Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 151 of 163.
- CVE-2018-1000636 Null dereference in jerryscript:jerryscript
- CVE-2018-1000635 Information disclosure in openmicroscopy:omero
- CVE-2018-1000634 Privilege escalation in openmicroscopy:omero
- CVE-2018-1000633 Information disclosure in openmicroscopy:omero
- CVE-2018-1000632 Dom4j contains a XML Injection vulnerability
- CVE-2018-1000631 SQL injection in battelle:v2i hub
- CVE-2018-1000630 SQL injection in battelle:v2i hub
- CVE-2018-1000629 Cross-site scripting in battelle:v2i hub
- CVE-2018-1000628 Auth bypass in battelle:v2i hub
- CVE-2018-1000627 Information disclosure in battelle:v2i hub
- CVE-2018-1000626 Hardcoded credentials in battelle:v2i hub
- CVE-2018-1000625 Hardcoded credentials in battelle:v2i hub
- CVE-2018-1000624 Missing authorization in battelle:v2i hub
- CVE-2018-1000623 Path traversal in jfrog:artifactory
- CVE-2018-1000622 Code injection in rust-lang:rust
- CVE-2018-1000621 Misconfiguration in mycroft:mycroft-core
- CVE-2018-1000620 Insufficient Entropy in cryptiles
- CVE-2018-1000619 File upload in ovidentia:ovidentia
- CVE-2018-1000618 Denial of service in eosio project:eos
- CVE-2018-1000617 Denial of service in atlassian:floodlight controller
- CVE-2018-1000616 XML external entity in onosproject:onos
- CVE-2018-1000615 Denial of service in onosproject:onos
- CVE-2018-1000614 XML external entity in onosproject:onos
- CVE-2018-1000613 Deserialization of Untrusted Data in Bouncy castle
- CVE-2018-1000611 Cross-site scripting in openconext:openconext engineblock
- CVE-2018-1000610 Jenkins Configuration as Code Plugin has Insufficiently Protected Credentials
- CVE-2018-1000609 Jenkins Configuration as Code Plugin vulnerable to Exposure of Sensitive Information
- CVE-2018-1000608 Jenkins z/OS Connector Plugin allows local attacker to retrieve configured password
- CVE-2018-1000607 Arbitrary file write vulnerability in Jenkins Fortify CloudScan Plugin
- CVE-2018-1000606 URLTrigger Plugin server-side request forgery vulnerability
- CVE-2018-1000605 Jenkins CollabNet Plugin man in the middle vulnerability
- CVE-2018-1000604 Jenkins Badge Plugin cross-site scripting vulnerability
- CVE-2018-1000603 CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials
- CVE-2018-1000602 Jenkins SAML Plugin Session Fixation vulnerability
- CVE-2018-1000601 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin
- CVE-2018-1000600 CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials
- CVE-2018-1000559 Qutebrowser XSS Vulnerability
- CVE-2018-1000558 SQL injection in ocsinventory-ng:ocsinventory ng
- CVE-2018-1000557 Cross-site scripting in ocsinventory-ng:ocsinventory ng
- CVE-2018-1000556 Cross-site scripting in veronalabs:wp statistics
- CVE-2018-1000554 Weak cryptography in trovebox:trovebox
- CVE-2018-1000553 Server-side request forgery in trovebox:trovebox
- CVE-2018-1000552 SQL injection in trovebox:trovebox
- CVE-2018-1000551 Auth bypass in trovebox:trovebox
- CVE-2018-1000550 Path traversal in debian:debian linux
- CVE-2018-1000549 Information disclosure in wekan project:wekan
- CVE-2018-1000548 XML external entity in umlet:umlet
- CVE-2018-1000547 Missing authorization in corebos:corebos
- CVE-2018-1000546 XML external entity in triplea-game:triplea
- CVE-2018-1000544 Rubyzip gem contains a Directory Traversal vulnerability in zip file component
