Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 144 of 163.
- CVE-2018-1073 Information disclosure in ovirt-engine
- CVE-2018-10729 Information disclosure in phoenixcontact:fl switch 3004t-fx firmware
- CVE-2018-10728 Memory corruption in phoenixcontact:fl switch 3004t-fx firmware
- CVE-2018-10727 Cross-site scripting in fabrikar:fabrik
- CVE-2018-10726 Cross-site scripting in datenstrom:yellow
- CVE-2018-10723 Hardcoded credentials in rangerstudio:directus
- CVE-2018-10722 Privilege escalation in cylance:cylanceprotect
- CVE-2018-1072 Information disclosure in ovirt-engine-setup
- CVE-2018-10718 Memory corruption in activision:call of duty modern warfare 2
- CVE-2018-10717 Memory corruption in miniupnp project:ngiflib
- CVE-2018-10716 Security feature bypass in 2345 security guard project:2345 security guard
- CVE-2018-10713 Memory corruption in d-link:dsl-3782 firmware
- CVE-2018-10712 Privilege escalation in asrock:a-tuning
- CVE-2018-10711 Privilege escalation in asrock:a-tuning
- CVE-2018-10710 Privilege escalation in asrock:a-tuning
- CVE-2018-1071 Memory corruption in zsh
- CVE-2018-10709 Privilege escalation in asrock:a-tuning
- CVE-2018-10706 Integer overflow in social-chain:social chain
- CVE-2018-10705 Missing authorization in auroradao:aura
- CVE-2018-10704 Cross-site Scripting in yii2cmf
- CVE-2018-10703 Memory corruption in moxa:awk-3121 firmware
- CVE-2018-10702 Command injection in moxa:awk-3121 firmware
- CVE-2018-10701 Memory corruption in moxa:awk-3121 firmware
- CVE-2018-10700 Cross-site scripting in moxa:awk-3121 firmware
- CVE-2018-1070 Denial of service in routing
- CVE-2018-10699 Command injection in moxa:awk-3121 firmware
- CVE-2018-10698 Misconfiguration in moxa:awk-3121 firmware
- CVE-2018-10697 Command injection in moxa:awk-3121 firmware
- CVE-2018-10696 Cross-site request forgery in moxa:awk-3121 firmware
- CVE-2018-10695 Memory corruption in moxa:awk-3121 firmware
- CVE-2018-10694 Weak cryptography in moxa:awk-3121 firmware
- CVE-2018-10693 Memory corruption in moxa:awk-3121 firmware
- CVE-2018-10692 Misconfiguration in moxa:awk-3121 firmware
- CVE-2018-10691 Missing authorization in moxa:awk-3121 firmware
- CVE-2018-10690 Information disclosure in moxa:awk-3121 firmware
- CVE-2018-1069 Privilege escalation in OpenShift Enterprise
- CVE-2018-10689 Memory corruption in blktrace project:blktrace
- CVE-2018-10686 Cross-site scripting in vestacp:control panel
- CVE-2018-10685 Use after free in long range zip project:long range zip
- CVE-2018-10683 Auth bypass in redhat:wildfly
- CVE-2018-10682 Auth bypass in wildfly:wildfly
- CVE-2018-10680 Cross-site scripting in zblogcn:z-blogphp
- CVE-2018-1068 Memory corruption in Linux Kernel
- CVE-2018-10678 Open redirect in mybb:mybb
- CVE-2018-10677 Memory corruption in miniupnp project:ngiflib
- CVE-2018-10676 Information disclosure in tbkvision:tbk-dvr4104 firmware
- CVE-2018-10675 Use after free in canonical:ubuntu linux
- CVE-2018-1067 Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow
- CVE-2018-10666 Missing authorization in auroradao:idex membership
- CVE-2018-10665 Cross-site scripting in ilias:ilias
- CVE-2018-10664 Memory corruption in axis:a1001 firmware
- CVE-2018-10663 Other in axis:a1001 firmware
- CVE-2018-10662 Misconfiguration in axis:a1001 firmware
- CVE-2018-10661 Auth bypass in axis:a1001 firmware
- CVE-2018-10660 Command injection in axis:a1001 firmware
- CVE-2018-1066 Null dereference in Linux kernel 4.11
- CVE-2018-10659 Memory corruption in axis:a1001 firmware
- CVE-2018-10658 Memory corruption in axis:a1001 firmware
- CVE-2018-10657 Matrix Synapse DoS
- CVE-2018-10655 Memory corruption in devicelock:plug and play auditor
- CVE-2018-10654 Deserialization in citrix:xenmobile server
- CVE-2018-10653 XML external entity in citrix:xenmobile server
- CVE-2018-10652 Information disclosure in citrix:xenmobile server
- CVE-2018-10651 Open redirect in citrix:xenmobile server
- CVE-2018-10650 Path traversal in citrix:xenmobile server
- CVE-2018-1065 Null dereference in Linux kernel 4.15.0-rc9
- CVE-2018-10649 Cross-site scripting in citrix:xenmobile server
- CVE-2018-10648 File upload in citrix:xenmobile server
- CVE-2018-10647 Privilege escalation in safervpn:safervpn
- CVE-2018-10646 Privilege escalation in cyberghostvpn:cyberghost
- CVE-2018-10645 Privilege escalation in goldenfrog:vyprvpn
- CVE-2018-10642 Code injection in combodo:itop
- CVE-2018-10641 Auth bypass in dlink:dir-601 firmware
- CVE-2018-1064 Denial of service in libvirt
- CVE-2018-10637 Memory corruption in V-Server Lite
- CVE-2018-10636 Memory corruption in CNCSoft with ScreenEditor
- CVE-2018-10635 Missing authorization in Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100
- CVE-2018-10634 Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Cleartext Transmission of Sensitive Information
- CVE-2018-10633 Hardcoded credentials in Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100
- CVE-2018-10632 Denial of service in NPort 5210, 5230, and 5232
- CVE-2018-10631 Medtronic N'Vision Clinician Programmer Protection Mechanism Failure
- CVE-2018-10630 Misconfiguration in Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001
- CVE-2018-1063 Privilege escalation in policycoreutils
- CVE-2018-10628 Memory corruption in InTouch
- CVE-2018-10627 Information disclosure in SmartServer 1
- CVE-2018-10626 Medtronic MyCareLink 24950 Patient Monitor Insufficient Verification of Data Authenticity
- CVE-2018-10624 Johnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive Information
- CVE-2018-10623 Memory corruption in Delta Industrial Automation DOPSoft
- CVE-2018-10622 Medtronic MyCareLink Patient Monitor Network Credential Weakness
- CVE-2018-10621 Memory corruption in Delta Industrial Automation DOPSoft
- CVE-2018-10620 Memory corruption in InTouch Machine Edition
- CVE-2018-1062 Information disclosure in oVirt
- CVE-2018-10619 Privilege escalation in Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway
- CVE-2018-10618 Weak cryptography in DVW-3200N
- CVE-2018-10617 Memory corruption in Delta Industrial Automation DOPSoft
- CVE-2018-10616 Code injection in ABB Panel Builder 800
- CVE-2018-10615 Path traversal in MDS PulseNET and MDS PulseNET Enterprise
- CVE-2018-10614 XML external entity in LeviStudioU
- CVE-2018-10613 XML external entity in MDS PulseNET and MDS PulseNET Enterprise
- CVE-2018-10612 Misconfiguration in 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0