# Vulnerabilities published in 2018


- [CVE-2018-10207](https://insights.sbomify.com/CVE-2018-10207/): Missing authorization in vaultize:enterprise file sharing (medium 5.3)
- [CVE-2018-10206](https://insights.sbomify.com/CVE-2018-10206/): Cross-site scripting in vaultize:enterprise file sharing (medium 5.4)
- [CVE-2018-10205](https://insights.sbomify.com/CVE-2018-10205/): Denial of service in hyper:hyperstart (medium 5.3)
- [CVE-2018-10204](https://insights.sbomify.com/CVE-2018-10204/): Privilege escalation in purevpn:purevpn (high 8.8)
- [CVE-2018-10201](https://insights.sbomify.com/CVE-2018-10201/): Path traversal in ncomputing:vspace pro (high 7.5)
- [CVE-2018-1020](https://insights.sbomify.com/CVE-2018-1020/): Memory corruption in Internet Explorer 10 (high 7.5)
- [CVE-2018-10199](https://insights.sbomify.com/CVE-2018-10199/): Use after free in mruby:mruby (critical 9.8)
- [CVE-2018-10198](https://insights.sbomify.com/CVE-2018-10198/): Information disclosure in otrs:otrs (medium 4.3)
- [CVE-2018-10197](https://insights.sbomify.com/CVE-2018-10197/): SQL injection in elo:access manager (critical 9.8)
- [CVE-2018-10196](https://insights.sbomify.com/CVE-2018-10196/): Null dereference in canonical:ubuntu linux (medium 5.5)
- [CVE-2018-10195](https://insights.sbomify.com/CVE-2018-10195/): Integer overflow in debian:debian linux (high 7.1)
- [CVE-2018-10194](https://insights.sbomify.com/CVE-2018-10194/): Integer overflow in artifex:ghostscript (high 7.8)
- [CVE-2018-10193](https://insights.sbomify.com/CVE-2018-10193/): Denial of service in logmein:lastpass (high 7.5)
- [CVE-2018-10192](https://insights.sbomify.com/CVE-2018-10192/): Privilege escalation in ipvanish:ipvanish (critical 9.8)
- [CVE-2018-10191](https://insights.sbomify.com/CVE-2018-10191/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2018-10190](https://insights.sbomify.com/CVE-2018-10190/): Privilege escalation in londontrustmedia:private internet access (high 7.8)
- [CVE-2018-1019](https://insights.sbomify.com/CVE-2018-1019/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-10189](https://insights.sbomify.com/CVE-2018-10189/): Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID (high 7.5)
- [CVE-2018-10188](https://insights.sbomify.com/CVE-2018-10188/): phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution (high 8.8)
- [CVE-2018-10187](https://insights.sbomify.com/CVE-2018-10187/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-10186](https://insights.sbomify.com/CVE-2018-10186/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-10185](https://insights.sbomify.com/CVE-2018-10185/): Cross-site request forgery in tuzicms:tuzicms (high 8.8)
- [CVE-2018-10184](https://insights.sbomify.com/CVE-2018-10184/): Memory corruption in haproxy:haproxy (high 7.5)
- [CVE-2018-10183](https://insights.sbomify.com/CVE-2018-10183/): Cross-site scripting in bigtreecms:bigtree cms (medium 6.1)
- [CVE-2018-1018](https://insights.sbomify.com/CVE-2018-1018/): Memory corruption in Internet Explorer 11 (high 7.5)
- [CVE-2018-10178](https://insights.sbomify.com/CVE-2018-10178/): Information disclosure in iac:fromdoctopdf (medium 5.3)
- [CVE-2018-10177](https://insights.sbomify.com/CVE-2018-10177/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-10176](https://insights.sbomify.com/CVE-2018-10176/): Path traversal in digitalguardian:management console (medium 6.5)
- [CVE-2018-10175](https://insights.sbomify.com/CVE-2018-10175/): XML external entity in digitalguardian:management console (medium 6.5)
- [CVE-2018-10174](https://insights.sbomify.com/CVE-2018-10174/): Server-side request forgery in digitalguardian:management console (medium 6.5)
- [CVE-2018-10173](https://insights.sbomify.com/CVE-2018-10173/): File upload in digitalguardian:management console (high 8.8)
- [CVE-2018-10172](https://insights.sbomify.com/CVE-2018-10172/): Privilege escalation in 7-zip:7-zip (high 8.8)
- [CVE-2018-10171](https://insights.sbomify.com/CVE-2018-10171/): Privilege escalation in kromtech:mackeeper (critical 9.8)
