Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 152 of 163.
- CVE-2018-1000417 CSRF vulnerability in Email Extension Template Plugin
- CVE-2018-1000416 Jenkins Job Config History Plugin reflected XSS vulnerability
- CVE-2018-1000415 Cross-site Scripting in Jenkins Rebuilder Plugin
- CVE-2018-1000414 CSRF vulnerability in Config File Provider Plugin
- CVE-2018-1000413 Stored XSS vulnerability in Config File Provider Plugin
- CVE-2018-1000412 Jenkins Jira Plugin Incorrect Authorization vulnerability
- CVE-2018-1000411 Jenkins JUnit Plugin CSRF vulnerability
- CVE-2018-1000410 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
- CVE-2018-1000409 Session Fixation in Jenkins
- CVE-2018-1000408 Improper Authorization in Jenkins
- CVE-2018-1000407 Cross-site Scripting in Jenkins
- CVE-2018-1000406 Path Traversal in Jenkins
- CVE-2018-1000404 Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin
- CVE-2018-1000403 AWS CodeDeploy Plugin stored AWS Secret Key in plain text
- CVE-2018-1000402 Jenkins AWS CodeDeploy Plugin has Insufficiently Protected Credentials
- CVE-2018-1000401 Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials
- CVE-2018-1000400 Privilege escalation in kubernetes:cri-o
- CVE-2018-1000301 Memory corruption in canonical:ubuntu linux
- CVE-2018-1000300 Memory corruption in canonical:ubuntu linux
- CVE-2018-1000226 Cobbler Improper Validation of Security Tokens
- CVE-2018-1000225 Cobbler XSS Vulnerability
- CVE-2018-1000224 Integer overflow in godotengine:godot
- CVE-2018-1000223 Memory corruption in surina:soundtouch
- CVE-2018-1000222 Memory corruption in canonical:ubuntu linux
- CVE-2018-1000221 Memory corruption in pkgconf:pkgconf
- CVE-2018-1000219 Cross-site scripting in open-emr:openemr
- CVE-2018-1000218 Cross-site scripting in open-emr:openemr
- CVE-2018-1000217 Use after free in davegamble:cjson
- CVE-2018-1000216 Memory corruption in davegamble:cjson
- CVE-2018-1000215 Denial of service in davegamble:cjson
- CVE-2018-1000211 Doorkeeper subject to Incorrect Permission Assignment
- CVE-2018-1000210 High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed
- CVE-2018-1000209 Privilege escalation in sensu:sensu core
- CVE-2018-1000208 Path traversal in modx:modx revolution
- CVE-2018-1000207 MODX Revolution Incorrect Access Control vulnerability
- CVE-2018-1000206 Cross-site request forgery in jfrog:artifactory
- CVE-2018-1000205 Security feature bypass in denx:u-boot
- CVE-2018-1000204 Information disclosure in canonical:ubuntu linux
- CVE-2018-1000203 Supply chain in soarlabs:soarcoin
- CVE-2018-1000202 Jenkins Groovy Postbuild Plugin vulnerable to Cross-site Scripting
- CVE-2018-1000201 Ruby-ffi has a DLL loading issue
- CVE-2018-1000200 Null dereference in linux:linux kernel
- CVE-2018-1000199 Memory corruption in canonical:ubuntu linux
- CVE-2018-1000198 XML External Entity processing vulnerability in Jenkins Black Duck Hub Plugin
- CVE-2018-1000197 Jenkins Black Duck Hub Plugin allowed any user with Overall/Read to read and write its configuration
- CVE-2018-1000196 Jenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text
- CVE-2018-1000195 Cross-Site Request Forgery in Jenkins
- CVE-2018-1000194 Path Traversal in Jenkins
- CVE-2018-1000193 Injection in Jenkins
- CVE-2018-1000192 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
- CVE-2018-1000191 Jenkins Black Duck Detect Plugin information exposure vulnerability
- CVE-2018-1000190 Exposure of sensitive information vulnerability in Jenkins Black Duck Hub Plugin
- CVE-2018-1000189 CSRF vulnerability and missing permission checks in Jenkins AbsInt Astrée Plugin
