# Vulnerabilities published in 2018


- [CVE-2018-10611](https://insights.sbomify.com/CVE-2018-10611/): Auth bypass in MDS PulseNET and MDS PulseNET Enterprise (critical 9.8)
- [CVE-2018-10610](https://insights.sbomify.com/CVE-2018-10610/): Memory corruption in LeviStudioU (high 8.8)
- [CVE-2018-1061](https://insights.sbomify.com/CVE-2018-1061/): Denial of service in python (medium 6.5)
- [CVE-2018-10609](https://insights.sbomify.com/CVE-2018-10609/): Cross-site scripting in TELEM-GW6/GWM (medium 6.1)
- [CVE-2018-10608](https://insights.sbomify.com/CVE-2018-10608/): Denial of service in AcSELerator Architect (high 7.5)
- [CVE-2018-10607](https://insights.sbomify.com/CVE-2018-10607/): Denial of service in TELEM GW6 (high 7.5)
- [CVE-2018-10606](https://insights.sbomify.com/CVE-2018-10606/): Memory corruption in LeviStudioU (high 8.8)
- [CVE-2018-10605](https://insights.sbomify.com/CVE-2018-10605/): Hardcoded credentials in TELEM-GW6/GWM (high 8.8)
- [CVE-2018-10604](https://insights.sbomify.com/CVE-2018-10604/): Misconfiguration in Compass (high 8.8)
- [CVE-2018-10603](https://insights.sbomify.com/CVE-2018-10603/): Auth bypass in TELEM GW6 (critical 9.8)
- [CVE-2018-10602](https://insights.sbomify.com/CVE-2018-10602/): Memory corruption in LeviStudioU (high 8.8)
- [CVE-2018-10601](https://insights.sbomify.com/CVE-2018-10601/): Memory corruption in IntelliVue Patient Monitors, Avalon Fetal/Maternal Monitors (high 8.2)
- [CVE-2018-10600](https://insights.sbomify.com/CVE-2018-10600/): XML external entity in AcSELerator Architect (critical 9.8)
- [CVE-2018-1060](https://insights.sbomify.com/CVE-2018-1060/): Denial of service in python (medium 4.3)
- [CVE-2018-10599](https://insights.sbomify.com/CVE-2018-10599/): Information disclosure in IntelliVue Patient Monitors, Avalon Fetal/Maternal Monitors (medium 5.3)
- [CVE-2018-10598](https://insights.sbomify.com/CVE-2018-10598/): Memory corruption in CNCSoft with ScreenEditor (high 8.1)
- [CVE-2018-10597](https://insights.sbomify.com/CVE-2018-10597/): Memory corruption in IntelliVue Patient Monitors, Avalon Fetal/Maternal Monitors (high 8.3)
- [CVE-2018-10596](https://insights.sbomify.com/CVE-2018-10596/): Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints (high 7.1)
- [CVE-2018-10595](https://insights.sbomify.com/CVE-2018-10595/): SQL injection in Kiestra and InoqulA systems (medium 6.3)
- [CVE-2018-10594](https://insights.sbomify.com/CVE-2018-10594/): Memory corruption in Delta Industrial Automation COMMGR and accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM 5x0, AHSIM 5x1) (critical 9.8)
- [CVE-2018-10593](https://insights.sbomify.com/CVE-2018-10593/): SQL injection in Kiestra and InoqulA systems (medium 5.6)
- [CVE-2018-10592](https://insights.sbomify.com/CVE-2018-10592/): Hardcoded credentials in STARDOM FCJ Controllers (critical 9.8)
- [CVE-2018-10591](https://insights.sbomify.com/CVE-2018-10591/): Cross-site request forgery in WebAccess (medium 6.1)
- [CVE-2018-10590](https://insights.sbomify.com/CVE-2018-10590/): Information disclosure in WebAccess (high 7.5)
- [CVE-2018-1059](https://insights.sbomify.com/CVE-2018-1059/): Information disclosure in DPDK (medium 6.1)
- [CVE-2018-10589](https://insights.sbomify.com/CVE-2018-10589/): Path traversal in WebAccess (critical 9.8)
- [CVE-2018-10587](https://insights.sbomify.com/CVE-2018-10587/): Command injection in netgain-systems:enterprise manager (high 7.2)
- [CVE-2018-10586](https://insights.sbomify.com/CVE-2018-10586/): Cross-site scripting in netgain-systems:enterprise manager (medium 4.8)
- [CVE-2018-10585](https://insights.sbomify.com/CVE-2018-10585/): Denial of service in pexip:pexip infinity (high 7.5)
- [CVE-2018-10583](https://insights.sbomify.com/CVE-2018-10583/): Information disclosure in apache:openoffice (high 7.5)
- [CVE-2018-10581](https://insights.sbomify.com/CVE-2018-10581/): Missing authorization in octopus:octopus deploy (medium 5.4)
- [CVE-2018-10580](https://insights.sbomify.com/CVE-2018-10580/): Cross-site scripting in latest posts on profile project:latest posts on profile (medium 5.4)
