# Vulnerabilities published in 2018 - [CVE-2018-0193](https://insights.sbomify.com/CVE-2018-0193/): Command injection in Cisco IOS XE (high 7.8) - [CVE-2018-0190](https://insights.sbomify.com/CVE-2018-0190/): Cross-site scripting in Cisco IOS XE (medium 6.1) - [CVE-2018-0189](https://insights.sbomify.com/CVE-2018-0189/): Denial of service in Cisco IOS and IOS XE (medium 5.3) - [CVE-2018-0188](https://insights.sbomify.com/CVE-2018-0188/): Cross-site scripting in Cisco IOS XE (medium 6.1) - [CVE-2018-0187](https://insights.sbomify.com/CVE-2018-0187/): Cisco Identity Services Engine Privileged Account Sensitive Information Disclosure Vulnerability (medium 6.5) - [CVE-2018-0186](https://insights.sbomify.com/CVE-2018-0186/): Cross-site scripting in Cisco IOS XE (medium 6.1) - [CVE-2018-0185](https://insights.sbomify.com/CVE-2018-0185/): Command injection in Cisco IOS XE (high 7.8) - [CVE-2018-0184](https://insights.sbomify.com/CVE-2018-0184/): Command injection in Cisco IOS XE (medium 6.7) - [CVE-2018-0183](https://insights.sbomify.com/CVE-2018-0183/): Command injection in Cisco IOS XE (medium 6.7) - [CVE-2018-0182](https://insights.sbomify.com/CVE-2018-0182/): Command injection in Cisco IOS XE (high 7.8) - [CVE-2018-0181](https://insights.sbomify.com/CVE-2018-0181/): Auth bypass in Cisco Policy Suite (CPS) Software (high 7.3) - [CVE-2018-0180](https://insights.sbomify.com/CVE-2018-0180/): Cisco IOS Software Denial-of-Service (medium 6.8, exploited in the wild) - [CVE-2018-0179](https://insights.sbomify.com/CVE-2018-0179/): Cisco IOS Software Denial-of-Service (medium 6.8, exploited in the wild) - [CVE-2018-0177](https://insights.sbomify.com/CVE-2018-0177/): Denial of service in Cisco IOS XE (high 7.5) - [CVE-2018-0176](https://insights.sbomify.com/CVE-2018-0176/): Command injection in Cisco IOS XE (high 7.8) - [CVE-2018-0175](https://insights.sbomify.com/CVE-2018-0175/): Cisco IOS, XR, and XE Software Buffer Overflow (high 8.0, exploited in the wild) - [CVE-2018-0174](https://insights.sbomify.com/CVE-2018-0174/): Cisco IOS Software and Cisco IOS XE Software Improper Input Validation (high 8.6, exploited in the wild) - [CVE-2018-0173](https://insights.sbomify.com/CVE-2018-0173/): Cisco IOS and IOS XE Software Improper Input Validation (high 8.6, exploited in the wild) - [CVE-2018-0172](https://insights.sbomify.com/CVE-2018-0172/): Cisco IOS and IOS XE Software Improper Input Validation (high 8.6, exploited in the wild) - [CVE-2018-0171](https://insights.sbomify.com/CVE-2018-0171/): Cisco IOS and IOS XE Software Smart Install Remote Code Execution (high 7.5, exploited in the wild) - [CVE-2018-0170](https://insights.sbomify.com/CVE-2018-0170/): Use after free in Cisco IOS XE (high 7.5) - [CVE-2018-0169](https://insights.sbomify.com/CVE-2018-0169/): Command injection in Cisco IOS XE (high 7.8) - [CVE-2018-0167](https://insights.sbomify.com/CVE-2018-0167/): Cisco IOS, XR, and XE Software Buffer Overflow (high 8.8, exploited in the wild) - [CVE-2018-0165](https://insights.sbomify.com/CVE-2018-0165/): Denial of service in Cisco IOS XE (high 7.4) - [CVE-2018-0164](https://insights.sbomify.com/CVE-2018-0164/): Denial of service in Cisco IOS XE (high 8.6) - [CVE-2018-0163](https://insights.sbomify.com/CVE-2018-0163/): Auth bypass in Cisco IOS (medium 