# Vulnerabilities published in 2018 - [CVE-2018-0702](https://insights.sbomify.com/CVE-2018-0702/): Path traversal in Cybozu Mailwise (high 7.5) - [CVE-2018-0701](https://insights.sbomify.com/CVE-2018-0701/): Auth bypass in BlueStacks App Player (high 8.8) - [CVE-2018-0700](https://insights.sbomify.com/CVE-2018-0700/): Denial of service in YukiWiki (high 7.5) - [CVE-2018-0699](https://insights.sbomify.com/CVE-2018-0699/): Cross-site scripting in YukiWiki (medium 6.1) - [CVE-2018-0698](https://insights.sbomify.com/CVE-2018-0698/): Cross-site scripting in GROWI (medium 5.4) - [CVE-2018-0697](https://insights.sbomify.com/CVE-2018-0697/): Cross-site scripting in Metabase (medium 6.1) - [CVE-2018-0696](https://insights.sbomify.com/CVE-2018-0696/): Auth bypass in OpenAM (high 7.5) - [CVE-2018-0695](https://insights.sbomify.com/CVE-2018-0695/): Cross-site scripting in User-friendly SVN (USVN) (medium 6.1) - [CVE-2018-0694](https://insights.sbomify.com/CVE-2018-0694/): Command injection in FileZen (critical 9.8) - [CVE-2018-0693](https://insights.sbomify.com/CVE-2018-0693/): Path traversal in FileZen (high 7.5) - [CVE-2018-0692](https://insights.sbomify.com/CVE-2018-0692/): Other in Baidu Browser (high 7.8) - [CVE-2018-0691](https://insights.sbomify.com/CVE-2018-0691/): Security feature bypass in Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version 42.40.2800, NTT DOCOMO +Message App for iOS prior to version 1.1.23, KDDI +Message App for Android prior to version 1.0.6, and KDDI +Message App for iOS prior to version 1.1.23) (medium 5.9) - [CVE-2018-0690](https://insights.sbomify.com/CVE-2018-0690/): Security feature bypass in Music Center for PC (high 7.5) - [CVE-2018-0689](https://insights.sbomify.com/CVE-2018-0689/): Other in SEIKO EPSON printers and scanners (high 8.8) - [CVE-2018-0688](https://insights.sbomify.com/CVE-2018-0688/): Open redirect in SEIKO EPSON printers and scanners (medium 6.1) - [CVE-2018-0687](https://insights.sbomify.com/CVE-2018-0687/): Cross-site scripting in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) (medium 6.1) - [CVE-2018-0686](https://insights.sbomify.com/CVE-2018-0686/): File upload in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) (high 8.8) - [CVE-2018-0685](https://insights.sbomify.com/CVE-2018-0685/): SQL injection in Denbun POP version V3.3P R4.0 and earlier (high 8.8) - [CVE-2018-0684](https://insights.sbomify.com/CVE-2018-0684/): Memory corruption in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier) (critical 9.8) - [CVE-2018-0683](https://insights.sbomify.com/CVE-2018-0683/): Memory corruption in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) (critical 9.8) - [CVE-2018-0682](https://insights.sbomify.com/CVE-2018-0682/): Auth bypass in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) (critical 9.8) - [CVE-2018-0681](https://insights.sbomify.com/CVE-2018-0681/): Hardcoded credentials in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) (critical 9.8) - [CVE-2018-0680](https://insights.sbomify.com/CVE-2018-0680/): Hardcoded credentials in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) (critical 9.8) - [CVE-2018-0679](https://insights.sbomify.com/CVE-2018-0679/): Cross-site scripting in multiple FXC Inc. network devices (Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE firmware prior to version Ver1.00.14, and Wireless LAN router AE1021/AE1021PE firmware all versions) (medium 4.8) - [CVE-2018-0678](https://insights.sbomify.com/CVE-2018-0678/): Memory corruption in BN-SDWBP3 (medium 6.8) - [CVE-2018-0677](https://insights.sbomify.com/CVE-2018-0677/): Command injection in BN-SDWBP3 (medium 6.8) - [CVE-2018-0676](https://insights.sbomify.com/CVE-2018-0676/): Auth bypass in BN-SDWBP3 (high 8.8) - [CVE-2018-0675](https://insights.sbomify.com/CVE-2018-0675/): Code injection in AttacheCase (high 7.8) - [CVE-2018-0674](https://insights.sbomify.com/CVE-2018-0674/): Code injection in AttacheCase (high 7.8) - [CVE-2018-0673](https://insights.sbomify.com/CVE-2018-0673/): Path traversal in Cybozu Garoon (high 8.1) - [CVE-2018-0672](https://insights.sbomify.com/CVE-2018-0672/): Cross-site scripting in Movable Type (medium 6.1) - [CVE-2018-0671](https://insights.sbomify.com/CVE-2018-0671/): Privilege