- [CVE-2018-1058](https://insights.sbomify.com/CVE-2018-1058/): Privilege escalation in postgresql (high 8.8)
- [CVE-2018-10578](https://insights.sbomify.com/CVE-2018-10578/): Security feature bypass in watchguard:ap100 firmware (critical 9.8)
- [CVE-2018-10577](https://insights.sbomify.com/CVE-2018-10577/): File upload in watchguard:ap100 firmware (high 8.8)
- [CVE-2018-10576](https://insights.sbomify.com/CVE-2018-10576/): Auth bypass in watchguard:ap100 firmware (high 7.8)
- [CVE-2018-10575](https://insights.sbomify.com/CVE-2018-10575/): Hardcoded credentials in watchguard:ap100 firmware (critical 9.8)
- [CVE-2018-10574](https://insights.sbomify.com/CVE-2018-10574/): File upload in bigtreecms:bigtree cms (critical 9.8)
- [CVE-2018-10573](https://insights.sbomify.com/CVE-2018-10573/): Missing authorization in open-emr:openemr (high 8.8)
- [CVE-2018-10572](https://insights.sbomify.com/CVE-2018-10572/): Missing authorization in open-emr:openemr (medium 6.5)
- [CVE-2018-10571](https://insights.sbomify.com/CVE-2018-10571/): Cross-site scripting in open-emr:openemr (medium 6.1)
- [CVE-2018-10570](https://insights.sbomify.com/CVE-2018-10570/): Cross-site scripting in frogcms project:frogcms (medium 4.8)
- [CVE-2018-1057](https://insights.sbomify.com/CVE-2018-1057/): Missing authorization in Samba (high 8.8)
- [CVE-2018-10569](https://insights.sbomify.com/CVE-2018-10569/): Cross-site scripting in edimax:edimax ew-7438rpn v2 firmware (medium 6.1)
- [CVE-2018-10568](https://insights.sbomify.com/CVE-2018-10568/): Cross-site scripting in flexense:disksorter (medium 6.1)
- [CVE-2018-10567](https://insights.sbomify.com/CVE-2018-10567/): Cross-site scripting in flexense:vx search (medium 6.1)
- [CVE-2018-10566](https://insights.sbomify.com/CVE-2018-10566/): Cross-site scripting in flexense:dupscout (medium 6.1)
- [CVE-2018-10565](https://insights.sbomify.com/CVE-2018-10565/): Cross-site scripting in flexense:disksavvy (medium 6.1)
- [CVE-2018-10564](https://insights.sbomify.com/CVE-2018-10564/): Cross-site scripting in flexense:diskpulse (medium 6.1)
- [CVE-2018-10563](https://insights.sbomify.com/CVE-2018-10563/): Cross-site scripting in flexense:syncbreeze (medium 6.1)
- [CVE-2018-10562](https://insights.sbomify.com/CVE-2018-10562/): Dasan GPON Routers Command Injection (critical 9.8, exploited in the wild)
- [CVE-2018-10561](https://insights.sbomify.com/CVE-2018-10561/): Dasan GPON Routers Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2018-1056](https://insights.sbomify.com/CVE-2018-1056/): Memory corruption in advancecomp: (low 3.3)
- [CVE-2018-10554](https://insights.sbomify.com/CVE-2018-10554/): Cross-site scripting in nagios:nagios xi (medium 5.4)
- [CVE-2018-10553](https://insights.sbomify.com/CVE-2018-10553/): Path traversal in nagios:nagios xi (medium 6.5)
- [CVE-2018-10550](https://insights.sbomify.com/CVE-2018-10550/): Privilege escalation in octopus:octopus deploy (high 7.5)
- [CVE-2018-10549](https://insights.sbomify.com/CVE-2018-10549/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2018-10548](https://insights.sbomify.com/CVE-2018-10548/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2018-10547](https://insights.sbomify.com/CVE-2018-10547/): Cross-site scripting in canonical:ubuntu linux (medium 6.1)
- [CVE-2018-10546](https://insights.sbomify.com/CVE-2018-10546/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2018-10545](https://insights.sbomify.com/CVE-2018-10545/): Information disclosure in canonical:ubuntu linux (medium 4.7)
- [CVE-2018-10544](https://insights.sbomify.com/CVE-2018-10544/): Auth bypass in meross:mss110 firmware (critical 9.8)
- [CVE-2018-10540](https://insights.sbomify.com/CVE-2018-10540/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2018-1054](https://insights.sbomify.com/CVE-2018-1054/): Memory corruption in 389-ds-base (high 7.5)
- [CVE-2018-10539](https://insights.sbomify.com/CVE-2018-10539/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2018-10538](https://insights.sbomify.com/CVE-2018-10538/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2018-10537](https://insights.sbomify.com/CVE-2018-10537/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2018-10536](https://insights.sbomify.com/CVE-2018-10536/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2018-10535](https://insights.sbomify.com/CVE-2018-10535/): Null dereference in gnu:binutils (medium 5.5)