6.5) - [CVE-2018-0161](https://insights.sbomify.com/CVE-2018-0161/): Cisco IOS Software Resource Management Errors (medium 6.3, exploited in the wild) - [CVE-2018-0160](https://insights.sbomify.com/CVE-2018-0160/): Memory corruption in Cisco IOS XE (medium 6.3) - [CVE-2018-0159](https://insights.sbomify.com/CVE-2018-0159/): Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service (high 7.5, exploited in the wild) - [CVE-2018-0158](https://insights.sbomify.com/CVE-2018-0158/): Cisco IOS and XE Software Internet Key Exchange Memory Leak (high 8.6, exploited in the wild) - [CVE-2018-0157](https://insights.sbomify.com/CVE-2018-0157/): Denial of service in Cisco IOS XE (high 8.6) - [CVE-2018-0156](https://insights.sbomify.com/CVE-2018-0156/): Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service (high 7.5, exploited in the wild) - [CVE-2018-0155](https://insights.sbomify.com/CVE-2018-0155/): Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service (high 8.6, exploited in the wild) - [CVE-2018-0154](https://insights.sbomify.com/CVE-2018-0154/): Cisco IOS Software Integrated Services Module for VPN Denial-of-Service (high 7.5, exploited in the wild) - [CVE-2018-0152](https://insights.sbomify.com/CVE-2018-0152/): Privilege escalation in Cisco IOS XE Software (high 8.8) - [CVE-2018-0151](https://insights.sbomify.com/CVE-2018-0151/): Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution (critical 9.8, exploited in the wild) - [CVE-2018-0150](https://insights.sbomify.com/CVE-2018-0150/): Hardcoded credentials in Cisco IOS XE (critical 9.8) - [CVE-2018-0149](https://insights.sbomify.com/CVE-2018-0149/): Cross-site scripting in Cisco Integrated Management Controller Supervisor and Cisco UCS Director unknown (medium 4.8) - [CVE-2018-0148](https://insights.sbomify.com/CVE-2018-0148/): Cross-site request forgery in Cisco UCS Director and Cisco Integrated Management Controller Supervisor (high 8.8) - [CVE-2018-0147](https://insights.sbomify.com/CVE-2018-0147/): Cisco Secure Access Control System Java Deserialization (critical 9.8, exploited in the wild) - [CVE-2018-0146](https://insights.sbomify.com/CVE-2018-0146/): Cross-site request forgery in Cisco Data Center Analytics Framework (medium 5.4) - [CVE-2018-0145](https://insights.sbomify.com/CVE-2018-0145/): Cross-site scripting in Cisco Data Center Analytics Framework (medium 6.1) - [CVE-2018-0144](https://insights.sbomify.com/CVE-2018-0144/): Cross-site scripting in Cisco Prime Data Center Network Manager (medium 6.1) - [CVE-2018-0141](https://insights.sbomify.com/CVE-2018-0141/): Hardcoded credentials in Cisco Prime Collaboration Provisioning (high 8.4) - [CVE-2018-0140](https://insights.sbomify.com/CVE-2018-0140/): Missing authorization in Cisco Email Security Appliance and Cisco Content Security Management Appliance (medium 6.5) - [CVE-2018-0139](https://insights.sbomify.com/CVE-2018-0139/): Denial of service in Cisco Unified Customer Voice Portal (high 8.6) - [CVE-2018-0138](https://insights.sbomify.com/CVE-2018-0138/): Security feature bypass in Cisco Firepower System Software (medium 5.3) - [CVE-2018-0137](https://insights.sbomify.com/CVE-2018-0137/): Denial of service in Cisco Prime Network (high 8.6) - [CVE-2018-0136](https://insights.sbomify.com/CVE-2018-0136/): Denial of service