Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 153 of 163.
- CVE-2018-1000138 Server-side request forgery in scilico:i\, librarian
- CVE-2018-1000137 Cross-site request forgery in scilico:i\, librarian
- CVE-2018-1000136 Electron Vulnerable to Code Execution by Re-Enabling Node.js Integration
- CVE-2018-1000135 Information disclosure in canonical:ubuntu linux
- CVE-2018-1000134 Weak Password Requirements in UnboundID LDAP SDK
- CVE-2018-1000133 Privilege escalation in secluded:trident
- CVE-2018-1000132 Mercurial Incorrect Access Control vulnerability
- CVE-2018-1000131 SQL injection in wpsupportplus:wp support plus responsive ticket system
- CVE-2018-1000130 Injection in Jolokia agent
- CVE-2018-1000129 Cross-site Scripting in Jolokia agent
- CVE-2018-1000127 Integer overflow in canonical:ubuntu linux
- CVE-2018-1000126 Information disclosure in ajenti:ajenti
- CVE-2018-1000125 Security feature bypass in inversoft:prime-jwt
- CVE-2018-1000124 XML external entity in scilico:i\, librarian
- CVE-2018-1000123 Information disclosure in ionicframework:ios keychain
- CVE-2018-1000122 Memory corruption in canonical:ubuntu linux
- CVE-2018-1000121 Null dereference in canonical:ubuntu linux
- CVE-2018-1000120 curl FTP path confusion leads to NIL byte out of bounds write
- CVE-2018-1000119 rack-protection gem timing attack vulnerability when validating CSRF token
- CVE-2018-1000118 Electron protocol handler browser vulnerable to Command Injection
- CVE-2018-1000117 Memory corruption in python:python
- CVE-2018-1000116 Memory corruption in debian:debian linux
- CVE-2018-1000115 Denial of service in canonical:ubuntu linux
- CVE-2018-1000114 Jenkins Promoted Builds Plugin allowed unauthorized users to run some promotion processes
- CVE-2018-1000113 Stored cross-site scripting vulnerability in Jenkins TestLink Plugin
- CVE-2018-1000112 Incorrect Authorization in Jenkins Mercurial Plugin
- CVE-2018-1000111 Jenkins Subversion Plugin Incorrect Authorization vulnerability
- CVE-2018-1000110 Incorrect Authorization in Jenkins Git Plugin
- CVE-2018-1000109 Jenkins Google Play Android Publisher Plugin allows attacker to obtain credential IDs
- CVE-2018-1000108 Reflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS Plugin
- CVE-2018-1000107 Improper authorization in Jenkins Job and Node Ownership Plugin
- CVE-2018-1000106 Incorrect Authorization in Jenkins Gerrit Trigger Plugin
- CVE-2018-1000105 Incorrect Authorization in Jenkins Gerrit Trigger Plugin
- CVE-2018-1000104 Jenkins Coverity Plugin has Insufficiently Protected Credentials
- CVE-2018-1000101 Memory corruption in mingw-w64:mingw-w64
- CVE-2018-1000100 Memory corruption in canonical:ubuntu linux
- CVE-2018-10001 Memory corruption in debian:debian linux
- CVE-2018-1000099 Null dereference in debian:debian linux
- CVE-2018-1000098 Integer overflow in debian:debian linux
- CVE-2018-1000097 Memory corruption in canonical:ubuntu linux
- CVE-2018-1000096 tiny-json-http missing SSL certificate validation
- CVE-2018-1000095 Cross-site scripting in redhat:ovirt-engine
- CVE-2018-1000094 File upload in cmsmadesimple:cms made simple
- CVE-2018-1000093 Missing authorization in cryptonote:cryptonote
- CVE-2018-1000092 Cross-site request forgery in cmsmadesimple:cms made simple
- CVE-2018-1000091 Memory corruption in kadnode project:kadnode
- CVE-2018-1000090 XML external entity in textpattern:textpattern