- [CVE-2018-10534](https://insights.sbomify.com/CVE-2018-10534/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2018-10532](https://insights.sbomify.com/CVE-2018-10532/): Hardcoded credentials in ee:4gee firmware (high 8.8)
- [CVE-2018-10531](https://insights.sbomify.com/CVE-2018-10531/): Denial of service in americasarmy:proving grounds (high 7.5)
- [CVE-2018-1053](https://insights.sbomify.com/CVE-2018-1053/): Information disclosure in postgresql (high 7.0)
- [CVE-2018-10529](https://insights.sbomify.com/CVE-2018-10529/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2018-10528](https://insights.sbomify.com/CVE-2018-10528/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2018-10527](https://insights.sbomify.com/CVE-2018-10527/): Cross-site scripting in easycms project:easycms (medium 5.4)
- [CVE-2018-10523](https://insights.sbomify.com/CVE-2018-10523/): Information disclosure in cmsmadesimple:cms made simple (medium 5.3)
- [CVE-2018-10522](https://insights.sbomify.com/CVE-2018-10522/): Information disclosure in cmsmadesimple:cms made simple (medium 4.9)
- [CVE-2018-10521](https://insights.sbomify.com/CVE-2018-10521/): File upload in cmsmadesimple:cms made simple (low 2.7)
- [CVE-2018-10520](https://insights.sbomify.com/CVE-2018-10520/): Path traversal in cmsmadesimple:cms made simple (medium 6.5)
- [CVE-2018-1052](https://insights.sbomify.com/CVE-2018-1052/): Information disclosure in postgresql (medium 6.5)
- [CVE-2018-10519](https://insights.sbomify.com/CVE-2018-10519/): Privilege escalation in cmsmadesimple:cms made simple (high 8.8)
- [CVE-2018-10518](https://insights.sbomify.com/CVE-2018-10518/): Path traversal in cmsmadesimple:cms made simple (medium 6.5)
- [CVE-2018-10517](https://insights.sbomify.com/CVE-2018-10517/): Code injection in cmsmadesimple:cms made simple (high 7.2)
- [CVE-2018-10516](https://insights.sbomify.com/CVE-2018-10516/): Information disclosure in cmsmadesimple:cms made simple (medium 6.5)
- [CVE-2018-10515](https://insights.sbomify.com/CVE-2018-10515/): Code injection in cmsmadesimple:cms made simple (high 7.2)
- [CVE-2018-10514](https://insights.sbomify.com/CVE-2018-10514/): Privilege escalation in Trend Micro Security (Consumer) (high 7.8)
- [CVE-2018-10513](https://insights.sbomify.com/CVE-2018-10513/): Deserialization in Trend Micro Security (Consumer) (high 7.8)
- [CVE-2018-10512](https://insights.sbomify.com/CVE-2018-10512/): Other in Trend Micro Control Manager (high 7.5)
- [CVE-2018-10511](https://insights.sbomify.com/CVE-2018-10511/): Server-side request forgery in Trend Micro Control Manager (critical 10.0)
- [CVE-2018-10510](https://insights.sbomify.com/CVE-2018-10510/): Path traversal in Trend Micro Control Manager (critical 9.8)
- [CVE-2018-1051](https://insights.sbomify.com/CVE-2018-1051/): Deserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider (high 8.1)
- [CVE-2018-10509](https://insights.sbomify.com/CVE-2018-10509/): Other in Trend Micro OfficeScan (high 8.8)
- [CVE-2018-10508](https://insights.sbomify.com/CVE-2018-10508/): Privilege escalation in Trend Micro OfficeScan (high 8.8)
- [CVE-2018-10507](https://insights.sbomify.com/CVE-2018-10507/): Security feature bypass in Trend Micro OfficeScan (medium 4.4)
- [CVE-2018-10506](https://insights.sbomify.com/CVE-2018-10506/): Information disclosure in Trend Micro OfficeScan (medium 4.7)
- [CVE-2018-10505](https://insights.sbomify.com/CVE-2018-10505/): Memory corruption in Trend Micro OfficeScan (medium 6.3)
- [CVE-2018-10504](https://insights.sbomify.com/CVE-2018-10504/): Code injection in web-dorado:form maker (high 7.8)
- [CVE-2018-10503](https://insights.sbomify.com/CVE-2018-10503/): Cross-site request forgery in baijiacms project:baijiacms (high 8.8)
- [CVE-2018-10502](https://insights.sbomify.com/CVE-2018-10502/): Privilege escalation in Samsung Galaxy Apps (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/145/