# Vulnerabilities published in 2018


- [CVE-2018-10501](https://insights.sbomify.com/CVE-2018-10501/): Path traversal in Samsung Notes (high 7.0)
- [CVE-2018-10500](https://insights.sbomify.com/CVE-2018-10500/): Privilege escalation in Samsung Galaxy Apps (high 7.0)
- [CVE-2018-1050](https://insights.sbomify.com/CVE-2018-1050/): Null dereference in Samba (medium 4.3)
- [CVE-2018-10499](https://insights.sbomify.com/CVE-2018-10499/): Code injection in Samsung Galaxy Apps (high 7.0)
- [CVE-2018-10498](https://insights.sbomify.com/CVE-2018-10498/): Information disclosure in Samsung Email (medium 5.5)
- [CVE-2018-10497](https://insights.sbomify.com/CVE-2018-10497/): Code injection in Samsung Email (high 7.8)
- [CVE-2018-10496](https://insights.sbomify.com/CVE-2018-10496/): Use after free in Samsung Internet Browser (high 8.8)
- [CVE-2018-10495](https://insights.sbomify.com/CVE-2018-10495/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-10494](https://insights.sbomify.com/CVE-2018-10494/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-10493](https://insights.sbomify.com/CVE-2018-10493/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10492](https://insights.sbomify.com/CVE-2018-10492/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10491](https://insights.sbomify.com/CVE-2018-10491/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-10490](https://insights.sbomify.com/CVE-2018-10490/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-1049](https://insights.sbomify.com/CVE-2018-1049/): Race condition in systemd (medium 5.9)
- [CVE-2018-10489](https://insights.sbomify.com/CVE-2018-10489/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-10488](https://insights.sbomify.com/CVE-2018-10488/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-10487](https://insights.sbomify.com/CVE-2018-10487/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10486](https://insights.sbomify.com/CVE-2018-10486/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10485](https://insights.sbomify.com/CVE-2018-10485/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10484](https://insights.sbomify.com/CVE-2018-10484/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-10483](https://insights.sbomify.com/CVE-2018-10483/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-10482](https://insights.sbomify.com/CVE-2018-10482/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10481](https://insights.sbomify.com/CVE-2018-10481/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10480](https://insights.sbomify.com/CVE-2018-10480/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-1048](https://insights.sbomify.com/CVE-2018-1048/): Improper Limitation of a Pathname to a Restricted Directory in Jboss EAP Undertow (high 7.5)
- [CVE-2018-10479](https://insights.sbomify.com/CVE-2018-10479/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10478](https://insights.sbomify.com/CVE-2018-10478/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10477](https://insights.sbomify.com/CVE-2018-10477/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-10476](https://insights.sbomify.com/CVE-2018-10476/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10475](https://insights.sbomify.com/CVE-2018-10475/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2018-10474](https://insights.sbomify.com/CVE-2018-10474/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-10473](https://insights.sbomify.com/CVE-2018-10473/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2018-10472](https://insights.sbomify.com/CVE-2018-10472/): Information disclosure in debian:debian linux (medium 5.6)
- [CVE-2018-10471](https://insights.sbomify.com/CVE-2018-10471/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2018-10470](https://insights.sbomify.com/CVE-2018-10470/): Security feature bypass in Little Snitch (medium 5.3)
- [CVE-2018-1047](https://insights.sbomify.com/CVE-2018-1047/): Improper Input Validation in org.wildfly:wildfly-undertow (medium 5.5)