- CVE-2018-1000089 django-anymail Includes Sensitive Information in Log Files
- CVE-2018-1000088 Doorkeeper is vulnerable to stored XSS and code execution
- CVE-2018-1000087 Cross-site scripting in wolfcms:wolf cms
- CVE-2018-1000086 pym.js CSRF Vulnerability
- CVE-2018-1000085 Memory corruption in canonical:ubuntu linux
- CVE-2018-1000084 Cross-site scripting in wolfcms:wolf cms
- CVE-2018-1000083 Information disclosure in ajenti:ajenti
- CVE-2018-1000082 Cross-site request forgery in ajenti:ajenti
- CVE-2018-1000081 Denial of service in ajenti:ajenti
- CVE-2018-1000080 Missing authorization in ajenti:ajenti
- CVE-2018-1000079 RubyGems Path Traversal vulnerability
- CVE-2018-1000078 RubyGems Cross-site Scripting vulnerability
- CVE-2018-1000077 RubyGems Improper Input Validation vulnerability
- CVE-2018-1000076 RubyGems Improper Verification of Cryptographic Signature vulnerability
- CVE-2018-1000075 RubyGems Infinite Loop vulnerability
- CVE-2018-1000074 RubyGems Deserialization of Untrusted Data vulnerability
- CVE-2018-1000073 RubyGems Link Following vulnerability
- CVE-2018-1000072 Misconfiguration in iredmail:iredmail
- CVE-2018-1000071 Misconfiguration in roundcube:webmail
- CVE-2018-1000070 Code injection in bitmessage:pybitmessage
- CVE-2018-1000069 XML external entity in debian:debian linux
- CVE-2018-1000068 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
- CVE-2018-1000067 Server-Side Request Forgery in Jenkins
- CVE-2018-1000062 Cross-site scripting in wondercms:wondercms
- CVE-2018-1000060 Information disclosure in sensu:sensu core
- CVE-2018-1000059 Deserialization in validformbuilder:validform builder
- CVE-2018-1000058 Arbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs Plugin
- CVE-2018-1000057 Jenkins Credentials Binding Plugin has Insufficiently Protected Credentials
- CVE-2018-1000056 Improper Restriction of XML External Entity Reference in Jenkins JUnit Plugin
- CVE-2018-1000055 XXE vulnerability in Jenkins Android Lint Plugin
- CVE-2018-1000054 Jenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity Reference
- CVE-2018-1000053 Cross-site request forgery in limesurvey:limesurvey
- CVE-2018-1000052 Memory corruption in fmt:fmt
- CVE-2018-1000051 Use after free in artifex:mupdf
- CVE-2018-1000050 Memory corruption in stb vorbis project:stb vorbis
- CVE-2018-1000049 Code injection in nanopool:claymore dual miner
- CVE-2018-1000048 Deserialization in nasa:rtretrievalframework
- CVE-2018-1000047 Deserialization in nasa:kodiak
- CVE-2018-1000046 Deserialization in nasa:pyblock
- CVE-2018-1000045 Deserialization in nasa:singledop
- CVE-2018-1000044 SQL injection in securityonion:squert
- CVE-2018-1000043 Command injection in securityonion:squert
- CVE-2018-1000042 Command injection in securityonion:squert
- CVE-2018-1000041 Information disclosure in debian:debian linux
- CVE-2018-1000040 Memory corruption in artifex:mupdf
- CVE-2018-1000039 Use after free in artifex:mupdf
- CVE-2018-1000038 Memory corruption in artifex:mupdf
- CVE-2018-1000037 Denial of service in artifex:mupdf
- CVE-2018-1000036 Denial of service in artifex:mupdf
- CVE-2018-1000035 Memory corruption in unzip project:unzip
- CVE-2018-1000034 Memory corruption in info-zip:unzip
- CVE-2018-1000033 Memory corruption in info-zip:unzip
- CVE-2018-1000032 Memory corruption in info-zip:unzip