# Vulnerabilities published in 2018


- [CVE-2018-1000031](https://insights.sbomify.com/CVE-2018-1000031/): Memory corruption in info-zip:unzip (high 7.8)
- [CVE-2018-1000030](https://insights.sbomify.com/CVE-2018-1000030/): Race condition in canonical:ubuntu linux (low 3.6)
- [CVE-2018-1000029](https://insights.sbomify.com/CVE-2018-1000029/): Cross-site scripting in elsa project:elsa (medium 6.1)
- [CVE-2018-1000028](https://insights.sbomify.com/CVE-2018-1000028/): Missing authorization in linux:linux kernel (high 7.4)
- [CVE-2018-1000027](https://insights.sbomify.com/CVE-2018-1000027/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2018-1000026](https://insights.sbomify.com/CVE-2018-1000026/): Denial of service in canonical:ubuntu linux (high 7.7)
- [CVE-2018-1000025](https://insights.sbomify.com/CVE-2018-1000025/): Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability (high 8.1)
- [CVE-2018-1000024](https://insights.sbomify.com/CVE-2018-1000024/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2018-1000023](https://insights.sbomify.com/CVE-2018-1000023/): Insight API transaction broadcast endpoint can result in Full Path Disclosure (medium 5.3)
- [CVE-2018-1000022](https://insights.sbomify.com/CVE-2018-1000022/): Missing authorization in electrum:bitcoin wallet (medium 5.3)
- [CVE-2018-1000021](https://insights.sbomify.com/CVE-2018-1000021/): Command injection in git-scm:git (medium 5.0)
- [CVE-2018-1000020](https://insights.sbomify.com/CVE-2018-1000020/): Cross-site scripting in open-emr:openemr (medium 6.1)
- [CVE-2018-1000019](https://insights.sbomify.com/CVE-2018-1000019/): Command injection in open-emr:openemr (high 8.8)
- [CVE-2018-1000018](https://insights.sbomify.com/CVE-2018-1000018/): Information disclosure in ovirt:ovirt-hosted-engine-setup (high 7.8)
- [CVE-2018-1000015](https://insights.sbomify.com/CVE-2018-1000015/): Incorrect permission checks in Pipeline: Nodes and Processes plugin (medium 4.8)
- [CVE-2018-1000014](https://insights.sbomify.com/CVE-2018-1000014/): CSRF vulnerability in Jenkins Translation Assistance plugin (high 8.8)
- [CVE-2018-1000013](https://insights.sbomify.com/CVE-2018-1000013/): CSRF vulnerability in Jenkins Release plugin (high 8.8)
- [CVE-2018-1000012](https://insights.sbomify.com/CVE-2018-1000012/): XXE vulnerability Jenkins Warnings Plugin (high 8.8)
- [CVE-2018-1000011](https://insights.sbomify.com/CVE-2018-1000011/): XML External Entity Reference in Jenkins FindBugs Plugin (high 8.8)
- [CVE-2018-1000010](https://insights.sbomify.com/CVE-2018-1000010/): XXE vulnerability in Jenkins DRY Plugin (high 8.8)
- [CVE-2018-1000009](https://insights.sbomify.com/CVE-2018-1000009/): XXE vulnerability in Jenkins Checkstyle Plugin (high 8.8)
- [CVE-2018-1000008](https://insights.sbomify.com/CVE-2018-1000008/): XXE vulnerability in Jenkins PMD Plugin (high 8.8)
- [CVE-2018-1000007](https://insights.sbomify.com/CVE-2018-1000007/): Information disclosure in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-1000006](https://insights.sbomify.com/CVE-2018-1000006/): Remote Code Execution in electron (high 8.8)
- [CVE-2018-1000005](https://insights.sbomify.com/CVE-2018-1000005/): Memory corruption in canonical:ubuntu linux (critical 9.1)
- [CVE-2018-1000004](https://insights.sbomify.com/CVE-2018-1000004/): Race condition in linux:linux kernel (medium 5.9)
- [CVE-2018-1000003](https://insights.sbomify.com/CVE-2018-1000003/): Security feature bypass in powerdns:recursor (low 3.7)
- [CVE-2018-1000002](https://insights.sbomify.com/CVE-2018-1000002/): Security feature bypass in nic:knot resolver (low 3.7)
- [CVE-2018-1000001](https://insights.sbomify.com/CVE-2018-1000001/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2018-10000](https://insights.sbomify.com/CVE-2018-10000/): Cross-site scripting in videodownloaderultimate:video downloader (medium 6.1)