- [CVE-2018-10469](https://insights.sbomify.com/CVE-2018-10469/): File upload in b3log:symphony (critical 9.8)
- [CVE-2018-10468](https://insights.sbomify.com/CVE-2018-10468/): Business logic in uetoken:useless ethereum token (high 7.5)
- [CVE-2018-10466](https://insights.sbomify.com/CVE-2018-10466/): SQL injection in zohocorp:manageengine adaudit plus (critical 9.8)
- [CVE-2018-10465](https://insights.sbomify.com/CVE-2018-10465/): Missing authorization in jamf:jamf (high 8.8)
- [CVE-2018-1046](https://insights.sbomify.com/CVE-2018-1046/): Memory corruption in pdns (high 7.0)
- [CVE-2018-1045](https://insights.sbomify.com/CVE-2018-1045/): Moodle XSS Vulnerability (medium 5.4)
- [CVE-2018-1044](https://insights.sbomify.com/CVE-2018-1044/): Moodle Privilege escalation in quiz web services (medium 4.3)
- [CVE-2018-10432](https://insights.sbomify.com/CVE-2018-10432/): Denial of service in pexip:pexip infinity (high 7.5)
- [CVE-2018-10431](https://insights.sbomify.com/CVE-2018-10431/): Command injection in d-link:dir-615 firmware (high 7.2)
- [CVE-2018-10430](https://insights.sbomify.com/CVE-2018-10430/): Cross-site scripting in dilicms:dilicms (medium 4.8)
- [CVE-2018-1043](https://insights.sbomify.com/CVE-2018-1043/): Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames (medium 6.5)
- [CVE-2018-10429](https://insights.sbomify.com/CVE-2018-10429/): Code injection in cosmocms:cosmo (critical 9.8)
- [CVE-2018-10428](https://insights.sbomify.com/CVE-2018-10428/): Cross-site scripting in ilias:ilias (medium 6.1)
- [CVE-2018-10425](https://insights.sbomify.com/CVE-2018-10425/): Security feature bypass in hz-soft:security guard (high 7.8)
- [CVE-2018-10424](https://insights.sbomify.com/CVE-2018-10424/): Information disclosure in 1234n:minicms (low 2.7)
- [CVE-2018-10423](https://insights.sbomify.com/CVE-2018-10423/): Information disclosure in 1234n:minicms (low 2.7)
- [CVE-2018-10422](https://insights.sbomify.com/CVE-2018-10422/): Cross-site scripting in hongcms project:hongcms (medium 4.8)
- [CVE-2018-1042](https://insights.sbomify.com/CVE-2018-1042/): Moodle SSRF Vulnerability (medium 6.5)
- [CVE-2018-1041](https://insights.sbomify.com/CVE-2018-1041/): Denial of service in jboss-remoting (high 7.5)
- [CVE-2018-10408](https://insights.sbomify.com/CVE-2018-10408/): Security feature bypass in virustotal:virustotal (high 7.8)
- [CVE-2018-10407](https://insights.sbomify.com/CVE-2018-10407/): Security feature bypass in carbonblack:carbon black cb (medium 5.5)
- [CVE-2018-10406](https://insights.sbomify.com/CVE-2018-10406/): Yelp OSXCollector Improper Certificate Validation (high 7.8)
- [CVE-2018-10405](https://insights.sbomify.com/CVE-2018-10405/): Security feature bypass in google:santa (high 7.8)
- [CVE-2018-10404](https://insights.sbomify.com/CVE-2018-10404/): Security feature bypass in objective-see:knockknock (high 7.8)
- [CVE-2018-10403](https://insights.sbomify.com/CVE-2018-10403/): Security feature bypass in f-secure:xfence (high 7.8)
- [CVE-2018-1040](https://insights.sbomify.com/CVE-2018-1040/): Denial of service in Windows 10 (medium 5.3)
- [CVE-2018-10393](https://insights.sbomify.com/CVE-2018-10393/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2018-10392](https://insights.sbomify.com/CVE-2018-10392/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2018-10391](https://insights.sbomify.com/CVE-2018-10391/): Cross-site scripting in wuzhicms:wuzhicms (medium 4.8)
- [CVE-2018-1039](https://insights.sbomify.com/CVE-2018-1039/): Security feature bypass in Microsoft .NET Framework (high 7.8)
- [CVE-2018-10389](https://insights.sbomify.com/CVE-2018-10389/): Memory corruption in open tftp server project:open tftp server (critical 9.8)
- [CVE-2018-10388](https://insights.sbomify.com/CVE-2018-10388/): Memory corruption in open tftp server project:open tftp server (critical 9.8)