- [CVE-2018-10170](https://insights.sbomify.com/CVE-2018-10170/): Privilege escalation in nordvpn:nordvpn (critical 9.8)
- [CVE-2018-10169](https://insights.sbomify.com/CVE-2018-10169/): Privilege escalation in protonmail:protonvpn (critical 9.8)
- [CVE-2018-10168](https://insights.sbomify.com/CVE-2018-10168/): Privilege escalation in tp-link:eap controller (high 8.8)
- [CVE-2018-10167](https://insights.sbomify.com/CVE-2018-10167/): Hardcoded credentials in tp-link:eap controller (high 7.5)
- [CVE-2018-10166](https://insights.sbomify.com/CVE-2018-10166/): Cross-site request forgery in tp-link:eap controller (high 8.8)
- [CVE-2018-10165](https://insights.sbomify.com/CVE-2018-10165/): Cross-site scripting in tp-link:eap controller (medium 5.4)
- [CVE-2018-10164](https://insights.sbomify.com/CVE-2018-10164/): Cross-site scripting in tp-link:eap controller (medium 5.4)
- [CVE-2018-1016](https://insights.sbomify.com/CVE-2018-1016/): Memory corruption in microsoft:windows 10 (high 8.8)
- [CVE-2018-1015](https://insights.sbomify.com/CVE-2018-1015/): Memory corruption in Windows 10 (high 8.8)
- [CVE-2018-10143](https://insights.sbomify.com/CVE-2018-10143/): Privilege escalation in Palo Alto Networks Expedition (critical 9.8)
- [CVE-2018-10142](https://insights.sbomify.com/CVE-2018-10142/): Information disclosure in Palo Alto Networks Expedition (high 7.5)
- [CVE-2018-10141](https://insights.sbomify.com/CVE-2018-10141/): Cross-site scripting in Palo Alto Networks (medium 6.1)
- [CVE-2018-10140](https://insights.sbomify.com/CVE-2018-10140/): Denial of service in PAN-OS (medium 4.3)
- [CVE-2018-1014](https://insights.sbomify.com/CVE-2018-1014/): Cross-site scripting in Microsoft SharePoint (medium 5.4)
- [CVE-2018-10139](https://insights.sbomify.com/CVE-2018-10139/): Cross-site scripting in PAN-OS (medium 6.1)
- [CVE-2018-10138](https://insights.sbomify.com/CVE-2018-10138/): Cross-site scripting in catalooksupport:.netstore (medium 6.1)
- [CVE-2018-10137](https://insights.sbomify.com/CVE-2018-10137/): Cross-site request forgery in iscripts:uberforx (high 8.8)
- [CVE-2018-10136](https://insights.sbomify.com/CVE-2018-10136/): Cross-site scripting in iscripts:uberforx (medium 6.1)
- [CVE-2018-10135](https://insights.sbomify.com/CVE-2018-10135/): Cross-site scripting in iscripts:eswap (medium 6.1)
- [CVE-2018-10133](https://insights.sbomify.com/CVE-2018-10133/): Code injection in pbootcms:pbootcms (critical 9.8)
- [CVE-2018-10132](https://insights.sbomify.com/CVE-2018-10132/): Cross-site request forgery in pbootcms:pbootcms (high 8.8)
- [CVE-2018-1013](https://insights.sbomify.com/CVE-2018-1013/): Memory corruption in Windows 10 (high 8.8)
- [CVE-2018-10128](https://insights.sbomify.com/CVE-2018-10128/): Cross-site scripting in xyhcms project:xyhcms (medium 6.1)
- [CVE-2018-10127](https://insights.sbomify.com/CVE-2018-10127/): Cross-site request forgery in xyhcms project:xyhcms (high 8.8)
- [CVE-2018-10126](https://insights.sbomify.com/CVE-2018-10126/): Null dereference in libtiff:libtiff (medium 6.5)
- [CVE-2018-10125](https://insights.sbomify.com/CVE-2018-10125/): Cross-site Scripting in Contao (medium 6.1)
- [CVE-2018-10124](https://insights.sbomify.com/CVE-2018-10124/): Integer overflow in canonical:ubuntu linux (medium 5.5)
- [CVE-2018-10123](https://insights.sbomify.com/CVE-2018-10123/): Path traversal in intenogroup:iopsys firmware (high 8.8)
- [CVE-2018-10122](https://insights.sbomify.com/CVE-2018-10122/): Path traversal in chanzhi:chanzhi (high 7.5)
- [CVE-2018-10121](https://insights.sbomify.com/CVE-2018-10121/): Cross-site scripting in monstra:monstra (medium 4.8)
- [CVE-2018-10120](https://insights.sbomify.com/CVE-2018-10120/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2018-1012](https://insights.sbomify.com/CVE-2018-1012/): Memory corruption in Windows 10 (high 8.8)
- [CVE-2018-10119](https://insights.sbomify.com/CVE-2018-10119/): Use after free in canonical:ubuntu linux (high 7.8)
- [CVE-2018-10118](https://insights.sbomify.com/CVE-2018-10118/): Cross-site scripting in monstra:monstra (medium 4.8)
