.com/CVE-2018-10860/): Path traversal in perl-archive-zip (medium 5.4)
- [CVE-2018-1086](https://insights.sbomify.com/CVE-2018-1086/): Information disclosure in pcs (medium 4.3)
- [CVE-2018-10859](https://insights.sbomify.com/CVE-2018-10859/): Information disclosure in git-annex (medium 5.9)
- [CVE-2018-10858](https://insights.sbomify.com/CVE-2018-10858/): Memory corruption in samba (medium 4.3)
- [CVE-2018-10857](https://insights.sbomify.com/CVE-2018-10857/): Information disclosure in git-annex (medium 5.9)
- [CVE-2018-10856](https://insights.sbomify.com/CVE-2018-10856/): Podman Elevated Container Privileges (medium 5.3)
- [CVE-2018-10855](https://insights.sbomify.com/CVE-2018-10855/): Ansible exposes sensitive data in log files and on the terminal (medium 5.9)
- [CVE-2018-10854](https://insights.sbomify.com/CVE-2018-10854/): Cross-site scripting in cloudforms (medium 6.5)
- [CVE-2018-10853](https://insights.sbomify.com/CVE-2018-10853/): Privilege escalation in kernel (high 7.0)
- [CVE-2018-10852](https://insights.sbomify.com/CVE-2018-10852/): Information disclosure in sssd (low 3.8)
- [CVE-2018-10851](https://insights.sbomify.com/CVE-2018-10851/): Denial of service in pdns (medium 5.3)
- [CVE-2018-10850](https://insights.sbomify.com/CVE-2018-10850/): Race condition in 389-ds-base (medium 5.9)
- [CVE-2018-1085](https://insights.sbomify.com/CVE-2018-1085/): Misconfiguration in openshift-ansible (critical 9.0)
- [CVE-2018-10847](https://insights.sbomify.com/CVE-2018-10847/): Auth bypass in prosody (medium 4.2)
- [CVE-2018-10846](https://insights.sbomify.com/CVE-2018-10846/): Weak cryptography in gnutls (medium 5.3)
- [CVE-2018-10845](https://insights.sbomify.com/CVE-2018-10845/): Weak cryptography in gnutls (medium 5.9)
- [CVE-2018-10844](https://insights.sbomify.com/CVE-2018-10844/): Weak cryptography in gnutls (medium 5.9)
- [CVE-2018-10843](https://insights.sbomify.com/CVE-2018-10843/): Privilege escalation in source-to-image (high 8.5)
- [CVE-2018-10841](https://insights.sbomify.com/CVE-2018-10841/): Privilege escalation in glusterfs (medium 6.6)
- [CVE-2018-10840](https://insights.sbomify.com/CVE-2018-10840/): Memory corruption in heap-based buffer overflow in fs/ext4/xattr.c (medium 5.2)
- [CVE-2018-1084](https://insights.sbomify.com/CVE-2018-1084/): Integer overflow in corosync (high 7.5)
- [CVE-2018-10839](https://insights.sbomify.com/CVE-2018-10839/): Integer overflow in Qemu-kvm (medium 6.5)
- [CVE-2018-10832](https://insights.sbomify.com/CVE-2018-10832/): XML external entity in modbuspal project:modbuspal (medium 5.5)
- [CVE-2018-10831](https://insights.sbomify.com/CVE-2018-10831/): Weak cryptography in zclassic:z-nomp (high 7.5)
- [CVE-2018-10830](https://insights.sbomify.com/CVE-2018-10830/): Memory corruption in 2345 security guard project:2345 security guard (high 7.8)
- [CVE-2018-1083](https://insights.sbomify.com/CVE-2018-1083/): Memory corruption in zsh (high 7.8)
- [CVE-2018-10828](https://insights.sbomify.com/CVE-2018-10828/): Denial of service in alps:pointing-device driver (medium 5.5)
- [CVE-2018-10827](https://insights.sbomify.com/CVE-2018-10827/): Denial of service in litecart:litecart (high 7.5)
- [CVE-2018-10825](https://insights.sbomify.com/CVE-2018-10825/): Auth bypass in mimobaby:mimo baby 2 firmware (medium 5.3)
- [CVE-2018-10824](https://insights.sbomify.com/CVE-2018-10824/): Information disclosure in dlink:dir-140l firmware (critical 9.8)
- [CVE-2018-10823](https://insights.sbomify.com/CVE-2018-10823/): Command injection in dlink:dwr-111 firmware (high 8.8)
- [CVE-2018-10822](https://insights.sbomify.com/CVE-2018-10822/): Path traversal in dlink:dir-140l firmware (high 7.5)
- [CVE-2018-10821](https://insights.sbomify.com/CVE-2018-10821/): Cross-site scripting in blackcat-cms:blackcat cms (medium 4.8)
- [CVE-2018-1082](https://insights.sbomify.com/CVE-2018-1082/): Moodle Improper Authentication (high 8.1)
