# Vulnerabilities published in 2018


- [CVE-2018-0500](https://insights.sbomify.com/CVE-2018-0500/): Memory corruption in curl before 7.61.0 (critical 9.8)
- [CVE-2018-0499](https://insights.sbomify.com/CVE-2018-0499/): xapian-core Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2018-0498](https://insights.sbomify.com/CVE-2018-0498/): Information disclosure in ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 (medium 4.7)
- [CVE-2018-0497](https://insights.sbomify.com/CVE-2018-0497/): Weak cryptography in ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 (medium 5.9)
- [CVE-2018-0496](https://insights.sbomify.com/CVE-2018-0496/): Path traversal in DFArc2 before 3.14 unknown (high 7.5)
- [CVE-2018-0495](https://insights.sbomify.com/CVE-2018-0495/): Information disclosure in Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 (medium 4.7)
- [CVE-2018-0494](https://insights.sbomify.com/CVE-2018-0494/): Other in WGet (medium 6.5)
- [CVE-2018-0493](https://insights.sbomify.com/CVE-2018-0493/): Use after free in remctl (high 7.2)
- [CVE-2018-0492](https://insights.sbomify.com/CVE-2018-0492/): Race condition in beep (high 7.0)
- [CVE-2018-0491](https://insights.sbomify.com/CVE-2018-0491/): Use after free in Tor (high 7.5)
- [CVE-2018-0490](https://insights.sbomify.com/CVE-2018-0490/): Null dereference in Tor (high 7.5)
- [CVE-2018-0489](https://insights.sbomify.com/CVE-2018-0489/): Security feature bypass in Shibboleth XMLTooling-C before 1.6.4 (medium 6.5)
- [CVE-2018-0488](https://insights.sbomify.com/CVE-2018-0488/): Memory corruption in ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 (critical 9.8)
- [CVE-2018-0487](https://insights.sbomify.com/CVE-2018-0487/): Memory corruption in ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 (critical 9.8)
- [CVE-2018-0486](https://insights.sbomify.com/CVE-2018-0486/): Security feature bypass in XMLTooling-C before 1.6.3 (medium 6.5)
- [CVE-2018-0485](https://insights.sbomify.com/CVE-2018-0485/): Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability (high 8.6)
- [CVE-2018-0484](https://insights.sbomify.com/CVE-2018-0484/): Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability (medium 5.3)
- [CVE-2018-0483](https://insights.sbomify.com/CVE-2018-0483/): Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability (medium 4.6)
- [CVE-2018-0482](https://insights.sbomify.com/CVE-2018-0482/): Cisco Prime Network Control System Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2018-0481](https://insights.sbomify.com/CVE-2018-0481/): Cisco IOS XE Software Command Injection Vulnerabilities (medium 6.7)
- [CVE-2018-0480](https://insights.sbomify.com/CVE-2018-0480/): Cisco IOS XE Software Errdisable Denial of Service Vulnerability (medium 6.1)
- [CVE-2018-0477](https://insights.sbomify.com/CVE-2018-0477/): Cisco IOS XE Software Command Injection Vulnerabilities (medium 6.7)
- [CVE-2018-0476](https://insights.sbomify.com/CVE-2018-0476/): Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability (medium 5.9)
- [CVE-2018-0475](https://insights.sbomify.com/CVE-2018-0475/): Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability (high 7.4)
- [CVE-2018-0474](https://insights.sbomify.com/CVE-2018-0474/): Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability (medium 4.3)
- [CVE-2018-0473](https://insights.sbomify.com/CVE-2018-0473/): Cisco IOS Software Precision Time Protocol Denial of Service Vulnerability (high 8.6)
- [CVE-2018-0472](https://insights.sbomify.com/CVE-2018-0472/): Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability (high 8.6)
