Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 15 of 163.
- CVE-2018-7993 Use after free in HUAWEI Mate 10
- CVE-2018-7992 Memory corruption in MediaPad M3; Mate 9 Pro; P10 Plus
- CVE-2018-7991 Security feature bypass in Mate10
- CVE-2018-7990 Security feature bypass in Mate10 Pro
- CVE-2018-7989 Auth bypass in Mate 10 pro
- CVE-2018-7988 Auth bypass in Huawei nova 2 Plus, Huawei Mate9 Pro
- CVE-2018-7987 Memory corruption in Huawei P20
- CVE-2018-7977 Information disclosure in FusionSphere OpenStack
- CVE-2018-7976 Cross-site scripting in eSpace Desktop
- CVE-2018-7961 Information disclosure in Emily-AL00A
- CVE-2018-7960 Information disclosure in eSpace 7950
- CVE-2018-7959 Weak cryptography in eSpace 7950
- CVE-2018-7958 Security feature bypass in eSpace 7950
- CVE-2018-7957 Missing authorization in Victoria-AL00
- CVE-2018-7956 Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20.
- CVE-2018-7951 Code injection in 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
- CVE-2018-7950 Code injection in 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
- CVE-2018-7949 Privilege escalation in 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
- CVE-2018-7947 Auth bypass in Emily-AL00A
- CVE-2018-7946 Information disclosure in Huawei Honor 7A, Huawei Honor 9 Lite
- CVE-2018-7944 Security feature bypass in Emily-AL00A
- CVE-2018-7943 Auth bypass in 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
- CVE-2018-7942 Auth bypass in 1288H V5; 2288H V5; 2488 V5; CH121 V3; CH121L V3; CH121L V5; CH121 V5; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
- CVE-2018-7941 Auth bypass in iBMC
- CVE-2018-7940 Auth bypass in HUAWEI Mate 10, HUAWEI Mate 10 Pro
- CVE-2018-7939 Security feature bypass in G9 Lite, Honor 5A, Honor 6X, Honor 8
- CVE-2018-7938 Information disclosure in P10
- CVE-2018-7937 Security feature bypass in HiRouter-CD20, WS5200-10
- CVE-2018-7936 Security feature bypass in Mate 10 Pro
- CVE-2018-7935 Denial of service in E5573Cs-322
- CVE-2018-7934 Denial of service in Mate 10 Pro
- CVE-2018-7933 Path traversal in HiRouter-CD20, WS5200
- CVE-2018-7932 Cross-site scripting in n/a
- CVE-2018-7931 Security feature bypass in AppGallery
- CVE-2018-7930 Information disclosure in Mate 9
- CVE-2018-7929 Auth bypass in Mate RS
- CVE-2018-7928 Security feature bypass in MyCloud
- CVE-2018-7926 Missing authorization in Huawei Watch 2
- CVE-2018-7925 Auth bypass in Emily-AL00A
- CVE-2018-7924 Information disclosure in Anne-AL00
- CVE-2018-7923 Code injection in ALP-L09
- CVE-2018-7922 Other in ALP-L09
- CVE-2018-7921 Information disclosure in B315s-22
- CVE-2018-7920 Denial of service in AR1200, AR160, AR200, AR2200, AR3200
- CVE-2018-7911 Security feature bypass in ALP-AL00B, ALP-AL00B-RSC, BLA-TL00B, Charlotte-AL00A, Emily-AL00A,
- CVE-2018-7910 Auth bypass in ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C
- CVE-2018-7907 Information disclosure in Agassi-L09,Agassi-W09,Baggio2-U01A,Bond-AL00C,Bond-AL10B,Bond-TL10B,Bond-TL10C,Haydn-L1JB,Kobe-L09A,Kobe-L09AHN,Kobe-W09C,LelandP-L22C,LelandP-L22D,Rhone-AL00,Selina-L02,Stanford-L09S,Toronto-AL00,Toronto-AL00A,Toronto-TL10
- CVE-2018-7906 Denial of service in Leland-AL00, Leland-AL00A
- CVE-2018-7904 Code injection in 1288H V5; 2288H V5
- CVE-2018-7903 Code injection in 1288H V5; 2288H V5
- CVE-2018-7902 Code injection in 1288H V5; 2288H V5
- CVE-2018-7901 Security feature bypass in ALP-AL00B, BLA-AL00B
- CVE-2018-7900 Information disclosure in some HG products
- CVE-2018-7899 Use after free in Berkeley-AL20, Berkeley-BD
- CVE-2018-7894 Cross-site scripting in n/a
- CVE-2018-7893 Cross-site scripting in n/a
- CVE-2018-7891 Deserialization in n/a
- CVE-2018-7890 Command injection in n/a
- CVE-2018-7889 Deserialization in n/a
- CVE-2018-7886 Memory corruption in n/a
- CVE-2018-7884 Privilege escalation in n/a
- CVE-2018-7877 Memory corruption in n/a
- CVE-2018-7876 Denial of service in n/a
- CVE-2018-7875 Memory corruption in n/a
- CVE-2018-7874 Null dereference in n/a
- CVE-2018-7873 Memory corruption in n/a
- CVE-2018-7872 Null dereference in n/a
- CVE-2018-7871 Memory corruption in n/a
- CVE-2018-7870 Null dereference in n/a
- CVE-2018-7869 Denial of service in n/a
- CVE-2018-7868 Memory corruption in n/a
- CVE-2018-7867 Memory corruption in n/a
- CVE-2018-7866 Null dereference in n/a
- CVE-2018-7859 Cross-site scripting in n/a
- CVE-2018-7858 Denial of service in n/a
- CVE-2018-7857 Denial of service in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7856 Denial of service in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7855 Denial of service in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7854 Denial of service in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7853 Denial of service in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7852 Denial of service in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7851 Denial of service in Modicon M580 with firmware prior to V2.50 Modicon M340 with firmware prior to V3.01 BMxCRA312xx with firmware prior to V2.40 All firmware versions of Modicon Premium and 140CRA312xxx
- CVE-2018-7850 Other in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7849 Denial of service in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7848 Information disclosure in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7847 Missing authorization in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7846 Auth bypass in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7845 Information disclosure in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7844 Information disclosure in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7843 Denial of service in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7842 Auth bypass in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CVE-2018-7841 Schneider Electric U.motion Builder SQL Injection
- CVE-2018-7840 Other in VideoXpert OpsCenter versions prior to 3.1
- CVE-2018-7839 Weak cryptography in IIoT Monitor 3.1.38
- CVE-2018-7838 Denial of service in Modicon M580 CPU - BMEP582040 all versions before V2.90 and Modicon Ethernet Module BMENOC0301 all versions before V2.16
- CVE-2018-7837 XML external entity in IIoT Monitor 3.1.38
- CVE-2018-7836 File upload in IIoT Monitor 3.1.38
- CVE-2018-7835 Path traversal in IIoT Monitor 3.1.38
- CVE-2018-7834 Cross-site scripting in ConneXium Gateway, TSXETG100 - all versions
- CVE-2018-7833 Denial of service in Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200