# Vulnerabilities published in 2018


- [CVE-2018-1073](https://insights.sbomify.com/CVE-2018-1073/): Information disclosure in ovirt-engine (medium 5.3)
- [CVE-2018-10729](https://insights.sbomify.com/CVE-2018-10729/): Information disclosure in phoenixcontact:fl switch 3004t-fx firmware (medium 5.3)
- [CVE-2018-10728](https://insights.sbomify.com/CVE-2018-10728/): Memory corruption in phoenixcontact:fl switch 3004t-fx firmware (high 8.1)
- [CVE-2018-10727](https://insights.sbomify.com/CVE-2018-10727/): Cross-site scripting in fabrikar:fabrik (medium 6.1)
- [CVE-2018-10726](https://insights.sbomify.com/CVE-2018-10726/): Cross-site scripting in datenstrom:yellow (medium 5.4)
- [CVE-2018-10723](https://insights.sbomify.com/CVE-2018-10723/): Hardcoded credentials in rangerstudio:directus (critical 9.8)
- [CVE-2018-10722](https://insights.sbomify.com/CVE-2018-10722/): Privilege escalation in cylance:cylanceprotect (high 7.8)
- [CVE-2018-1072](https://insights.sbomify.com/CVE-2018-1072/): Information disclosure in ovirt-engine-setup (medium 5.0)
- [CVE-2018-10718](https://insights.sbomify.com/CVE-2018-10718/): Memory corruption in activision:call of duty modern warfare 2 (critical 10.0)
- [CVE-2018-10717](https://insights.sbomify.com/CVE-2018-10717/): Memory corruption in miniupnp project:ngiflib (high 8.8)
- [CVE-2018-10716](https://insights.sbomify.com/CVE-2018-10716/): Security feature bypass in 2345 security guard project:2345 security guard (medium 5.5)
- [CVE-2018-10713](https://insights.sbomify.com/CVE-2018-10713/): Memory corruption in d-link:dsl-3782 firmware (high 8.8)
- [CVE-2018-10712](https://insights.sbomify.com/CVE-2018-10712/): Privilege escalation in asrock:a-tuning (high 7.8)
- [CVE-2018-10711](https://insights.sbomify.com/CVE-2018-10711/): Privilege escalation in asrock:a-tuning (high 7.8)
- [CVE-2018-10710](https://insights.sbomify.com/CVE-2018-10710/): Privilege escalation in asrock:a-tuning (high 7.1)
- [CVE-2018-1071](https://insights.sbomify.com/CVE-2018-1071/): Memory corruption in zsh (medium 5.5)
- [CVE-2018-10709](https://insights.sbomify.com/CVE-2018-10709/): Privilege escalation in asrock:a-tuning (high 7.8)
- [CVE-2018-10706](https://insights.sbomify.com/CVE-2018-10706/): Integer overflow in social-chain:social chain (high 7.5)
- [CVE-2018-10705](https://insights.sbomify.com/CVE-2018-10705/): Missing authorization in auroradao:aura (high 7.5)
- [CVE-2018-10704](https://insights.sbomify.com/CVE-2018-10704/): Cross-site Scripting in yii2cmf (medium 6.1)
- [CVE-2018-10703](https://insights.sbomify.com/CVE-2018-10703/): Memory corruption in moxa:awk-3121 firmware (high 8.8)
- [CVE-2018-10702](https://insights.sbomify.com/CVE-2018-10702/): Command injection in moxa:awk-3121 firmware (high 8.8)
- [CVE-2018-10701](https://insights.sbomify.com/CVE-2018-10701/): Memory corruption in moxa:awk-3121 firmware (high 8.8)
- [CVE-2018-10700](https://insights.sbomify.com/CVE-2018-10700/): Cross-site scripting in moxa:awk-3121 firmware (medium 6.1)
- [CVE-2018-1070](https://insights.sbomify.com/CVE-2018-1070/): Denial of service in routing (medium 6.5)
- [CVE-2018-10699](https://insights.sbomify.com/CVE-2018-10699/): Command injection in moxa:awk-3121 firmware (high 8.8)
- [CVE-2018-10698](https://insights.sbomify.com/CVE-2018-10698/): Misconfiguration in moxa:awk-3121 firmware (critical 9.8)
- [CVE-2018-10697](https://insights.sbomify.com/CVE-2018-10697/): Command injection in moxa:awk-3121 firmware (high 8.8)
- [CVE-2018-10696](https://insights.sbomify.com/CVE-2018-10696/): Cross-site request forgery in moxa:awk-3121 firmware (high 8.8)
- [CVE-2018-10695](https://insights.sbomify.com/CVE-2018-10695/): Memory corruption in moxa:awk-3121 firmware (high 8.8)
- [CVE-2018-10694](https://insights.sbomify.com/CVE-2018-10694/): Weak cryptography in moxa:awk-3121 firmware (high 8.1)
- [CVE-2018-10693](https://insights.sbomify.com/CVE-2018-10693/): Memory corruption in moxa:awk-3121 firmware (high 8.8)
- [CVE-2018-10692](https://insights.sbomify.com/CVE-2018-10692/): Misconfiguration in moxa:awk-3121 firmware (medium 6.1)
- [CVE-2018-10691](https://insights.sbomify.com/CVE-2018-10691/): Missing authorization in moxa:awk-3121 firmware (high 7.5)
