Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 149 of 163.
- CVE-2018-10083 Path traversal in cmsmadesimple:cms made simple
- CVE-2018-10082 Information disclosure in cmsmadesimple:cms made simple
- CVE-2018-10081 Auth bypass in cmsmadesimple:cms made simple
- CVE-2018-10080 Auth bypass in secutech project:ris-11 firmware
- CVE-2018-1008 Memory corruption in Windows 10
- CVE-2018-10079 Misconfiguration in vertiv:watchdog console
- CVE-2018-10078 Cross-site scripting in vertiv:watchdog console
- CVE-2018-10077 XML external entity in vertiv:watchdog console
- CVE-2018-10076 Cross-site scripting in zohocorp:manageengine eventlog analyzer
- CVE-2018-10075 Cross-site scripting in zohocorp:manageengine eventlog analyzer
- CVE-2018-10074 Null dereference in linux:linux kernel
- CVE-2018-10073 Cross-site scripting in joyplus-cms project:joyplus-cms
- CVE-2018-10072 Denial of service in jungo:windriver
- CVE-2018-10071 Denial of service in jungo:windriver
- CVE-2018-10070 Denial of service in mikrotik:router firmware
- CVE-2018-1007 Information disclosure in Microsoft Office
- CVE-2018-10068 Cross-site scripting in jdownloads:jdownloads
- CVE-2018-10066 Security feature bypass in mikrotik:routeros
- CVE-2018-10063 Code injection in convert forms project:convert forms
- CVE-2018-10061 Cross-site scripting in cacti:cacti
- CVE-2018-10060 Cross-site scripting in cacti:cacti
- CVE-2018-10059 Cross-site scripting in cacti:cacti
- CVE-2018-10058 Memory corruption in bfgminer:bfgminer
- CVE-2018-10057 Path traversal in bfgminer:bfgminer
- CVE-2018-10055 Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow
- CVE-2018-10054 Improper Input Validation in Datomic
- CVE-2018-10052 Cross-site scripting in iscripts:supportdesk
- CVE-2018-10051 Cross-site scripting in iscripts:supportdesk
- CVE-2018-10050 SQL injection in iscripts:eswap
- CVE-2018-1005 Cross-site scripting in Microsoft SharePoint
- CVE-2018-10049 Cross-site scripting in iscripts:eswap
- CVE-2018-10048 Cross-site request forgery in iscripts:eswap
- CVE-2018-1004 Memory corruption in Internet Explorer 9
- CVE-2018-10033 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2018-10032 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2018-10031 Cross-site request forgery in cmsmadesimple:cms made simple
- CVE-2018-10030 Cross-site request forgery in cmsmadesimple:cms made simple
- CVE-2018-1003 Memory corruption in Windows 10
- CVE-2018-10029 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2018-10028 Information disclosure in joyplus-cms project:joyplus-cms
- CVE-2018-10027 Code injection in estsoft:alzip
- CVE-2018-10026 Cross-site scripting in yzmcms:yzmcms
- CVE-2018-10024 Information disclosure in ubiquoss:vp5208a firmware
- CVE-2018-10023 Cross-site scripting in catfish-cms:catfish cms
- CVE-2018-1002209 Path traversal in quazip
- CVE-2018-1002208 Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib
- CVE-2018-1002207 Arbitrary File Write via Archive Extraction in mholt/archiver
- CVE-2018-1002206 Directory Traversal in SharpCompress
- CVE-2018-1002205 DotNetZip Zip-Slip Vulnerability
- CVE-2018-1002204 Arbitrary File Write in adm-zip
- CVE-2018-1002203 Arbitrary File Write via Archive Extraction in unzipper
- CVE-2018-1002202 Improper Limitation of a Pathname to a Restricted Directory in Zip4j
- CVE-2018-1002201 Improper Limitation of a Pathname to a Restricted Directory in zt-zip
- CVE-2018-1002200 Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver
- CVE-2018-1002150 Koji hub call does not perform correct access checks
- CVE-2018-1002105 Privilege Escalation in Kubernetes
- CVE-2018-1002104 Kubernetes ingress exposes sensitive information
- CVE-2018-1002103 Minikube RCE via DNS Rebinding
- CVE-2018-1002102 Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints
- CVE-2018-1002101 Kubernetes Arbitrary Command Injection
- CVE-2018-1002100 Kubernetes arbitrary file overwrite
- CVE-2018-10021 Denial of service in linux:linux kernel
- CVE-2018-1002009 Cross-site scripting in Arigato Autoresponder and Newsletter
- CVE-2018-1002008 Cross-site scripting in Arigato Autoresponder and Newsletter
- CVE-2018-1002007 Cross-site scripting in Arigato Autoresponder and Newsletter
- CVE-2018-1002006 Cross-site scripting in Arigato Autoresponder and Newsletter
- CVE-2018-1002005 Cross-site scripting in Arigato Autoresponder and Newsletter
- CVE-2018-1002004 Cross-site scripting in Arigato Autoresponder and Newsletter
- CVE-2018-1002003 Cross-site scripting in Arigato Autoresponder and Newsletter
- CVE-2018-1002002 Cross-site scripting in Arigato Autoresponder and Newsletter
- CVE-2018-1002001 Cross-site scripting in Arigato Autoresponder and Newsletter
- CVE-2018-1002000 SQL injection in Arigato Autoresponder and Newsletter
- CVE-2018-10018 Memory corruption in gdata-software:total security
- CVE-2018-10017 Memory corruption in openmpt:libopenmpt
- CVE-2018-10016 Denial of service in nasm:netwide assembler
- CVE-2018-1001 Memory corruption in Internet Explorer 10
- CVE-2018-1000998 Cross-site scripting in freebsd:cvsweb
- CVE-2018-1000997 Improper Limitation of a Pathname to a Restricted Directory in Jenkins
- CVE-2018-1000893 Denial of service in bitcoinsv:bitcoin sv
- CVE-2018-1000892 Denial of service in bitcoinsv:bitcoin sv
- CVE-2018-1000891 Denial of service in bitcoinsv:bitcoin sv
- CVE-2018-1000890 SQL injection in frontaccounting:frontaccounting
- CVE-2018-1000889 XML external entity in logisim-evolution project:logisim-evolution
- CVE-2018-1000888 Archive_Tar contains Potential RCE if filename starts with phar://
- CVE-2018-1000887 Cross-site scripting in peel:peel shopping
- CVE-2018-1000886 Memory corruption in nasm:netwide assembler
- CVE-2018-1000885 Command injection in phkp project:phkp
- CVE-2018-1000884 Information disclosure in vestacp:vesta control panel
- CVE-2018-1000883 Header Injection
- CVE-2018-1000882 Path traversal in webidsupport:webid
- CVE-2018-1000881 Code injection in traccar:server
- CVE-2018-1000880 Denial of service in canonical:ubuntu linux
- CVE-2018-1000879 Null dereference in fedoraproject:fedora
- CVE-2018-1000878 Use after free in canonical:ubuntu linux
- CVE-2018-1000877 Memory corruption in canonical:ubuntu linux
- CVE-2018-1000876 Integer overflow in canonical:ubuntu linux
- CVE-2018-1000875 Auth bypass in universityofcalifornia:boinc server
- CVE-2018-1000874 Cross-site scripting in cebe:markdown
- CVE-2018-1000873 Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353
- CVE-2018-1000872 PyKMIP Denial of service vulnerability