- [CVE-2018-10817](https://insights.sbomify.com/CVE-2018-10817/): Cross-site scripting in severalnines:clustercontrol (medium 6.1)
- [CVE-2018-10815](https://insights.sbomify.com/CVE-2018-10815/): Information disclosure in cloudera:cloudera manager (medium 6.5)
- [CVE-2018-10814](https://insights.sbomify.com/CVE-2018-10814/): Information disclosure in synametrics:synaman (high 7.8)
- [CVE-2018-10813](https://insights.sbomify.com/CVE-2018-10813/): Hardcoded credentials in aprendecondedos:dedos-web (high 7.3)
- [CVE-2018-10812](https://insights.sbomify.com/CVE-2018-10812/): Information disclosure in bitpie:bitcoin wallet (medium 4.1)
- [CVE-2018-10811](https://insights.sbomify.com/CVE-2018-10811/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2018-10810](https://insights.sbomify.com/CVE-2018-10810/): Cross-site scripting in livezilla:livezilla (medium 6.1)
- [CVE-2018-1081](https://insights.sbomify.com/CVE-2018-1081/): Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script (medium 5.3)
- [CVE-2018-10809](https://insights.sbomify.com/CVE-2018-10809/): Other in 2345 security guard project:2345 security guard (high 7.8)
- [CVE-2018-10806](https://insights.sbomify.com/CVE-2018-10806/): Cross-site scripting in frogcms project:frogcms (medium 5.4)
- [CVE-2018-10805](https://insights.sbomify.com/CVE-2018-10805/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-10804](https://insights.sbomify.com/CVE-2018-10804/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-10803](https://insights.sbomify.com/CVE-2018-10803/): Cross-site scripting in zohocorp:manageengine netflow analyzer (medium 6.1)
- [CVE-2018-10801](https://insights.sbomify.com/CVE-2018-10801/): Denial of service in libtiff:libtiff (medium 6.5)
- [CVE-2018-1080](https://insights.sbomify.com/CVE-2018-1080/): Auth bypass in pki-core (high 7.5)
- [CVE-2018-10799](https://insights.sbomify.com/CVE-2018-10799/): Denial of service in brave:brave (medium 6.5)
- [CVE-2018-10798](https://insights.sbomify.com/CVE-2018-10798/): Denial of service in brave:brave (medium 6.5)
- [CVE-2018-10796](https://insights.sbomify.com/CVE-2018-10796/): Memory corruption in 2345 security guard project:2345 security guard (high 7.8)
- [CVE-2018-10795](https://insights.sbomify.com/CVE-2018-10795/): File upload in liferay:liferay portal (high 8.8)
- [CVE-2018-10790](https://insights.sbomify.com/CVE-2018-10790/): Denial of service in axiosys:bento4 (high 7.5)
- [CVE-2018-1079](https://insights.sbomify.com/CVE-2018-1079/): Path traversal in pcs (high 8.7)
- [CVE-2018-10780](https://insights.sbomify.com/CVE-2018-10780/): Memory corruption in exiv2:exiv2 (medium 6.5)
- [CVE-2018-1078](https://insights.sbomify.com/CVE-2018-1078/): Business logic in OpenDayLight (critical 9.8)
- [CVE-2018-10779](https://insights.sbomify.com/CVE-2018-10779/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-10778](https://insights.sbomify.com/CVE-2018-10778/): Memory corruption in mp3gain:mp3gain (high 7.8)
- [CVE-2018-10777](https://insights.sbomify.com/CVE-2018-10777/): Memory corruption in mp3gain:mp3gain (high 7.8)
- [CVE-2018-10776](https://insights.sbomify.com/CVE-2018-10776/): Memory corruption in mp3gain:mp3gain (high 7.8)
- [CVE-2018-10775](https://insights.sbomify.com/CVE-2018-10775/): Null dereference in bibutils project:bibutils (medium 6.5)
- [CVE-2018-10774](https://insights.sbomify.com/CVE-2018-10774/): Memory corruption in bibutils project:bibutils (medium 6.5)
- [CVE-2018-10773](https://insights.sbomify.com/CVE-2018-10773/): Null dereference in bibutils project:bibutils (medium 6.5)
- [CVE-2018-10772](https://insights.sbomify.com/CVE-2018-10772/): Memory corruption in exiv2:exiv2 (medium 6.5)
- [CVE-2018-10771](https://insights.sbomify.com/CVE-2018-10771/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2018-10770](https://insights.sbomify.com/CVE-2018-10770/): Missing authorization in annigroup:5 in 1 xvr firmware (critical 9.8)