- [CVE-2018-10117](https://insights.sbomify.com/CVE-2018-10117/): Cross-site request forgery in icmsdev:icms (high 8.8)
- [CVE-2018-10115](https://insights.sbomify.com/CVE-2018-10115/): Memory corruption in 7-zip:7-zip (high 7.8)
- [CVE-2018-10114](https://insights.sbomify.com/CVE-2018-10114/): Memory corruption in gegl:gegl (high 8.8)
- [CVE-2018-10113](https://insights.sbomify.com/CVE-2018-10113/): Denial of service in gegl:generic graphics library (high 7.5)
- [CVE-2018-10112](https://insights.sbomify.com/CVE-2018-10112/): Memory corruption in gegl:gegl (high 8.8)
- [CVE-2018-10111](https://insights.sbomify.com/CVE-2018-10111/): Denial of service in gegl:gegl (high 7.5)
- [CVE-2018-10110](https://insights.sbomify.com/CVE-2018-10110/): Cross-site scripting in d-link:dir-615 t1 firmware (medium 4.8)
- [CVE-2018-1011](https://insights.sbomify.com/CVE-2018-1011/): Memory corruption in Microsoft Excel (high 7.8)
- [CVE-2018-10109](https://insights.sbomify.com/CVE-2018-10109/): Cross-site scripting in monstra:monstra (medium 4.8)
- [CVE-2018-10108](https://insights.sbomify.com/CVE-2018-10108/): Cross-site scripting in dlink:dir-815 firmware (medium 6.1)
- [CVE-2018-10107](https://insights.sbomify.com/CVE-2018-10107/): Cross-site scripting in dlink:dir-815 firmware (medium 6.1)
- [CVE-2018-10106](https://insights.sbomify.com/CVE-2018-10106/): Information disclosure in dlink:dir-815 firmware (critical 9.8)
- [CVE-2018-10105](https://insights.sbomify.com/CVE-2018-10105/): Other in tcpdump:tcpdump (critical 9.8)
- [CVE-2018-10103](https://insights.sbomify.com/CVE-2018-10103/): Other in tcpdump:tcpdump (critical 9.8)
- [CVE-2018-10102](https://insights.sbomify.com/CVE-2018-10102/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2018-10101](https://insights.sbomify.com/CVE-2018-10101/): Open redirect in debian:debian linux (medium 6.1)
- [CVE-2018-10100](https://insights.sbomify.com/CVE-2018-10100/): Open redirect in debian:debian linux (medium 6.1)
- [CVE-2018-1010](https://insights.sbomify.com/CVE-2018-1010/): Memory corruption in microsoft:windows 10 (high 8.8)
- [CVE-2018-10099](https://insights.sbomify.com/CVE-2018-10099/): Cross-site request forgery in google:monorail (medium 5.3)
- [CVE-2018-10098](https://insights.sbomify.com/CVE-2018-10098/): Memory corruption in escanav:escan internet security suite (medium 5.5)
- [CVE-2018-10097](https://insights.sbomify.com/CVE-2018-10097/): Cross-site scripting in smartscriptsolutions:domain trader (medium 6.1)
- [CVE-2018-10096](https://insights.sbomify.com/CVE-2018-10096/): Cross-site scripting in joyplus-cms project:joyplus-cms (medium 4.8)
- [CVE-2018-10095](https://insights.sbomify.com/CVE-2018-10095/): Dolibarr Cross-site scripting (XSS) vulnerability (medium 6.1)
- [CVE-2018-10094](https://insights.sbomify.com/CVE-2018-10094/): Dolibarr SQL injection vulnerability (critical 9.8)
- [CVE-2018-10093](https://insights.sbomify.com/CVE-2018-10093/): Missing authorization in audiocodes:420hd ip phone firmware (high 8.8)
- [CVE-2018-10092](https://insights.sbomify.com/CVE-2018-10092/): Dolibarr arbitrary commands execution (high 8.0)
- [CVE-2018-10091](https://insights.sbomify.com/CVE-2018-10091/): Cross-site scripting in audiocodes:420hd ip phone firmware (medium 4.8)
- [CVE-2018-1009](https://insights.sbomify.com/CVE-2018-1009/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2018-10088](https://insights.sbomify.com/CVE-2018-10088/): Memory corruption in xiongmaitech:uc-httpd (critical 9.8)
- [CVE-2018-10087](https://insights.sbomify.com/CVE-2018-10087/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2018-10086](https://insights.sbomify.com/CVE-2018-10086/): Code injection in cmsmadesimple:cms made simple (high 7.2)
- [CVE-2018-10085](https://insights.sbomify.com/CVE-2018-10085/): Deserialization in cmsmadesimple:cms made simple (critical 9.8)
- [CVE-2018-10084](https://insights.sbomify.com/CVE-2018-10084/): Weak cryptography in cmsmadesimple:cms made simple (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/148/