- CVE-2018-1000543 Cross-site scripting in rockiger:akiee
- CVE-2018-1000542 XML external entity in netbeans-mmd-plugin project:netbeans-mmd-plugin
- CVE-2018-1000540 XML external entity in loboevolution project:loboevolution
- CVE-2018-1000539 Json-jwt did not verify the cryptographic signature for data
- CVE-2018-1000538 Denial of service in minio:minio
- CVE-2018-1000537 Memory corruption in marlinfw:marlin firmware
- CVE-2018-1000536 Cross-site scripting in getmedis:medis
- CVE-2018-1000535 Path traversal in lms:lms
- CVE-2018-1000534 Joplin Vulnerable to Cross-site Scripting in Note Content
- CVE-2018-1000533 Command injection in gitlist:gitlist
- CVE-2018-1000532 Path traversal in beep project:beep
- CVE-2018-1000531 Security feature bypass in inversoft:prime-jwt
- CVE-2018-1000529 Stored Cross Site Scripting in Grails Fields Plugin
- CVE-2018-1000528 Cross-site scripting in debian:debian linux
- CVE-2018-1000527 Froxlor PHP Object Injection vulnerability
- CVE-2018-1000526 XML external entity in openpsa2:openpsa
- CVE-2018-1000525 Deserialization in openpsa2:openpsa
- CVE-2018-1000524 Integer overflow in spheredev:minisphere
- CVE-2018-1000523 Topydo Improper Input Validation vulnerability
- CVE-2018-1000521 Cross-site scripting in bigtreecms:bigtree cms
- CVE-2018-1000520 Security feature bypass in arm:mbed tls
- CVE-2018-1000519 aiohttp-session Session Fixation vulnerability
- CVE-2018-1000518 websockets is vulnerable to denial of service by memory exhaustion
- CVE-2018-1000517 Memory corruption in busybox:busybox
- CVE-2018-1000516 Galaxy cross-site scripting (XSS)
- CVE-2018-1000515 XML external entity in news-articles project:news-articles
- CVE-2018-1000514 Cross-site request forgery in limesurvey:limesurvey
- CVE-2018-1000513 Cross-site scripting in limesurvey:limesurvey
- CVE-2018-1000512 Cross-site scripting in tooltipy project:tooltipy
- CVE-2018-1000511 Missing authorization in wpulike:ulike
- CVE-2018-1000510 Missing authorization in silkypress:image zoom
- CVE-2018-1000509 Deserialization in redirection:redirection
- CVE-2018-1000508 Cross-site scripting in wpulike:ulike
- CVE-2018-1000507 Cross-site request forgery in jjj:wp user groups
- CVE-2018-1000506 Cross-site request forgery in mediaron:metronet tag manager
- CVE-2018-1000505 Cross-site request forgery in tooltipy:tooltipy
- CVE-2018-1000504 Code injection in redirection:redirection
- CVE-2018-1000503 Missing authorization in mybb:mybb
- CVE-2018-1000502 Path traversal in mybb:mybb
- CVE-2018-1000501 Auth bypass in instant-update:instant update cms
- CVE-2018-1000500 Security feature bypass in busybox:busybox
- CVE-2018-1000426 Stored XSS vulnerability in Jenkins Git Changelog Plugin
- CVE-2018-1000425 Jenkins SonarQube Scanner Plugin stored server authentication token in plain text
- CVE-2018-1000424 Jenkins Artifactory Plugin stored old directly entered credentials unencrypted on disk
- CVE-2018-1000423 Jenkins Crowd 2 Integration Plugin stored credentials in plain text
- CVE-2018-1000422 Jenkins Crowd 2 Integration Plugin server-side request forgery vulnerability
- CVE-2018-1000421 Server-side request forgery vulnerability in Jenkins Mesos Plugin
- CVE-2018-1000420 Improper authorization vulnerability in Jenkins Mesos Plugin
- CVE-2018-1000419 Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs
- CVE-2018-1000418 Jenkins HipChat Plugin allows credential capture due to incorrect authorization