escalation in INplc-RT (medium 6.7) - [CVE-2018-0670](https://insights.sbomify.com/CVE-2018-0670/): Auth bypass in INplc-RT (critical 9.8) - [CVE-2018-0669](https://insights.sbomify.com/CVE-2018-0669/): Auth bypass in INplc-RT (critical 9.8) - [CVE-2018-0668](https://insights.sbomify.com/CVE-2018-0668/): Memory corruption in INplc-RT (critical 9.8) - [CVE-2018-0667](https://insights.sbomify.com/CVE-2018-0667/): Other in Installer of INplc SDK Express 3.08 and earlier and Installer of INplc SDK Pro+ 3.08 and earlier (high 7.8) - [CVE-2018-0666](https://insights.sbomify.com/CVE-2018-0666/): Cross-site scripting in Biz Box Router N58i, N500, NVR500, and RTX810 (medium 6.8) - [CVE-2018-0665](https://insights.sbomify.com/CVE-2018-0665/): Cross-site scripting in Biz Box Router N58i, N500, NVR500, and RTX810 (medium 6.8) - [CVE-2018-0664](https://insights.sbomify.com/CVE-2018-0664/): Other in NoMachine App for Android (critical 9.8) - [CVE-2018-0663](https://insights.sbomify.com/CVE-2018-0663/): Hardcoded credentials in Multiple I-O DATA network camera products (high 8.8) - [CVE-2018-0662](https://insights.sbomify.com/CVE-2018-0662/): Other in Multiple I-O DATA network camera products (medium 6.8) - [CVE-2018-0661](https://insights.sbomify.com/CVE-2018-0661/): Auth bypass in Multiple I-O DATA network camera products (high 8.8) - [CVE-2018-0660](https://insights.sbomify.com/CVE-2018-0660/): Path traversal in AttacheCase (low 3.3) - [CVE-2018-0659](https://insights.sbomify.com/CVE-2018-0659/): Path traversal in AttacheCase (medium 5.5) - [CVE-2018-0658](https://insights.sbomify.com/CVE-2018-0658/): Code injection in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (high 7.2) - [CVE-2018-0657](https://insights.sbomify.com/CVE-2018-0657/): Cross-site scripting in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (medium 4.8) - [CVE-2018-0656](https://insights.sbomify.com/CVE-2018-0656/): Other in The installer of Digital Paper App (high 7.8) - [CVE-2018-0655](https://insights.sbomify.com/CVE-2018-0655/): Cross-site scripting in GROWI (medium 4.8) - [CVE-2018-0654](https://insights.sbomify.com/CVE-2018-0654/): Cross-site scripting in GROWI (medium 6.1) - [CVE-2018-0653](https://insights.sbomify.com/CVE-2018-0653/): Cross-site scripting in GROWI (medium 6.1) - [CVE-2018-0652](https://insights.sbomify.com/CVE-2018-0652/): Cross-site scripting in GROWI (medium 4.8) - [CVE-2018-0651](https://insights.sbomify.com/CVE-2018-0651/): Memory corruption in The license management function of YOKOGAWA products (critical 9.8) - [CVE-2018-0650](https://insights.sbomify.com/CVE-2018-0650/): Security feature bypass in LINE MUSIC for Android (high 7.4) - [CVE-2018-0649](https://insights.sbomify.com/CVE-2018-0649/): Other in The installers of multiple Canon IT Solutions Inc. software programs (high 7.8) - [CVE-2018-0648](https://insights.sbomify.com/CVE-2018-0648/): Other in Installer of ChatWork Desktop App for Windows (high 7.8) - [CVE-2018-0647](https://insights.sbomify.com/CVE-2018-0647/): Cross-site request forgery in WL-330NUL (high 8.8) - [CVE-2018-0646](https://insights.sbomify.com/CVE-2018-0646/): Path traversal in Explzh (high 7.8) - [CVE-2018-0645](https://insights.sbomify.com/CVE-2018-0645/): File upload in MTAppjQuery (critical 9.8) - [CVE-2018-0644](https://insights.sbomify.com/CVE-2018-0644/): Memory corruption in Ubuntu14.04 ORCA(Online Receipt Computer Advantage)4.8.0(panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA(Online Receipt Computer Advantage)5.0.0(panda-client2) 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA(Online Receipt Computer Advantage)5.0.0(panda-client2) 1:2.0.0+p48-u5jma1 and earlier (medium 6.5) - [CVE-2018-0643](https://insights.sbomify.com/CVE-2018-0643/): Command injection in Ubuntu14.04 ORCA(Online Receipt Computer Advantage)4.8.0(panda-server) 1:1.4.9+p41-u4jma1 and earlier (medium 6.6) - [CVE-2018-0642](https://insights.sbomify.com/CVE-2018-0642/): Cross-site scripting in FV Flowplayer Video Player (medium 6.1) - [CVE-2018-0641](https://insights.sbomify.com/CVE-2018-0641/): Memory corruption in HC100RC (high 7.2) - [CVE-2018-0640](https://insights.sbomify.com/CVE-2018-0640/): Memory