- [CVE-2018-10387](https://insights.sbomify.com/CVE-2018-10387/): Memory corruption in open tftp server project:open tftp server (critical 9.8)
- [CVE-2018-10383](https://insights.sbomify.com/CVE-2018-10383/): Cross-site scripting in lantronix:securelinx spider firmware (medium 6.1)
- [CVE-2018-10382](https://insights.sbomify.com/CVE-2018-10382/): MODX Revolution 2.6.3 has XSS. (medium 5.4)
- [CVE-2018-10381](https://insights.sbomify.com/CVE-2018-10381/): Privilege escalation in mcafee:tunnelbear (critical 9.8)
- [CVE-2018-10380](https://insights.sbomify.com/CVE-2018-10380/): Other in debian:debian linux (high 7.8)
- [CVE-2018-1038](https://insights.sbomify.com/CVE-2018-1038/): Privilege escalation in Windows (high 7.8)
- [CVE-2018-10379](https://insights.sbomify.com/CVE-2018-10379/): Cross-site scripting in gitlab:gitlab (medium 6.1)
- [CVE-2018-10377](https://insights.sbomify.com/CVE-2018-10377/): Security feature bypass in portswigger:burp suite (medium 5.9)
- [CVE-2018-10376](https://insights.sbomify.com/CVE-2018-10376/): Integer overflow in smartmesh:smartmesh (high 7.5)
- [CVE-2018-10375](https://insights.sbomify.com/CVE-2018-10375/): File upload in dedecms:dedecms (critical 9.8)
- [CVE-2018-10374](https://insights.sbomify.com/CVE-2018-10374/): Cross-site scripting in easycms:easycms (medium 6.1)
- [CVE-2018-10373](https://insights.sbomify.com/CVE-2018-10373/): Null dereference in gnu:binutils (medium 6.5)
- [CVE-2018-10372](https://insights.sbomify.com/CVE-2018-10372/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2018-10371](https://insights.sbomify.com/CVE-2018-10371/): Cross-site scripting in wunderfarm:wf cookie consent (medium 6.1)
- [CVE-2018-1037](https://insights.sbomify.com/CVE-2018-1037/): Information disclosure in Microsoft Visual Studio (medium 4.3)
- [CVE-2018-10369](https://insights.sbomify.com/CVE-2018-10369/): Cross-site scripting in intelbras:win 240 firmware (critical 9.8)
- [CVE-2018-10368](https://insights.sbomify.com/CVE-2018-10368/): Cross-site scripting in wuzhicms:wuzhicms (medium 4.8)
- [CVE-2018-10367](https://insights.sbomify.com/CVE-2018-10367/): Cross-site scripting in wuzhicms:wuzhicms (medium 4.8)
- [CVE-2018-10366](https://insights.sbomify.com/CVE-2018-10366/): User Plugin for October CSS Allows XSS (medium 6.1)
- [CVE-2018-10365](https://insights.sbomify.com/CVE-2018-10365/): Cross-site scripting in threads to link project:threads to link (medium 5.4)
- [CVE-2018-10364](https://insights.sbomify.com/CVE-2018-10364/): Cross-site scripting in bigtreecms:bigtree cms (medium 5.4)
- [CVE-2018-10363](https://insights.sbomify.com/CVE-2018-10363/): Business logic in wpdevart:booking calendar (high 7.5)
- [CVE-2018-10362](https://insights.sbomify.com/CVE-2018-10362/): Auth bypass in phpliteadmin:phpliteadmin (critical 9.8)
- [CVE-2018-10361](https://insights.sbomify.com/CVE-2018-10361/): Privilege escalation in kde:ktexteditor (high 7.8)
- [CVE-2018-10360](https://insights.sbomify.com/CVE-2018-10360/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-1036](https://insights.sbomify.com/CVE-2018-1036/): Privilege escalation in Windows 10 (high 7.0)
- [CVE-2018-10359](https://insights.sbomify.com/CVE-2018-10359/): Memory corruption in Trend Micro OfficeScan (medium 6.3)
- [CVE-2018-10358](https://insights.sbomify.com/CVE-2018-10358/): Memory corruption in Trend Micro OfficeScan (medium 6.3)
- [CVE-2018-10357](https://insights.sbomify.com/CVE-2018-10357/): Path traversal in Trend Micro Endpoint Application Control (high 8.8)
- [CVE-2018-10356](https://insights.sbomify.com/CVE-2018-10356/): SQL injection in Trend Micro Email Encryption Gateway (high 8.8)
- [CVE-2018-10355](https://insights.sbomify.com/CVE-2018-10355/): Weak cryptography in Trend Micro Email Encryption Gateway (high 7.0)
- [CVE-2018-10354](https://insights.sbomify.com/CVE-2018-10354/): Command injection in Trend Micro Email Encryption Gateway (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/146/