- [CVE-2018-1000](https://insights.sbomify.com/CVE-2018-1000/): Information disclosure in Internet Explorer 10 (medium 5.3)
- [CVE-2018-0998](https://insights.sbomify.com/CVE-2018-0998/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2018-0997](https://insights.sbomify.com/CVE-2018-0997/): Memory corruption in Internet Explorer 11 (high 7.5)
- [CVE-2018-0996](https://insights.sbomify.com/CVE-2018-0996/): Memory corruption in Internet Explorer 10 (high 7.5)
- [CVE-2018-0995](https://insights.sbomify.com/CVE-2018-0995/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0994](https://insights.sbomify.com/CVE-2018-0994/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0993](https://insights.sbomify.com/CVE-2018-0993/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0991](https://insights.sbomify.com/CVE-2018-0991/): Memory corruption in Internet Explorer 10 (high 7.5)
- [CVE-2018-0990](https://insights.sbomify.com/CVE-2018-0990/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0989](https://insights.sbomify.com/CVE-2018-0989/): Information disclosure in Internet Explorer 10 (medium 4.3)
- [CVE-2018-0988](https://insights.sbomify.com/CVE-2018-0988/): Memory corruption in Internet Explorer 10 (high 7.5)
- [CVE-2018-0987](https://insights.sbomify.com/CVE-2018-0987/): Information disclosure in Internet Explorer 10 (medium 4.3)
- [CVE-2018-0986](https://insights.sbomify.com/CVE-2018-0986/): Memory corruption in Microsoft Exchange Server (high 8.8)
- [CVE-2018-0983](https://insights.sbomify.com/CVE-2018-0983/): Privilege escalation in Windows Storage Services (high 7.0)
- [CVE-2018-0982](https://insights.sbomify.com/CVE-2018-0982/): Privilege escalation in Windows 10 (high 7.0)
- [CVE-2018-0981](https://insights.sbomify.com/CVE-2018-0981/): Information disclosure in Internet Explorer 10 (medium 5.3)
- [CVE-2018-0980](https://insights.sbomify.com/CVE-2018-0980/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0979](https://insights.sbomify.com/CVE-2018-0979/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0978](https://insights.sbomify.com/CVE-2018-0978/): Memory corruption in Internet Explorer 10 (high 7.5)
- [CVE-2018-0977](https://insights.sbomify.com/CVE-2018-0977/): Privilege escalation in Windows (high 7.0)
- [CVE-2018-0976](https://insights.sbomify.com/CVE-2018-0976/): Denial of service in Windows 10 (medium 5.3)
- [CVE-2018-0975](https://insights.sbomify.com/CVE-2018-0975/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-0974](https://insights.sbomify.com/CVE-2018-0974/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-0973](https://insights.sbomify.com/CVE-2018-0973/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-0972](https://insights.sbomify.com/CVE-2018-0972/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-0971](https://insights.sbomify.com/CVE-2018-0971/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-0970](https://insights.sbomify.com/CVE-2018-0970/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-0969](https://insights.sbomify.com/CVE-2018-0969/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-0968](https://insights.sbomify.com/CVE-2018-0968/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-0967](https://insights.sbomify.com/CVE-2018-0967/): Denial of service in microsoft:windows 10 (medium 5.3)
- [CVE-2018-0966](https://insights.sbomify.com/CVE-2018-0966/): Security feature bypass in Windows 10 (low 3.3)
- [CVE-2018-0965](https://insights.sbomify.com/CVE-2018-0965/): Code injection in Windows 10 (high 8.4)
- [CVE-2018-0964](https://insights.sbomify.com/CVE-2018-0964/): Information disclosure in Windows 10 (medium 6.1)
- [CVE-2018-0963](https://insights.sbomify.com/CVE-2018-0963/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2018-0961](https://insights.sbomify.com/CVE-2018-0961/): Memory corruption in Windows 10 (high 7.6)