- [CVE-2018-10690](https://insights.sbomify.com/CVE-2018-10690/): Information disclosure in moxa:awk-3121 firmware (high 8.1)
- [CVE-2018-1069](https://insights.sbomify.com/CVE-2018-1069/): Privilege escalation in OpenShift Enterprise (high 7.1)
- [CVE-2018-10689](https://insights.sbomify.com/CVE-2018-10689/): Memory corruption in blktrace project:blktrace (medium 5.5)
- [CVE-2018-10686](https://insights.sbomify.com/CVE-2018-10686/): Cross-site scripting in vestacp:control panel (medium 6.1)
- [CVE-2018-10685](https://insights.sbomify.com/CVE-2018-10685/): Use after free in long range zip project:long range zip (critical 9.8)
- [CVE-2018-10683](https://insights.sbomify.com/CVE-2018-10683/): Auth bypass in redhat:wildfly (critical 9.8)
- [CVE-2018-10682](https://insights.sbomify.com/CVE-2018-10682/): Auth bypass in wildfly:wildfly (critical 9.8)
- [CVE-2018-10680](https://insights.sbomify.com/CVE-2018-10680/): Cross-site scripting in zblogcn:z-blogphp (medium 6.1)
- [CVE-2018-1068](https://insights.sbomify.com/CVE-2018-1068/): Memory corruption in Linux Kernel (medium 6.7)
- [CVE-2018-10678](https://insights.sbomify.com/CVE-2018-10678/): Open redirect in mybb:mybb (medium 6.1)
- [CVE-2018-10677](https://insights.sbomify.com/CVE-2018-10677/): Memory corruption in miniupnp project:ngiflib (high 8.8)
- [CVE-2018-10676](https://insights.sbomify.com/CVE-2018-10676/): Information disclosure in tbkvision:tbk-dvr4104 firmware (critical 9.8)
- [CVE-2018-10675](https://insights.sbomify.com/CVE-2018-10675/): Use after free in canonical:ubuntu linux (high 7.8)
- [CVE-2018-1067](https://insights.sbomify.com/CVE-2018-1067/): Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow (medium 5.4)
- [CVE-2018-10666](https://insights.sbomify.com/CVE-2018-10666/): Missing authorization in auroradao:idex membership (high 7.5)
- [CVE-2018-10665](https://insights.sbomify.com/CVE-2018-10665/): Cross-site scripting in ilias:ilias (medium 6.1)
- [CVE-2018-10664](https://insights.sbomify.com/CVE-2018-10664/): Memory corruption in axis:a1001 firmware (high 7.5)
- [CVE-2018-10663](https://insights.sbomify.com/CVE-2018-10663/): Other in axis:a1001 firmware (high 7.5)
- [CVE-2018-10662](https://insights.sbomify.com/CVE-2018-10662/): Misconfiguration in axis:a1001 firmware (critical 9.8)
- [CVE-2018-10661](https://insights.sbomify.com/CVE-2018-10661/): Auth bypass in axis:a1001 firmware (critical 9.8)
- [CVE-2018-10660](https://insights.sbomify.com/CVE-2018-10660/): Command injection in axis:a1001 firmware (critical 9.8)
- [CVE-2018-1066](https://insights.sbomify.com/CVE-2018-1066/): Null dereference in Linux kernel 4.11 (medium 6.5)
- [CVE-2018-10659](https://insights.sbomify.com/CVE-2018-10659/): Memory corruption in axis:a1001 firmware (high 7.5)
- [CVE-2018-10658](https://insights.sbomify.com/CVE-2018-10658/): Memory corruption in axis:a1001 firmware (high 7.5)
- [CVE-2018-10657](https://insights.sbomify.com/CVE-2018-10657/): Matrix Synapse DoS (high 7.5)
- [CVE-2018-10655](https://insights.sbomify.com/CVE-2018-10655/): Memory corruption in devicelock:plug and play auditor (high 7.8)
- [CVE-2018-10654](https://insights.sbomify.com/CVE-2018-10654/): Deserialization in citrix:xenmobile server (high 8.1)
- [CVE-2018-10653](https://insights.sbomify.com/CVE-2018-10653/): XML external entity in citrix:xenmobile server (critical 9.8)
- [CVE-2018-10652](https://insights.sbomify.com/CVE-2018-10652/): Information disclosure in citrix:xenmobile server (high 7.5)
- [CVE-2018-10651](https://insights.sbomify.com/CVE-2018-10651/): Open redirect in citrix:xenmobile server (medium 6.1)
- [CVE-2018-10650](https://insights.sbomify.com/CVE-2018-10650/): Path traversal in citrix:xenmobile server (high 7.8)
- [CVE-2018-1065](https://insights.sbomify.com/CVE-2018-1065/): Null dereference in Linux kernel 4.15.0-rc9 (medium 4.7)
- [CVE-2018-10649](https://insights.sbomify.com/CVE-2018-10649/): Cross-site scripting in citrix:xenmobile server (medium 6.1)
- [CVE-2018-10648](https://insights.sbomify.com/CVE-2018-10648/): File upload in citrix:xenmobile server (critical 9.8)
- [CVE-2018-10647](https://insights.sbomify.com/CVE-2018-10647/): Privilege escalation in safervpn:safervpn (high 7.8)