corruption in HC100RC (high 7.2) - [CVE-2018-0639](https://insights.sbomify.com/CVE-2018-0639/): Command injection in HC100RC (high 7.2) - [CVE-2018-0638](https://insights.sbomify.com/CVE-2018-0638/): Command injection in HC100RC (high 7.2) - [CVE-2018-0637](https://insights.sbomify.com/CVE-2018-0637/): Command injection in HC100RC (high 7.2) - [CVE-2018-0636](https://insights.sbomify.com/CVE-2018-0636/): Command injection in HC100RC (high 7.2) - [CVE-2018-0635](https://insights.sbomify.com/CVE-2018-0635/): Command injection in HC100RC (high 7.2) - [CVE-2018-0634](https://insights.sbomify.com/CVE-2018-0634/): Command injection in HC100RC (high 7.2) - [CVE-2018-0633](https://insights.sbomify.com/CVE-2018-0633/): Memory corruption in Aterm W300P (high 7.2) - [CVE-2018-0632](https://insights.sbomify.com/CVE-2018-0632/): Memory corruption in Aterm W300P (high 7.2) - [CVE-2018-0631](https://insights.sbomify.com/CVE-2018-0631/): Command injection in Aterm W300P (high 7.2) - [CVE-2018-0630](https://insights.sbomify.com/CVE-2018-0630/): Command injection in Aterm W300P (high 7.2) - [CVE-2018-0629](https://insights.sbomify.com/CVE-2018-0629/): Command injection in Aterm W300P (high 7.2) - [CVE-2018-0628](https://insights.sbomify.com/CVE-2018-0628/): Command injection in WG1200HP (high 7.2) - [CVE-2018-0627](https://insights.sbomify.com/CVE-2018-0627/): Command injection in WG1200HP (high 7.2) - [CVE-2018-0626](https://insights.sbomify.com/CVE-2018-0626/): Command injection in WG1200HP (high 7.2) - [CVE-2018-0625](https://insights.sbomify.com/CVE-2018-0625/): Command injection in WG1200HP (high 7.2) - [CVE-2018-0624](https://insights.sbomify.com/CVE-2018-0624/): Other in Multiple Yayoi 17 Series products (high 7.8) - [CVE-2018-0623](https://insights.sbomify.com/CVE-2018-0623/): Other in Multiple Yayoi 17 Series products (high 7.8) - [CVE-2018-0622](https://insights.sbomify.com/CVE-2018-0622/): Weak cryptography in DHC Online Shop App for Android (high 7.4) - [CVE-2018-0621](https://insights.sbomify.com/CVE-2018-0621/): Other in the installer of LOGICOOL CONNECTION UTILITY SOFTWARE (high 7.8) - [CVE-2018-0620](https://insights.sbomify.com/CVE-2018-0620/): Other in the installer of LOGICOOL Game Software (high 7.8) - [CVE-2018-0619](https://insights.sbomify.com/CVE-2018-0619/): Other in Installer of Glary Utilities (high 7.8) - [CVE-2018-0618](https://insights.sbomify.com/CVE-2018-0618/): Cross-site scripting in Mailman (medium 5.4) - [CVE-2018-0617](https://insights.sbomify.com/CVE-2018-0617/): Path traversal in MemoCGI (high 7.5) - [CVE-2018-0614](https://insights.sbomify.com/CVE-2018-0614/): Cross-site scripting in Calsos CSDX and CSDJ series products (medium 6.1) - [CVE-2018-0613](https://insights.sbomify.com/CVE-2018-0613/): Privilege escalation in Calsos CSDX and CSDJ series products (high 8.8) - [CVE-2018-0612](https://insights.sbomify.com/CVE-2018-0612/): Cross-site scripting in 5000 trillion yen converter (medium 6.1) - [CVE-2018-0611](https://insights.sbomify.com/CVE-2018-0611/): Security feature bypass in ANA App for iOS (high 7.4) - [CVE-2018-0610](https://insights.sbomify.com/CVE-2018-0610/): Path traversal in Zenphoto (high 7.2) - [CVE-2018-0609](https://insights.sbomify.com/CVE-2018-0609/): Privilege escalation in linecorp:line (high 7.8) - [CVE-2018-0608](https://insights.sbomify.com/CVE-2018-0608/): Memory corruption in H2O (critical 9.8) - [CVE-2018-0607](https://insights.sbomify.com/CVE-2018-0607/): SQL injection in Cybozu Garoon (high 8.8) - [CVE-2018-0606](https://insights.sbomify.com/CVE-2018-0606/): SQL injection in Pixelpost (high 7.2) - [CVE-2018-0605](https://insights.sbomify.com/CVE-2018-0605/): Cross-site scripting in Pixelpost (medium 6.1) - [CVE-2018-0604](https://insights.sbomify.com/CVE-2018-0604/): Other in Pixelpost (high 7.2) - [CVE-2018-0603](https://insights.sbomify.com/CVE-2018-0603/): Cross-site scripting in Site Reviews (medium 6.1) - [CVE-2018-0602](https://insights.sbomify.com/CVE-2018-0602/): Cross-site scripting in Email Subscribers & Newsletters (medium 6.1) - [CVE-2018-0601](https://insights.sbomify.com/CVE-2018-0601/): Other in axpdfium (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/157/