- [CVE-2018-0960](https://insights.sbomify.com/CVE-2018-0960/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-0959](https://insights.sbomify.com/CVE-2018-0959/): Code injection in Windows 10 (high 7.6)
- [CVE-2018-0958](https://insights.sbomify.com/CVE-2018-0958/): Security feature bypass in Windows 10 (medium 5.3)
- [CVE-2018-0957](https://insights.sbomify.com/CVE-2018-0957/): Information disclosure in Windows 10 (medium 5.3)
- [CVE-2018-0956](https://insights.sbomify.com/CVE-2018-0956/): Denial of service in Windows 10 (high 7.5)
- [CVE-2018-0955](https://insights.sbomify.com/CVE-2018-0955/): Memory corruption in Internet Explorer 10 (high 7.5)
- [CVE-2018-0954](https://insights.sbomify.com/CVE-2018-0954/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0953](https://insights.sbomify.com/CVE-2018-0953/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2018-0952](https://insights.sbomify.com/CVE-2018-0952/): Privilege escalation in Microsoft Visual Studio (high 7.8)
- [CVE-2018-0951](https://insights.sbomify.com/CVE-2018-0951/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-0950](https://insights.sbomify.com/CVE-2018-0950/): Information disclosure in Microsoft Office (medium 6.5)
- [CVE-2018-0949](https://insights.sbomify.com/CVE-2018-0949/): Security feature bypass in Internet Explorer 10 (medium 6.5)
- [CVE-2018-0947](https://insights.sbomify.com/CVE-2018-0947/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0946](https://insights.sbomify.com/CVE-2018-0946/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0945](https://insights.sbomify.com/CVE-2018-0945/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0944](https://insights.sbomify.com/CVE-2018-0944/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0943](https://insights.sbomify.com/CVE-2018-0943/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0942](https://insights.sbomify.com/CVE-2018-0942/): Privilege escalation in Internet Explorer (low 2.6)
- [CVE-2018-0941](https://insights.sbomify.com/CVE-2018-0941/): Information disclosure in Exchange Server (medium 5.5)
- [CVE-2018-0940](https://insights.sbomify.com/CVE-2018-0940/): Privilege escalation in Microsoft Exchange Outlook Web Access (OWA) (medium 6.5)
- [CVE-2018-0939](https://insights.sbomify.com/CVE-2018-0939/): ChakraCore information disclosure vulnerability (medium 4.3)
- [CVE-2018-0937](https://insights.sbomify.com/CVE-2018-0937/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0936](https://insights.sbomify.com/CVE-2018-0936/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0935](https://insights.sbomify.com/CVE-2018-0935/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2018-0934](https://insights.sbomify.com/CVE-2018-0934/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0933](https://insights.sbomify.com/CVE-2018-0933/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0932](https://insights.sbomify.com/CVE-2018-0932/): Information disclosure in Internet Explorer, Microsoft Edge (medium 4.3)
- [CVE-2018-0931](https://insights.sbomify.com/CVE-2018-0931/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0930](https://insights.sbomify.com/CVE-2018-0930/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0929](https://insights.sbomify.com/CVE-2018-0929/): Information disclosure in Internet Explorer (medium 4.3)
- [CVE-2018-0927](https://insights.sbomify.com/CVE-2018-0927/): Information disclosure in Internet Explorer, Microsoft Edge (medium 4.3)
- [CVE-2018-0926](https://insights.sbomify.com/CVE-2018-0926/): Information disclosure in Windows kernel (medium 5.5)
- [CVE-2018-0925](https://insights.sbomify.com/CVE-2018-0925/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0924](https://insights.sbomify.com/CVE-2018-0924/): Open redirect in Exchange Server (medium 6.5)
- [CVE-2018-0923](https://insights.sbomify.com/CVE-2018-0923/): Cross-site scripting in Microsoft SharePoint (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/154/