- [CVE-2018-0471](https://insights.sbomify.com/CVE-2018-0471/): Cisco IOS XE Software Cisco Discovery Protocol Memory Leak Vulnerability (high 7.4)
- [CVE-2018-0470](https://insights.sbomify.com/CVE-2018-0470/): Cisco IOS XE Software HTTP Denial of Service Vulnerability (high 8.6)
- [CVE-2018-0469](https://insights.sbomify.com/CVE-2018-0469/): Cisco IOS XE Software Web UI Denial of Service Vulnerability (medium 6.8)
- [CVE-2018-0468](https://insights.sbomify.com/CVE-2018-0468/): Hardcoded credentials in cisco:energy management suite (high 7.8)
- [CVE-2018-0467](https://insights.sbomify.com/CVE-2018-0467/): Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability (high 8.6)
- [CVE-2018-0466](https://insights.sbomify.com/CVE-2018-0466/): Cisco IOS and IOS XE Software OSPFv3 Denial of Service Vulnerability (medium 6.5)
- [CVE-2018-0465](https://insights.sbomify.com/CVE-2018-0465/): Cisco Small Business 300 Series Managed Switches Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2018-0464](https://insights.sbomify.com/CVE-2018-0464/): Cisco Data Center Network Manager Path Traversal Vulnerability (high 8.1)
- [CVE-2018-0463](https://insights.sbomify.com/CVE-2018-0463/): Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability (high 7.5)
- [CVE-2018-0462](https://insights.sbomify.com/CVE-2018-0462/): Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability (medium 4.9)
- [CVE-2018-0461](https://insights.sbomify.com/CVE-2018-0461/): Cisco IP Phone 8800 Series Arbitrary Script Injection Vulnerability (medium 6.5)
- [CVE-2018-0460](https://insights.sbomify.com/CVE-2018-0460/): Cisco Enterprise NFV Infrastructure Software Information Disclosure Vulnerability (medium 6.5)
- [CVE-2018-0459](https://insights.sbomify.com/CVE-2018-0459/): Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability (medium 6.5)
- [CVE-2018-0458](https://insights.sbomify.com/CVE-2018-0458/): Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2018-0457](https://insights.sbomify.com/CVE-2018-0457/): Cisco Webex Player WRF Files Denial of Service Vulnerability (medium 5.5)
- [CVE-2018-0456](https://insights.sbomify.com/CVE-2018-0456/): Cisco NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability (high 7.7)
- [CVE-2018-0455](https://insights.sbomify.com/CVE-2018-0455/): Cisco Firepower System Software Detection Engine Denial of Service Vulnerability (high 7.5)
- [CVE-2018-0454](https://insights.sbomify.com/CVE-2018-0454/): Cisco Cloud Services Platform 2100 Command Injection Vulnerability (high 8.8)
- [CVE-2018-0453](https://insights.sbomify.com/CVE-2018-0453/): Command injection in Cisco FireSIGHT System Software (high 8.2)
- [CVE-2018-0452](https://insights.sbomify.com/CVE-2018-0452/): Cisco Tetration Analytics Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2018-0451](https://insights.sbomify.com/CVE-2018-0451/): Cisco Tetration Analytics Cross-Site Request Forgery Vulnerability (high 8.8)
- [CVE-2018-0450](https://insights.sbomify.com/CVE-2018-0450/): Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2018-0449](https://insights.sbomify.com/CVE-2018-0449/): Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability (medium 5.1)
- [CVE-2018-0448](https://insights.sbomify.com/CVE-2018-0448/): Cisco Digital Network Architecture Center Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2018-0447](https://insights.sbomify.com/CVE-2018-0447/): Cisco Email Security Appliance URL Filtering Bypass Vulnerability (medium 5.3)