- [CVE-2018-10646](https://insights.sbomify.com/CVE-2018-10646/): Privilege escalation in cyberghostvpn:cyberghost (high 7.8)
- [CVE-2018-10645](https://insights.sbomify.com/CVE-2018-10645/): Privilege escalation in goldenfrog:vyprvpn (high 7.8)
- [CVE-2018-10642](https://insights.sbomify.com/CVE-2018-10642/): Code injection in combodo:itop (high 7.2)
- [CVE-2018-10641](https://insights.sbomify.com/CVE-2018-10641/): Auth bypass in dlink:dir-601 firmware (high 8.1)
- [CVE-2018-1064](https://insights.sbomify.com/CVE-2018-1064/): Denial of service in libvirt (high 7.5)
- [CVE-2018-10637](https://insights.sbomify.com/CVE-2018-10637/): Memory corruption in V-Server Lite (high 7.8)
- [CVE-2018-10636](https://insights.sbomify.com/CVE-2018-10636/): Memory corruption in CNCSoft with ScreenEditor (high 8.8)
- [CVE-2018-10635](https://insights.sbomify.com/CVE-2018-10635/): Missing authorization in Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 (critical 9.8)
- [CVE-2018-10634](https://insights.sbomify.com/CVE-2018-10634/): Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Cleartext Transmission of Sensitive Information (medium 4.8)
- [CVE-2018-10633](https://insights.sbomify.com/CVE-2018-10633/): Hardcoded credentials in Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100 (critical 9.8)
- [CVE-2018-10632](https://insights.sbomify.com/CVE-2018-10632/): Denial of service in NPort 5210, 5230, and 5232 (high 7.5)
- [CVE-2018-10631](https://insights.sbomify.com/CVE-2018-10631/): Medtronic N'Vision Clinician Programmer Protection Mechanism Failure (medium 6.3)
- [CVE-2018-10630](https://insights.sbomify.com/CVE-2018-10630/): Misconfiguration in Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001 (critical 9.8)
- [CVE-2018-1063](https://insights.sbomify.com/CVE-2018-1063/): Privilege escalation in policycoreutils (medium 4.4)
- [CVE-2018-10628](https://insights.sbomify.com/CVE-2018-10628/): Memory corruption in InTouch (critical 9.8)
- [CVE-2018-10627](https://insights.sbomify.com/CVE-2018-10627/): Information disclosure in SmartServer 1 (critical 9.8)
- [CVE-2018-10626](https://insights.sbomify.com/CVE-2018-10626/): Medtronic MyCareLink 24950 Patient Monitor Insufficient Verification of Data Authenticity (medium 4.4)
- [CVE-2018-10624](https://insights.sbomify.com/CVE-2018-10624/): Johnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive Information (medium 4.3)
- [CVE-2018-10623](https://insights.sbomify.com/CVE-2018-10623/): Memory corruption in Delta Industrial Automation DOPSoft (critical 9.8)
- [CVE-2018-10622](https://insights.sbomify.com/CVE-2018-10622/): Medtronic MyCareLink Patient Monitor Network Credential Weakness (medium 5.2)
- [CVE-2018-10621](https://insights.sbomify.com/CVE-2018-10621/): Memory corruption in Delta Industrial Automation DOPSoft (critical 9.8)
- [CVE-2018-10620](https://insights.sbomify.com/CVE-2018-10620/): Memory corruption in InTouch Machine Edition (critical 9.8)
- [CVE-2018-1062](https://insights.sbomify.com/CVE-2018-1062/): Information disclosure in oVirt (medium 5.3)
- [CVE-2018-10619](https://insights.sbomify.com/CVE-2018-10619/): Privilege escalation in Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway (high 7.8)
- [CVE-2018-10618](https://insights.sbomify.com/CVE-2018-10618/): Weak cryptography in DVW-3200N (critical 9.8)
- [CVE-2018-10617](https://insights.sbomify.com/CVE-2018-10617/): Memory corruption in Delta Industrial Automation DOPSoft (critical 9.8)
- [CVE-2018-10616](https://insights.sbomify.com/CVE-2018-10616/): Code injection in ABB Panel Builder 800 (high 7.8)
- [CVE-2018-10615](https://insights.sbomify.com/CVE-2018-10615/): Path traversal in MDS PulseNET and MDS PulseNET Enterprise (high 8.1)
- [CVE-2018-10614](https://insights.sbomify.com/CVE-2018-10614/): XML external entity in LeviStudioU (high 8.8)
- [CVE-2018-10613](https://insights.sbomify.com/CVE-2018-10613/): XML external entity in MDS PulseNET and MDS PulseNET Enterprise (high 7.5)
- [CVE-2018-10612](https://insights.sbomify.com/CVE-2018-10612/): Misconfiguration in 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0 (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/144/