# Vulnerabilities published in 2018


- [CVE-2018-0600](https://insights.sbomify.com/CVE-2018-0600/): Other in the installer of PlayMemories Home for Windows (high 7.8)
- [CVE-2018-0599](https://insights.sbomify.com/CVE-2018-0599/): Other in The installer of Visual C++ Redistributable (high 7.8)
- [CVE-2018-0598](https://insights.sbomify.com/CVE-2018-0598/): Other in Self-extracting archive files created by IExpress bundled with Microsoft Windows (high 7.8)
- [CVE-2018-0597](https://insights.sbomify.com/CVE-2018-0597/): Other in The installer of Visual Studio Code (high 7.8)
- [CVE-2018-0596](https://insights.sbomify.com/CVE-2018-0596/): Other in The installer of Visual Studio Community (high 7.8)
- [CVE-2018-0595](https://insights.sbomify.com/CVE-2018-0595/): Privilege escalation in The installer of Skype for Windows (high 7.8)
- [CVE-2018-0594](https://insights.sbomify.com/CVE-2018-0594/): Privilege escalation in Skype for Windows (high 7.8)
- [CVE-2018-0593](https://insights.sbomify.com/CVE-2018-0593/): Other in The installer of Microsoft OneDrive (high 7.8)
- [CVE-2018-0592](https://insights.sbomify.com/CVE-2018-0592/): Other in Microsoft OneDrive (high 7.8)
- [CVE-2018-0591](https://insights.sbomify.com/CVE-2018-0591/): Weak cryptography in KINEPASS App (medium 5.9)
- [CVE-2018-0590](https://insights.sbomify.com/CVE-2018-0590/): Missing authorization in Ultimate Member (medium 4.3)
- [CVE-2018-0589](https://insights.sbomify.com/CVE-2018-0589/): Missing authorization in Ultimate Member (medium 4.3)
- [CVE-2018-0588](https://insights.sbomify.com/CVE-2018-0588/): Path traversal in Ultimate Member (high 7.5)
- [CVE-2018-0587](https://insights.sbomify.com/CVE-2018-0587/): File upload in Ultimate Member (medium 4.3)
- [CVE-2018-0586](https://insights.sbomify.com/CVE-2018-0586/): Path traversal in Ultimate Member (medium 4.3)
- [CVE-2018-0585](https://insights.sbomify.com/CVE-2018-0585/): Cross-site scripting in Ultimate Member (medium 5.4)
- [CVE-2018-0584](https://insights.sbomify.com/CVE-2018-0584/): Auth bypass in IIJ SmartKey App for Android (high 7.5)
- [CVE-2018-0583](https://insights.sbomify.com/CVE-2018-0583/): Cross-site scripting in RT-AC1200HP (medium 6.1)
- [CVE-2018-0582](https://insights.sbomify.com/CVE-2018-0582/): Cross-site scripting in RT-AC68U (medium 6.1)
- [CVE-2018-0581](https://insights.sbomify.com/CVE-2018-0581/): Cross-site scripting in RT-AC87U (medium 6.1)
- [CVE-2018-0580](https://insights.sbomify.com/CVE-2018-0580/): Other in CLIP STUDIO series (high 7.8)
- [CVE-2018-0579](https://insights.sbomify.com/CVE-2018-0579/): Cross-site scripting in Open Graph for Facebook, Google+ and Twitter Card Tags (medium 6.1)
- [CVE-2018-0578](https://insights.sbomify.com/CVE-2018-0578/): Cross-site scripting in PixelYourSite (medium 5.4)
- [CVE-2018-0577](https://insights.sbomify.com/CVE-2018-0577/): Cross-site scripting in WP Google Map Plugin (medium 5.4)
- [CVE-2018-0576](https://insights.sbomify.com/CVE-2018-0576/): Cross-site scripting in Events Manager (medium 5.4)
- [CVE-2018-0575](https://insights.sbomify.com/CVE-2018-0575/): Sensitive Data Exposure in baserCMS (medium 5.3)
- [CVE-2018-0574](https://insights.sbomify.com/CVE-2018-0574/): XSS in baserCMS (medium 6.1)
- [CVE-2018-0573](https://insights.sbomify.com/CVE-2018-0573/): baserCMS Access Control Bypass (medium 5.3)
- [CVE-2018-0572](https://insights.sbomify.com/CVE-2018-0572/): baserCMS vulnerable to Access Control Bypass (high 8.1)
- [CVE-2018-0571](https://insights.sbomify.com/CVE-2018-0571/): baserCMS arbitrary file upload vulnerability (medium 4.3)
- [CVE-2018-0570](https://insights.sbomify.com/CVE-2018-0570/): XSS in baserCMS (medium 5.4)
- [CVE-2018-0569](https://insights.sbomify.com/CVE-2018-0569/): OS Command Injection in baserCMS (high 8.8)
- [CVE-2018-0568](https://insights.sbomify.com/CVE-2018-0568/): File upload in Joruri Gw (high 8.8)