- [CVE-2018-0446](https://insights.sbomify.com/CVE-2018-0446/): Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability (high 8.8)
- [CVE-2018-0445](https://insights.sbomify.com/CVE-2018-0445/): Cisco Packaged Contact Center Enterprise Cross-Site Request Forgery Vulnerability (high 8.8)
- [CVE-2018-0444](https://insights.sbomify.com/CVE-2018-0444/): Cisco Packaged Contact Center Enterprise Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2018-0443](https://insights.sbomify.com/CVE-2018-0443/): Denial of service in Cisco Wireless LAN Controller (WLC) (high 8.6)
- [CVE-2018-0442](https://insights.sbomify.com/CVE-2018-0442/): Information disclosure in Cisco Wireless LAN Controller (WLC) (high 7.5)
- [CVE-2018-0441](https://insights.sbomify.com/CVE-2018-0441/): Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability (high 7.4)
- [CVE-2018-0440](https://insights.sbomify.com/CVE-2018-0440/): Cisco Data Center Network Manager Privilege Escalation to Underlying Operating System Vulnerability (high 7.2)
- [CVE-2018-0439](https://insights.sbomify.com/CVE-2018-0439/): Cisco Meeting Server Cross-Site Request Forgery Vulnerability (high 8.8)
- [CVE-2018-0438](https://insights.sbomify.com/CVE-2018-0438/): Cisco Umbrella Enterprise Roaming Client Privilege Escalation Vulnerability (high 7.8)
- [CVE-2018-0437](https://insights.sbomify.com/CVE-2018-0437/): Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability (high 7.8)
- [CVE-2018-0436](https://insights.sbomify.com/CVE-2018-0436/): Cisco Webex Teams Information Disclosure and Modification Vulnerability (high 8.7)
- [CVE-2018-0435](https://insights.sbomify.com/CVE-2018-0435/): Cisco Umbrella API Unauthorized Access Vulnerability (critical 9.1)
- [CVE-2018-0434](https://insights.sbomify.com/CVE-2018-0434/): Cisco SD-WAN Solution Certificate Validation Vulnerability (high 7.4)
- [CVE-2018-0433](https://insights.sbomify.com/CVE-2018-0433/): Cisco SD-WAN Solution Command Injection Vulnerability (high 7.8)
- [CVE-2018-0432](https://insights.sbomify.com/CVE-2018-0432/): Cisco SD-WAN Solution Privilege Escalation Vulnerability (high 8.8)
- [CVE-2018-0431](https://insights.sbomify.com/CVE-2018-0431/): Cisco Integrated Management Controller Command Injection Vulnerability (high 8.8)
- [CVE-2018-0430](https://insights.sbomify.com/CVE-2018-0430/): Cisco Integrated Management Controller Command Injection Vulnerability (high 8.8)
- [CVE-2018-0429](https://insights.sbomify.com/CVE-2018-0429/): Memory corruption in cisco:thor video codec (high 7.8)
- [CVE-2018-0428](https://insights.sbomify.com/CVE-2018-0428/): Privilege escalation in Web Security Appliance (medium 6.7)
- [CVE-2018-0427](https://insights.sbomify.com/CVE-2018-0427/): Command injection in Digital Network Architecture (DNA) Center (high 8.8)
- [CVE-2018-0426](https://insights.sbomify.com/CVE-2018-0426/): Cisco RV110W, RV130W, and RV215W Routers Management Interface Directory Traversal Vulnerability (critical 9.8)
- [CVE-2018-0425](https://insights.sbomify.com/CVE-2018-0425/): Cisco RV110W, RV130W, and RV215W Routers Management Interface Information Disclosure Vulnerability (critical 9.8)
- [CVE-2018-0424](https://insights.sbomify.com/CVE-2018-0424/): Cisco RV110W, RV130W, and RV215W Routers Management Interface Command Injection Vulnerability (high 8.8)
- [CVE-2018-0423](https://insights.sbomify.com/CVE-2018-0423/): Cisco RV110W, RV130W, and RV215W Routers Management Interface Buffer Overflow Vulnerability (high 8.1)
