Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 150 of 163.
- CVE-2018-1000871 SQL injection in digitaldruid:hoteldruid
- CVE-2018-1000870 Cross-site scripting in phpipam:phpipam
- CVE-2018-1000869 SQL injection in phpipam:phpipam
- CVE-2018-1000868 Cross-site scripting in webidsupport:webid
- CVE-2018-1000867 SQL injection in webidsupport:webid
- CVE-2018-1000866 Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass
- CVE-2018-1000865 Improper Privilege Management in Jenkins
- CVE-2018-1000864 Loop with Unreachable Exit Condition in Jenkins
- CVE-2018-1000863 Improper Limitation of a Pathname to a Restricted Directory in Jenkins
- CVE-2018-1000862 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
- CVE-2018-1000861 Jenkins Stapler Web Framework Deserialization of Untrusted Data
- CVE-2018-1000860 Cross-site scripting in phpipam:phpipam
- CVE-2018-1000858 Cross-site request forgery in canonical:ubuntu linux
- CVE-2018-1000857 Path traversal in open-systems:log-user-session
- CVE-2018-1000856 Cross-site scripting in domainmod:domainmod
- CVE-2018-1000855 Cross Site Scripting (XSS) vulnerability in easymon
- CVE-2018-1000854 Remote Code Execution in esigate-core
- CVE-2018-1000852 Memory corruption in canonical:ubuntu linux
- CVE-2018-1000851 Information disclosure in copay:copay bitcoin wallet
- CVE-2018-1000850 Directory Traversal vulnerability in Square Retrofit
- CVE-2018-1000849 Path traversal in alpinelinux:alpine linux
- CVE-2018-1000848 Cross-site scripting in wampserver:wampserver
- CVE-2018-1000847 Cross-site scripting in freshdns project:freshdns
- CVE-2018-1000846 Cross-site request forgery in freshdns project:freshdns
- CVE-2018-1000844 XML External Entity (XXE) vulnerability in Square Retrofit
- CVE-2018-1000843 Cross-Site Request Forgery (CSRF) in Luigi
- CVE-2018-1000842 Fat Free CRM vulnerable to Cross-site Scripting
- CVE-2018-1000841 Cross-site scripting in zend:zendto
- CVE-2018-1000840 XML external entity in processing:processing
- CVE-2018-1000839 File upload in librehealth:librehealth ehr
- CVE-2018-1000838 XML external entity in sleuthkit:autopsy
- CVE-2018-1000837 XML external entity in obeo:uml designer
- CVE-2018-1000836 XML External Entity (XXE) vulnerability in bw-calendar-engine
- CVE-2018-1000835 XML external entity in keepassdx:keepass dx
- CVE-2018-1000834 XML external entity in runelite:runelite
- CVE-2018-1000833 Deserialization in zoneminder:zoneminder
- CVE-2018-1000832 Deserialization in zoneminder:zoneminder
- CVE-2018-1000831 XML external entity in k9mail:k-9 mail
- CVE-2018-1000830 XML external entity in xr3player project:xr3player
- CVE-2018-1000829 XML external entity in anyplace project:anyplace
- CVE-2018-1000828 XML external entity in frostwire:frostwire
- CVE-2018-1000827 Deserialization in ubilling:ubilling
- CVE-2018-1000826 Microweber XSS Vulnerability
- CVE-2018-1000825 XML external entity in freecol:freecol
- CVE-2018-1000824 Deserialization in megamek:megamek
- CVE-2018-1000823 exist-db:exist-core XML External Entity (XXE) vulnerability
- CVE-2018-1000822 XML External Entity (XXE) vulnerability in codelibs fess
- CVE-2018-1000821 XML external entity in micromathematics project:micromathematics
- CVE-2018-1000820 XML External Entity (XXE) vulnerability in neo4j.procedure:apoc
- CVE-2018-1000817 Asset Pipeline Grails Plugin vulnerable to Path Traversal
- CVE-2018-1000816 Grafana XSS Vulnerability
- CVE-2018-1000815 Security feature bypass in brave:brave
- CVE-2018-1000814 aiohttp-session creates non-expiring sessions
- CVE-2018-1000813 Cross-site scripting in backdropcms:backdrop cms
- CVE-2018-1000812 Auth bypass in artica:integria ims
- CVE-2018-1000811 File upload in bludit:bludit
- CVE-2018-1000810 Integer overflow in rust-lang:rust
- CVE-2018-1000809 privacyIDEA Improper Input Validation vulnerability
- CVE-2018-1000808 Pyopenssl Incorrect Memory Management
- CVE-2018-1000807 PyOpenSSL Use-After-Free vulnerability
- CVE-2018-1000805 Paramiko Authentication Bypass vulnerability
- CVE-2018-1000804 Memory corruption in contiki-ng:contiki-ng
- CVE-2018-1000803 Gitea Exposes Private Email Addresses
- CVE-2018-1000802 Command injection in canonical:ubuntu linux
- CVE-2018-1000801 Path traversal in debian:debian linux
- CVE-2018-1000800 Null dereference in zephyrproject:zephyr
- CVE-2018-1000773 Code injection in wordpress:wordpress
- CVE-2018-1000671 Open redirect in debian:debian linux
- CVE-2018-1000670 Cross-site scripting in koha:koha
- CVE-2018-1000669 Cross-site request forgery in koha:koha
- CVE-2018-1000668 Memory corruption in jsish:jsish
- CVE-2018-1000667 Memory corruption in nasm:netwide assembler
- CVE-2018-1000666 Command injection in gig:jumpscale
- CVE-2018-1000665 Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness
- CVE-2018-1000664 Security feature bypass in dsub for subsonic project:dsub for subsonic
- CVE-2018-1000663 Memory corruption in jsish:jsish
- CVE-2018-1000661 Null dereference in jsish:jsish
- CVE-2018-1000660 Memory corruption in tockos:tock
- CVE-2018-1000659 Path traversal in limesurvey:limesurvey
- CVE-2018-1000658 File upload in limesurvey:limesurvey
- CVE-2018-1000657 Memory corruption in rust-lang:rust
- CVE-2018-1000656 Flask is vulnerable to Denial of Service via incorrect encoding of JSON data
- CVE-2018-1000655 Null dereference in jsish:jsish
- CVE-2018-1000654 Denial of service in gnu:libtasn1
- CVE-2018-1000653 SQL injection in zzcms:zzcms
- CVE-2018-1000652 XML external entity in jabref:jabref
- CVE-2018-1000651 XML external entity in gchq:stroom
- CVE-2018-1000650 SQL injection in librehealth:librehealth ehr
- CVE-2018-1000649 File upload in librehealth:librehealth ehr
- CVE-2018-1000648 File upload in librehealth:librehealth ehr
- CVE-2018-1000647 Path traversal in librehealth:librehealth ehr
- CVE-2018-1000646 File upload in librehealth:librehealth ehr
- CVE-2018-1000645 Path traversal in librehealth:librehealth ehr
- CVE-2018-1000644 Eclipse RDF4j vulnerable to XML External Entity
- CVE-2018-1000642 Cross-site scripting in flightairmap:flightairmap
- CVE-2018-1000641 Deserialization in yeswiki:yeswiki
- CVE-2018-1000640 OpenCart-Overclocked Cross-site Scripting Vulnerability
- CVE-2018-1000639 XML external entity in latexdraw project:latexdraw
- CVE-2018-1000638 Cross-site scripting in 1234n:minicms
- CVE-2018-1000637 Memory corruption in debian:debian linux