- [CVE-2018-0567](https://insights.sbomify.com/CVE-2018-0567/): Missing authorization in Cybozu Office (medium 6.3)
- [CVE-2018-0566](https://insights.sbomify.com/CVE-2018-0566/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2018-0565](https://insights.sbomify.com/CVE-2018-0565/): Cross-site scripting in Cybozu Office (medium 6.1)
- [CVE-2018-0564](https://insights.sbomify.com/CVE-2018-0564/): Auth bypass in EC-CUBE (high 8.1)
- [CVE-2018-0563](https://insights.sbomify.com/CVE-2018-0563/): Other in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions (high 7.8)
- [CVE-2018-0562](https://insights.sbomify.com/CVE-2018-0562/): Other in Installer of SoundEngine Free (high 7.8)
- [CVE-2018-0561](https://insights.sbomify.com/CVE-2018-0561/): Other in The installer of PhishWall Client Internet Explorer edition (high 7.8)
- [CVE-2018-0560](https://insights.sbomify.com/CVE-2018-0560/): Other in Hatena Bookmark App for iOS (medium 6.5)
- [CVE-2018-0559](https://insights.sbomify.com/CVE-2018-0559/): Cross-site scripting in Cybozu Mailwise (medium 6.1)
- [CVE-2018-0558](https://insights.sbomify.com/CVE-2018-0558/): Cross-site scripting in Cybozu Mailwise (medium 6.1)
- [CVE-2018-0557](https://insights.sbomify.com/CVE-2018-0557/): Cross-site scripting in Cybozu Mailwise (medium 6.1)
- [CVE-2018-0556](https://insights.sbomify.com/CVE-2018-0556/): Command injection in WZR-1750DHP2 (high 8.8)
- [CVE-2018-0555](https://insights.sbomify.com/CVE-2018-0555/): Memory corruption in WZR-1750DHP2 (high 7.8)
- [CVE-2018-0554](https://insights.sbomify.com/CVE-2018-0554/): Auth bypass in WZR-1750DHP2 (high 8.8)
- [CVE-2018-0553](https://insights.sbomify.com/CVE-2018-0553/): Security feature bypass in iRemoconWiFi App for Android (high 7.4)
- [CVE-2018-0552](https://insights.sbomify.com/CVE-2018-0552/): Privilege escalation in The installer of PhishWall Client Firefox and Chrome edition for Windows (high 7.8)
- [CVE-2018-0551](https://insights.sbomify.com/CVE-2018-0551/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2018-0550](https://insights.sbomify.com/CVE-2018-0550/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2018-0549](https://insights.sbomify.com/CVE-2018-0549/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2018-0548](https://insights.sbomify.com/CVE-2018-0548/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2018-0547](https://insights.sbomify.com/CVE-2018-0547/): Cross-site scripting in WP All Import (medium 6.1)
- [CVE-2018-0546](https://insights.sbomify.com/CVE-2018-0546/): Cross-site scripting in WP All Import (medium 6.1)
- [CVE-2018-0545](https://insights.sbomify.com/CVE-2018-0545/): Command injection in LXR (critical 9.8)
- [CVE-2018-0544](https://insights.sbomify.com/CVE-2018-0544/): Other in WinShot (high 7.8)
- [CVE-2018-0543](https://insights.sbomify.com/CVE-2018-0543/): Other in Jtrim (high 7.8)
- [CVE-2018-0542](https://insights.sbomify.com/CVE-2018-0542/): Path traversal in WebProxy (high 7.5)
- [CVE-2018-0541](https://insights.sbomify.com/CVE-2018-0541/): Memory corruption in Tiny FTP Daemon (critical 9.8)
- [CVE-2018-0540](https://insights.sbomify.com/CVE-2018-0540/): Other in ViX (high 7.8)
- [CVE-2018-0539](https://insights.sbomify.com/CVE-2018-0539/): Command injection in QQQ SYSTEMS (critical 9.8)
- [CVE-2018-0538](https://insights.sbomify.com/CVE-2018-0538/): Cross-site scripting in QQQ SYSTEMS (medium 6.1)
- [CVE-2018-0537](https://insights.sbomify.com/CVE-2018-0537/): Cross-site scripting in QQQ SYSTEMS (medium 6.1)
- [CVE-2018-0536](https://insights.sbomify.com/CVE-2018-0536/): Cross-site scripting in QQQ SYSTEMS (medium 6.1)
- [CVE-2018-0535](https://insights.sbomify.com/CVE-2018-0535/): Cross-site scripting in PHP 2chBBS (medium 6.1)
- [CVE-2018-0534](https://insights.sbomify.com/CVE-2018-0534/): Cross-site scripting in ArsenoL (medium 6.1)