- [CVE-2018-0422](https://insights.sbomify.com/CVE-2018-0422/): Misconfiguration in cisco:webex business suite 31 (high 7.3)
- [CVE-2018-0421](https://insights.sbomify.com/CVE-2018-0421/): Cisco Prime Access Registrar Denial of Service Vulnerability (high 8.6)
- [CVE-2018-0420](https://insights.sbomify.com/CVE-2018-0420/): Cisco Wireless LAN Controller Software Directory Traversal Vulnerability (medium 6.5)
- [CVE-2018-0419](https://insights.sbomify.com/CVE-2018-0419/): Security feature bypass in Email Security Appliance (ESA) (high 7.5)
- [CVE-2018-0418](https://insights.sbomify.com/CVE-2018-0418/): Denial of service in ASR 9000 Series Aggregation Services Router Software (high 8.6)
- [CVE-2018-0417](https://insights.sbomify.com/CVE-2018-0417/): Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability (high 7.5)
- [CVE-2018-0416](https://insights.sbomify.com/CVE-2018-0416/): Cisco Wireless LAN Controller Software Information Disclosure Vulnerability (medium 5.3)
- [CVE-2018-0415](https://insights.sbomify.com/CVE-2018-0415/): Denial of service in Small Business 100 Series Wireless Access Points (medium 6.8)
- [CVE-2018-0414](https://insights.sbomify.com/CVE-2018-0414/): Cisco Secure Access Control Server XML External Entity Injection Vulnerability (medium 5.7)
- [CVE-2018-0413](https://insights.sbomify.com/CVE-2018-0413/): Cross-site request forgery in Cisco Identity Services Engine unknown (high 8.8)
- [CVE-2018-0412](https://insights.sbomify.com/CVE-2018-0412/): Weak cryptography in Small Business 100 Series Wireless Access Points (medium 5.3)
- [CVE-2018-0411](https://insights.sbomify.com/CVE-2018-0411/): Cross-site scripting in Cisco Unified Communications Manager unknown (medium 6.1)
- [CVE-2018-0410](https://insights.sbomify.com/CVE-2018-0410/): Denial of service in AsyncOS Software for Cisco Web Security Appliances (high 8.6)
- [CVE-2018-0409](https://insights.sbomify.com/CVE-2018-0409/): Memory corruption in TelePresence Video Communication Server (VCS) and Expressway (high 7.5)
- [CVE-2018-0408](https://insights.sbomify.com/CVE-2018-0408/): Cross-site scripting in Cisco Small Business 300 Series Managed Switches unknown (medium 5.4)
- [CVE-2018-0407](https://insights.sbomify.com/CVE-2018-0407/): Cross-site scripting in Cisco Small Business 300 Series Managed Switches unknown (medium 5.4)
- [CVE-2018-0406](https://insights.sbomify.com/CVE-2018-0406/): Cross-site scripting in Cisco Web Security Appliance unknown (medium 6.1)
- [CVE-2018-0405](https://insights.sbomify.com/CVE-2018-0405/): Cisco RV180W Wireless-N Multifunction VPN Router Directory Path Traversal Vulnerability (high 7.5)
- [CVE-2018-0404](https://insights.sbomify.com/CVE-2018-0404/): Cisco RV180W Wireless-N Multifunction VPN Router SQL Injection Vulnerability (high 7.5)
- [CVE-2018-0403](https://insights.sbomify.com/CVE-2018-0403/): Information disclosure in Cisco Unified Contact Center Express unknown (critical 9.8)
- [CVE-2018-0402](https://insights.sbomify.com/CVE-2018-0402/): Cross-site request forgery in Cisco Unified Contact Center Express unknown (high 8.8)
- [CVE-2018-0401](https://insights.sbomify.com/CVE-2018-0401/): Cross-site scripting in Cisco Unified Contact Center Express unknown (medium 6.1)
- [CVE-2018-0400](https://insights.sbomify.com/CVE-2018-0400/): Cross-site scripting in Cisco Unified Contact Center Express unknown (medium 6.1)
- [CVE-2018-0399](https://insights.sbomify.com/CVE-2018-0399/): Information disclosure in Cisco Finesse unknown (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/159/