- CVE-2018-1000188 Jenkins CAS Plugin Server-Side Request Forgery vulnerability
- CVE-2018-1000187 Exposure of Sensitive Information in Jenkins Kubernetes Plugin
- CVE-2018-1000186 Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability
- CVE-2018-1000185 Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery
- CVE-2018-1000184 Jenkins GitHub Plugin server-side request forgery vulnerability exists
- CVE-2018-1000183 Jenkins GitHub Plugin exposure of sensitive information vulnerability exists
- CVE-2018-1000182 Server-Side Request Forgery in Jenkins Git Plugin
- CVE-2018-1000181 Information disclosure in ibm:kitura
- CVE-2018-1000180 Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator
- CVE-2018-1000179 Null dereference in debian:debian linux
- CVE-2018-1000178 Memory corruption in debian:debian linux
- CVE-2018-1000177 Stored XSS vulnerability in Jenkins S3 Publisher Plugin
- CVE-2018-1000176 Jenkins Email Extension Plugin showed plain text SMTP password in configuration form field
- CVE-2018-1000175 Jenkins HTML Publisher Plugin path traversal vulnerability
- CVE-2018-1000174 Jenkins Google Login Plugin Open Redirect vulnerability
- CVE-2018-1000173 Jenkins Google Login Plugin Session Fixation vulnerability
- CVE-2018-1000172 Cross-site scripting in imagely:nextgen gallery
- CVE-2018-1000170 Cross-site Scripting in Jenkins Core
- CVE-2018-1000169 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
- CVE-2018-1000168 Null dereference in debian:debian linux
- CVE-2018-1000167 OISF suricata-update unsafely deserializes YAML data
- CVE-2018-1000165 LightSAML Incorrect Access Control vulnerability
- CVE-2018-1000164 Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
- CVE-2018-1000163 Cross-site scripting in projectfloodlight:floodlight
- CVE-2018-1000162 Cross-site Scripting in Parsedown
- CVE-2018-1000161 Path traversal in nmap:nmap
- CVE-2018-1000160 Cross-Site Scripting in @risingstack/protect
- CVE-2018-1000159 tlslite-ng off-by-one error on mac checking
- CVE-2018-1000158 Other in cmsmadesimple:cms made simple
- CVE-2018-1000156 Command injection in canonical:ubuntu linux
- CVE-2018-1000155 Missing authorization in opennetworking:openflow
- CVE-2018-1000154 Cross-site scripting in zammad:zammad
- CVE-2018-1000153 Jenkins vSphere Plugin Cross-Site Request Forgery vulnerability
- CVE-2018-1000152 Jenkins vSphere Plugin incorrect authorization vulnerability
- CVE-2018-1000151 Jenkins vSphere Plugin disables SSL/TLS certificate validation by default
- CVE-2018-1000150 Jenkins Reverse Proxy Auth Plugin allows attackers with local file system access to obtain a list of authorities for logged in users
- CVE-2018-1000149 Jenkins Ansible Plugin man in the middle vulnerability
- CVE-2018-1000148 Jenkins Copy To Slave Plugin allows access to arbitrary files on the Jenkins controller file system
- CVE-2018-1000147 Jenkins Perforce Plugin exposure of sensitive information vulnerability exists
- CVE-2018-1000146 Liquibase Runner Plugin allows users to load arbitrary Java code into controller JVM
- CVE-2018-1000145 Jenkins Perforce Plugin uses ineffective credentials encryption
- CVE-2018-1000144 Jenkins Cucumber Living Documentation Plugin Cross-site Scripting vulnerability
- CVE-2018-1000143 Jenkins GitHub Pull Request Builder Plugin
- CVE-2018-1000142 Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials
- CVE-2018-1000141 Missing authorization in scilico:i\, librarian
- CVE-2018-1000140 Memory corruption in canonical:ubuntu linux
- CVE-2018-1000139 Cross-site scripting in scilico:i\, librarian