- [CVE-2018-0533](https://insights.sbomify.com/CVE-2018-0533/): Missing authorization in Cybozu Garoon (medium 4.9)
- [CVE-2018-0532](https://insights.sbomify.com/CVE-2018-0532/): Missing authorization in Cybozu Garoon (low 2.7)
- [CVE-2018-0531](https://insights.sbomify.com/CVE-2018-0531/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2018-0530](https://insights.sbomify.com/CVE-2018-0530/): SQL injection in Cybozu Garoon (high 8.8)
- [CVE-2018-0529](https://insights.sbomify.com/CVE-2018-0529/): Denial of service in Cybozu Office (medium 4.3)
- [CVE-2018-0528](https://insights.sbomify.com/CVE-2018-0528/): Auth bypass in Cybozu Office (medium 4.3)
- [CVE-2018-0527](https://insights.sbomify.com/CVE-2018-0527/): Cross-site scripting in Cybozu Office (medium 6.1)
- [CVE-2018-0526](https://insights.sbomify.com/CVE-2018-0526/): Information disclosure in cybozu:office (medium 4.3)
- [CVE-2018-0525](https://insights.sbomify.com/CVE-2018-0525/): Path traversal in Jubatus (medium 5.3)
- [CVE-2018-0524](https://insights.sbomify.com/CVE-2018-0524/): Other in Jubatus (high 7.3)
- [CVE-2018-0523](https://insights.sbomify.com/CVE-2018-0523/): Command injection in WXR-1900DHP2 (high 8.8)
- [CVE-2018-0522](https://insights.sbomify.com/CVE-2018-0522/): Memory corruption in WXR-1900DHP2 (high 7.8)
- [CVE-2018-0521](https://insights.sbomify.com/CVE-2018-0521/): Auth bypass in WXR-1900DHP2 (high 8.8)
- [CVE-2018-0520](https://insights.sbomify.com/CVE-2018-0520/): Cross-site request forgery in FS010W (high 8.8)
- [CVE-2018-0519](https://insights.sbomify.com/CVE-2018-0519/): Cross-site scripting in FS010W (medium 4.8)
- [CVE-2018-0518](https://insights.sbomify.com/CVE-2018-0518/): Security feature bypass in LINE for iOS (medium 5.9)
- [CVE-2018-0517](https://insights.sbomify.com/CVE-2018-0517/): Privilege escalation in Anshin net security for Windows (high 7.8)
- [CVE-2018-0516](https://insights.sbomify.com/CVE-2018-0516/): Other in FLET'S v4 / v6 address selection tool (high 7.8)
- [CVE-2018-0515](https://insights.sbomify.com/CVE-2018-0515/): Other in "FLET'S Azukeru Backup Tool" (high 7.8)
- [CVE-2018-0514](https://insights.sbomify.com/CVE-2018-0514/): Command injection in MP Form Mail CGI eCommerce Edition (critical 9.8)
- [CVE-2018-0513](https://insights.sbomify.com/CVE-2018-0513/): Cross-site scripting in MTS Simple Booking Business (medium 6.1)
- [CVE-2018-0512](https://insights.sbomify.com/CVE-2018-0512/): Command injection in IP address setting tool "MagicalFinder" (medium 6.8)
- [CVE-2018-0511](https://insights.sbomify.com/CVE-2018-0511/): Cross-site scripting in WP Retina 2x (medium 6.1)
- [CVE-2018-0510](https://insights.sbomify.com/CVE-2018-0510/): Memory corruption in epg search result viewer(kkcald) (critical 9.8)
- [CVE-2018-0509](https://insights.sbomify.com/CVE-2018-0509/): Cross-site request forgery in epg search result viewer(kkcald) (high 8.8)
- [CVE-2018-0508](https://insights.sbomify.com/CVE-2018-0508/): Cross-site scripting in epg search result viewer(kkcald) (medium 6.1)
- [CVE-2018-0507](https://insights.sbomify.com/CVE-2018-0507/): Other in FLET'S VIRUS CLEAR Easy Setup & Application Tool (high 7.8)
- [CVE-2018-0506](https://insights.sbomify.com/CVE-2018-0506/): Command injection in Nootka (critical 9.8)
- [CVE-2018-0505](https://insights.sbomify.com/CVE-2018-0505/): BotPasswords can bypass CentralAuth's account lock (medium 6.5)
- [CVE-2018-0504](https://insights.sbomify.com/CVE-2018-0504/): Information disclosure in Special:Redirect/logid (medium 6.5)
- [CVE-2018-0503](https://insights.sbomify.com/CVE-2018-0503/): $wgRateLimits entry for 'user' overrides 'newbie' (medium 4.3)
- [CVE-2018-0502](https://insights.sbomify.com/CVE-2018-0502/): Command injection in zsh before 5.6 (critical 9.8)
- [CVE-2018-0501](https://insights.sbomify.com/CVE-2018-0501/): Security feature bypass in APT 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/158/