- [CVE-2018-1077](https://insights.sbomify.com/CVE-2018-1077/): XML external entity in spacewalk (high 7.5)
- [CVE-2018-10769](https://insights.sbomify.com/CVE-2018-10769/): Business logic in first project:first (high 7.5)
- [CVE-2018-10768](https://insights.sbomify.com/CVE-2018-10768/): Null dereference in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-10767](https://insights.sbomify.com/CVE-2018-10767/): Memory corruption in gnome:libgxps (medium 6.5)
- [CVE-2018-10763](https://insights.sbomify.com/CVE-2018-10763/): Cross-site scripting in synametrics:synaman (medium 4.8)
- [CVE-2018-10760](https://insights.sbomify.com/CVE-2018-10760/): File upload in projectpier:projectpier (high 8.8)
- [CVE-2018-10759](https://insights.sbomify.com/CVE-2018-10759/): Code injection in projectpier:projectpier (critical 9.8)
- [CVE-2018-10758](https://insights.sbomify.com/CVE-2018-10758/): Cross-site request forgery in datenstrom:yellow (medium 6.5)
- [CVE-2018-10757](https://insights.sbomify.com/CVE-2018-10757/): SQL injection in csp mysql user manager project:csp mysql user manager (critical 9.8)
- [CVE-2018-10756](https://insights.sbomify.com/CVE-2018-10756/): Use after free in debian:debian linux (high 7.8)
- [CVE-2018-10753](https://insights.sbomify.com/CVE-2018-10753/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2018-10752](https://insights.sbomify.com/CVE-2018-10752/): Cross-site scripting in tagregator project:tagregator (medium 4.8)
- [CVE-2018-10751](https://insights.sbomify.com/CVE-2018-10751/): Integer overflow in samsung:samsung mobile (medium 5.3)
- [CVE-2018-10750](https://insights.sbomify.com/CVE-2018-10750/): Memory corruption in d-link:dsl-3782 firmware (high 8.8)
- [CVE-2018-1075](https://insights.sbomify.com/CVE-2018-1075/): Information disclosure in ovirt-engine (medium 5.0)
- [CVE-2018-10749](https://insights.sbomify.com/CVE-2018-10749/): Memory corruption in d-link:dsl-3782 firmware (high 8.8)
- [CVE-2018-10748](https://insights.sbomify.com/CVE-2018-10748/): Memory corruption in d-link:dsl-3782 firmware (high 8.8)
- [CVE-2018-10747](https://insights.sbomify.com/CVE-2018-10747/): Memory corruption in d-link:dsl-3782 firmware (high 8.8)
- [CVE-2018-10746](https://insights.sbomify.com/CVE-2018-10746/): Memory corruption in d-link:dsl-3782 firmware (high 8.8)
- [CVE-2018-10740](https://insights.sbomify.com/CVE-2018-10740/): Code injection in axublog:axublog (critical 9.8)
- [CVE-2018-1074](https://insights.sbomify.com/CVE-2018-1074/): Information disclosure in ovirt-engine (high 7.7)
- [CVE-2018-10739](https://insights.sbomify.com/CVE-2018-10739/): Security feature bypass in 2345 security guard project:2345 security guard (medium 5.5)
- [CVE-2018-10738](https://insights.sbomify.com/CVE-2018-10738/): SQL injection in nagios:nagios xi (high 7.2)
- [CVE-2018-10737](https://insights.sbomify.com/CVE-2018-10737/): SQL injection in nagios:nagios xi (high 7.2)
- [CVE-2018-10736](https://insights.sbomify.com/CVE-2018-10736/): SQL injection in nagios:nagios xi (high 7.2)
- [CVE-2018-10735](https://insights.sbomify.com/CVE-2018-10735/): SQL injection in nagios:nagios xi (high 7.2)
- [CVE-2018-10734](https://insights.sbomify.com/CVE-2018-10734/): Hardcoded credentials in kongtop:a303 firmware (critical 9.8)
- [CVE-2018-10733](https://insights.sbomify.com/CVE-2018-10733/): Memory corruption in gnome:libgxps (medium 6.5)
- [CVE-2018-10732](https://insights.sbomify.com/CVE-2018-10732/): Information disclosure in dataiku:data science studio (medium 5.3)
- [CVE-2018-10731](https://insights.sbomify.com/CVE-2018-10731/): Memory corruption in phoenixcontact:fl switch 3004t-fx firmware (critical 9.0)
- [CVE-2018-10730](https://insights.sbomify.com/CVE-2018-10730/): Command injection in phoenixcontact:fl switch 3004t-fx firmware (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/143/