Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 157 of 163.
- CVE-2018-0702 Path traversal in Cybozu Mailwise
- CVE-2018-0701 Auth bypass in BlueStacks App Player
- CVE-2018-0700 Denial of service in YukiWiki
- CVE-2018-0699 Cross-site scripting in YukiWiki
- CVE-2018-0698 Cross-site scripting in GROWI
- CVE-2018-0697 Cross-site scripting in Metabase
- CVE-2018-0696 Auth bypass in OpenAM
- CVE-2018-0695 Cross-site scripting in User-friendly SVN (USVN)
- CVE-2018-0694 Command injection in FileZen
- CVE-2018-0693 Path traversal in FileZen
- CVE-2018-0692 Other in Baidu Browser
- CVE-2018-0691 Security feature bypass in Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version 42.40.2800, NTT DOCOMO +Message App for iOS prior to version 1.1.23, KDDI +Message App for Android prior to version 1.0.6, and KDDI +Message App for iOS prior to version 1.1.23)
- CVE-2018-0690 Security feature bypass in Music Center for PC
- CVE-2018-0689 Other in SEIKO EPSON printers and scanners
- CVE-2018-0688 Open redirect in SEIKO EPSON printers and scanners
- CVE-2018-0687 Cross-site scripting in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier)
- CVE-2018-0686 File upload in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier)
- CVE-2018-0685 SQL injection in Denbun POP version V3.3P R4.0 and earlier
- CVE-2018-0684 Memory corruption in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier)
- CVE-2018-0683 Memory corruption in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier)
- CVE-2018-0682 Auth bypass in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier)
- CVE-2018-0681 Hardcoded credentials in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier)
- CVE-2018-0680 Hardcoded credentials in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier)
- CVE-2018-0679 Cross-site scripting in multiple FXC Inc. network devices (Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE firmware prior to version Ver1.00.14, and Wireless LAN router AE1021/AE1021PE firmware all versions)
- CVE-2018-0678 Memory corruption in BN-SDWBP3
- CVE-2018-0677 Command injection in BN-SDWBP3
- CVE-2018-0676 Auth bypass in BN-SDWBP3
- CVE-2018-0675 Code injection in AttacheCase
- CVE-2018-0674 Code injection in AttacheCase
- CVE-2018-0673 Path traversal in Cybozu Garoon
- CVE-2018-0672 Cross-site scripting in Movable Type
- CVE-2018-0671 Privilege escalation in INplc-RT
- CVE-2018-0670 Auth bypass in INplc-RT
- CVE-2018-0669 Auth bypass in INplc-RT
- CVE-2018-0668 Memory corruption in INplc-RT
- CVE-2018-0667 Other in Installer of INplc SDK Express 3.08 and earlier and Installer of INplc SDK Pro+ 3.08 and earlier
- CVE-2018-0666 Cross-site scripting in Biz Box Router N58i, N500, NVR500, and RTX810
- CVE-2018-0665 Cross-site scripting in Biz Box Router N58i, N500, NVR500, and RTX810
- CVE-2018-0664 Other in NoMachine App for Android
- CVE-2018-0663 Hardcoded credentials in Multiple I-O DATA network camera products
- CVE-2018-0662 Other in Multiple I-O DATA network camera products
- CVE-2018-0661 Auth bypass in Multiple I-O DATA network camera products
- CVE-2018-0660 Path traversal in AttacheCase
- CVE-2018-0659 Path traversal in AttacheCase
- CVE-2018-0658 Code injection in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE
- CVE-2018-0657 Cross-site scripting in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE
- CVE-2018-0656 Other in The installer of Digital Paper App
- CVE-2018-0655 Cross-site scripting in GROWI
- CVE-2018-0654 Cross-site scripting in GROWI
- CVE-2018-0653 Cross-site scripting in GROWI
- CVE-2018-0652 Cross-site scripting in GROWI
- CVE-2018-0651 Memory corruption in The license management function of YOKOGAWA products
- CVE-2018-0650 Security feature bypass in LINE MUSIC for Android
- CVE-2018-0649 Other in The installers of multiple Canon IT Solutions Inc. software programs
- CVE-2018-0648 Other in Installer of ChatWork Desktop App for Windows
- CVE-2018-0647 Cross-site request forgery in WL-330NUL
- CVE-2018-0646 Path traversal in Explzh
- CVE-2018-0645 File upload in MTAppjQuery
- CVE-2018-0644 Memory corruption in Ubuntu14.04 ORCA(Online Receipt Computer Advantage)4.8.0(panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA(Online Receipt Computer Advantage)5.0.0(panda-client2) 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA(Online Receipt Computer Advantage)5.0.0(panda-client2) 1:2.0.0+p48-u5jma1 and earlier
- CVE-2018-0643 Command injection in Ubuntu14.04 ORCA(Online Receipt Computer Advantage)4.8.0(panda-server) 1:1.4.9+p41-u4jma1 and earlier
- CVE-2018-0642 Cross-site scripting in FV Flowplayer Video Player
- CVE-2018-0641 Memory corruption in HC100RC
- CVE-2018-0640 Memory corruption in HC100RC
- CVE-2018-0639 Command injection in HC100RC
- CVE-2018-0638 Command injection in HC100RC
- CVE-2018-0637 Command injection in HC100RC
- CVE-2018-0636 Command injection in HC100RC
- CVE-2018-0635 Command injection in HC100RC
- CVE-2018-0634 Command injection in HC100RC
- CVE-2018-0633 Memory corruption in Aterm W300P
- CVE-2018-0632 Memory corruption in Aterm W300P
- CVE-2018-0631 Command injection in Aterm W300P
- CVE-2018-0630 Command injection in Aterm W300P
- CVE-2018-0629 Command injection in Aterm W300P
- CVE-2018-0628 Command injection in WG1200HP
- CVE-2018-0627 Command injection in WG1200HP
- CVE-2018-0626 Command injection in WG1200HP
- CVE-2018-0625 Command injection in WG1200HP
- CVE-2018-0624 Other in Multiple Yayoi 17 Series products
- CVE-2018-0623 Other in Multiple Yayoi 17 Series products
- CVE-2018-0622 Weak cryptography in DHC Online Shop App for Android
- CVE-2018-0621 Other in the installer of LOGICOOL CONNECTION UTILITY SOFTWARE
- CVE-2018-0620 Other in the installer of LOGICOOL Game Software
- CVE-2018-0619 Other in Installer of Glary Utilities
- CVE-2018-0618 Cross-site scripting in Mailman
- CVE-2018-0617 Path traversal in MemoCGI
- CVE-2018-0614 Cross-site scripting in Calsos CSDX and CSDJ series products
- CVE-2018-0613 Privilege escalation in Calsos CSDX and CSDJ series products
- CVE-2018-0612 Cross-site scripting in 5000 trillion yen converter
- CVE-2018-0611 Security feature bypass in ANA App for iOS
- CVE-2018-0610 Path traversal in Zenphoto
- CVE-2018-0609 Privilege escalation in linecorp:line
- CVE-2018-0608 Memory corruption in H2O
- CVE-2018-0607 SQL injection in Cybozu Garoon
- CVE-2018-0606 SQL injection in Pixelpost
- CVE-2018-0605 Cross-site scripting in Pixelpost
- CVE-2018-0604 Other in Pixelpost
- CVE-2018-0603 Cross-site scripting in Site Reviews
- CVE-2018-0602 Cross-site scripting in Email Subscribers & Newsletters
- CVE-2018-0601 Other in axpdfium