Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 148 of 163.
- CVE-2018-10207 Missing authorization in vaultize:enterprise file sharing
- CVE-2018-10206 Cross-site scripting in vaultize:enterprise file sharing
- CVE-2018-10205 Denial of service in hyper:hyperstart
- CVE-2018-10204 Privilege escalation in purevpn:purevpn
- CVE-2018-10201 Path traversal in ncomputing:vspace pro
- CVE-2018-1020 Memory corruption in Internet Explorer 10
- CVE-2018-10199 Use after free in mruby:mruby
- CVE-2018-10198 Information disclosure in otrs:otrs
- CVE-2018-10197 SQL injection in elo:access manager
- CVE-2018-10196 Null dereference in canonical:ubuntu linux
- CVE-2018-10195 Integer overflow in debian:debian linux
- CVE-2018-10194 Integer overflow in artifex:ghostscript
- CVE-2018-10193 Denial of service in logmein:lastpass
- CVE-2018-10192 Privilege escalation in ipvanish:ipvanish
- CVE-2018-10191 Integer overflow in debian:debian linux
- CVE-2018-10190 Privilege escalation in londontrustmedia:private internet access
- CVE-2018-1019 ChakraCore RCE Vulnerability
- CVE-2018-10189 Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
- CVE-2018-10188 phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution
- CVE-2018-10187 Memory corruption in radare:radare2
- CVE-2018-10186 Memory corruption in radare:radare2
- CVE-2018-10185 Cross-site request forgery in tuzicms:tuzicms
- CVE-2018-10184 Memory corruption in haproxy:haproxy
- CVE-2018-10183 Cross-site scripting in bigtreecms:bigtree cms
- CVE-2018-1018 Memory corruption in Internet Explorer 11
- CVE-2018-10178 Information disclosure in iac:fromdoctopdf
- CVE-2018-10177 Denial of service in canonical:ubuntu linux
- CVE-2018-10176 Path traversal in digitalguardian:management console
- CVE-2018-10175 XML external entity in digitalguardian:management console
- CVE-2018-10174 Server-side request forgery in digitalguardian:management console
- CVE-2018-10173 File upload in digitalguardian:management console
- CVE-2018-10172 Privilege escalation in 7-zip:7-zip
- CVE-2018-10171 Privilege escalation in kromtech:mackeeper
- CVE-2018-10170 Privilege escalation in nordvpn:nordvpn
- CVE-2018-10169 Privilege escalation in protonmail:protonvpn
- CVE-2018-10168 Privilege escalation in tp-link:eap controller
- CVE-2018-10167 Hardcoded credentials in tp-link:eap controller
- CVE-2018-10166 Cross-site request forgery in tp-link:eap controller
- CVE-2018-10165 Cross-site scripting in tp-link:eap controller
- CVE-2018-10164 Cross-site scripting in tp-link:eap controller
- CVE-2018-1016 Memory corruption in microsoft:windows 10
- CVE-2018-1015 Memory corruption in Windows 10
- CVE-2018-10143 Privilege escalation in Palo Alto Networks Expedition
- CVE-2018-10142 Information disclosure in Palo Alto Networks Expedition
- CVE-2018-10141 Cross-site scripting in Palo Alto Networks
- CVE-2018-10140 Denial of service in PAN-OS
- CVE-2018-1014 Cross-site scripting in Microsoft SharePoint
- CVE-2018-10139 Cross-site scripting in PAN-OS
- CVE-2018-10138 Cross-site scripting in catalooksupport:.netstore
- CVE-2018-10137 Cross-site request forgery in iscripts:uberforx
- CVE-2018-10136 Cross-site scripting in iscripts:uberforx
- CVE-2018-10135 Cross-site scripting in iscripts:eswap
- CVE-2018-10133 Code injection in pbootcms:pbootcms
- CVE-2018-10132 Cross-site request forgery in pbootcms:pbootcms
- CVE-2018-1013 Memory corruption in Windows 10
- CVE-2018-10128 Cross-site scripting in xyhcms project:xyhcms
- CVE-2018-10127 Cross-site request forgery in xyhcms project:xyhcms
- CVE-2018-10126 Null dereference in libtiff:libtiff
- CVE-2018-10125 Cross-site Scripting in Contao
- CVE-2018-10124 Integer overflow in canonical:ubuntu linux
- CVE-2018-10123 Path traversal in intenogroup:iopsys firmware
- CVE-2018-10122 Path traversal in chanzhi:chanzhi
- CVE-2018-10121 Cross-site scripting in monstra:monstra
- CVE-2018-10120 Memory corruption in canonical:ubuntu linux
- CVE-2018-1012 Memory corruption in Windows 10
- CVE-2018-10119 Use after free in canonical:ubuntu linux
- CVE-2018-10118 Cross-site scripting in monstra:monstra
- CVE-2018-10117 Cross-site request forgery in icmsdev:icms
- CVE-2018-10115 Memory corruption in 7-zip:7-zip
- CVE-2018-10114 Memory corruption in gegl:gegl
- CVE-2018-10113 Denial of service in gegl:generic graphics library
- CVE-2018-10112 Memory corruption in gegl:gegl
- CVE-2018-10111 Denial of service in gegl:gegl
- CVE-2018-10110 Cross-site scripting in d-link:dir-615 t1 firmware
- CVE-2018-1011 Memory corruption in Microsoft Excel
- CVE-2018-10109 Cross-site scripting in monstra:monstra
- CVE-2018-10108 Cross-site scripting in dlink:dir-815 firmware
- CVE-2018-10107 Cross-site scripting in dlink:dir-815 firmware
- CVE-2018-10106 Information disclosure in dlink:dir-815 firmware
- CVE-2018-10105 Other in tcpdump:tcpdump
- CVE-2018-10103 Other in tcpdump:tcpdump
- CVE-2018-10102 Cross-site scripting in debian:debian linux
- CVE-2018-10101 Open redirect in debian:debian linux
- CVE-2018-10100 Open redirect in debian:debian linux
- CVE-2018-1010 Memory corruption in microsoft:windows 10
- CVE-2018-10099 Cross-site request forgery in google:monorail
- CVE-2018-10098 Memory corruption in escanav:escan internet security suite
- CVE-2018-10097 Cross-site scripting in smartscriptsolutions:domain trader
- CVE-2018-10096 Cross-site scripting in joyplus-cms project:joyplus-cms
- CVE-2018-10095 Dolibarr Cross-site scripting (XSS) vulnerability
- CVE-2018-10094 Dolibarr SQL injection vulnerability
- CVE-2018-10093 Missing authorization in audiocodes:420hd ip phone firmware
- CVE-2018-10092 Dolibarr arbitrary commands execution
- CVE-2018-10091 Cross-site scripting in audiocodes:420hd ip phone firmware
- CVE-2018-1009 Privilege escalation in Windows 10
- CVE-2018-10088 Memory corruption in xiongmaitech:uc-httpd
- CVE-2018-10087 Denial of service in canonical:ubuntu linux
- CVE-2018-10086 Code injection in cmsmadesimple:cms made simple
- CVE-2018-10085 Deserialization in cmsmadesimple:cms made simple
- CVE-2018-10084 Weak cryptography in cmsmadesimple:cms made simple