in Cisco Aggregation Services Router 9000 Series (high 8.6) - [CVE-2018-0135](https://insights.sbomify.com/CVE-2018-0135/): Information disclosure in Cisco Unified Communications Manager (medium 4.3) - [CVE-2018-0134](https://insights.sbomify.com/CVE-2018-0134/): Information disclosure in Cisco Policy Suite (medium 5.3) - [CVE-2018-0132](https://insights.sbomify.com/CVE-2018-0132/): Denial of service in Cisco IOS XR (high 8.6) - [CVE-2018-0131](https://insights.sbomify.com/CVE-2018-0131/): Weak cryptography in IOS and IOS XE (medium 5.9) - [CVE-2018-0130](https://insights.sbomify.com/CVE-2018-0130/): Hardcoded credentials in Cisco Elastic Services Controller (critical 9.8) - [CVE-2018-0129](https://insights.sbomify.com/CVE-2018-0129/): Cross-site scripting in Cisco Data Center Analytics Framework (medium 6.1) - [CVE-2018-0128](https://insights.sbomify.com/CVE-2018-0128/): Cross-site scripting in Cisco Data Center Analytics Framework (medium 6.1) - [CVE-2018-0127](https://insights.sbomify.com/CVE-2018-0127/): Missing authorization in Cisco RV132W and RV134W Wireless VPN Routers (critical 9.8) - [CVE-2018-0125](https://insights.sbomify.com/CVE-2018-0125/): Cisco VPN Routers Remote Code Execution (critical 9.8, exploited in the wild) - [CVE-2018-0124](https://insights.sbomify.com/CVE-2018-0124/): Weak cryptography in Cisco Unified Communications Domain Manager (critical 9.8) - [CVE-2018-0123](https://insights.sbomify.com/CVE-2018-0123/): Path traversal in Cisco IOS and IOS XE (medium 5.5) - [CVE-2018-0122](https://insights.sbomify.com/CVE-2018-0122/): Command injection in Cisco StarOS for Cisco ASR 5000 Series Aggregation Services Routers (medium 4.4) - [CVE-2018-0121](https://insights.sbomify.com/CVE-2018-0121/): Auth bypass in Cisco Elastic Services Controller (critical 9.8) - [CVE-2018-0120](https://insights.sbomify.com/CVE-2018-0120/): SQL injection in Cisco Unified Communications Manager (medium 4.3) - [CVE-2018-0119](https://insights.sbomify.com/CVE-2018-0119/): Auth bypass in Cisco Spark (medium 4.7) - [CVE-2018-0118](https://insights.sbomify.com/CVE-2018-0118/): Cross-site scripting in Cisco Unified Communications Manager (medium 6.1) - [CVE-2018-0117](https://insights.sbomify.com/CVE-2018-0117/): Denial of service in Cisco Virtualized Packet Core-Distributed Instance (high 8.6) - [CVE-2018-0116](https://insights.sbomify.com/CVE-2018-0116/): Auth bypass in Cisco Policy Suite (high 7.2) - [CVE-2018-0115](https://insights.sbomify.com/CVE-2018-0115/): Command injection in Cisco StarOS (medium 6.7) - [CVE-2018-0114](https://insights.sbomify.com/CVE-2018-0114/): Cisco node-jose improper validation of JWT signature (high 7.5) - [CVE-2018-0113](https://insights.sbomify.com/CVE-2018-0113/): Command injection in Cisco UCS Central (high 8.8) - [CVE-2018-0112](https://insights.sbomify.com/CVE-2018-0112/): Code injection in Cisco WebEx Clients (critical 9.0) - [CVE-2018-0111](https://insights.sbomify.com/CVE-2018-0111/): Information disclosure in Cisco WebEx Meetings Server (medium 5.3) - [CVE-2018-0110](https://insights.sbomify.com/CVE-2018-0110/): Missing authorization in Cisco WebEx Meetings Server (high 8.1) - [CVE-2018-0109](https://insights.sbomify.com/CVE-2018-0109/): Information disclosure in Cisco WebEx Meetings Server (low 2.7) - [CVE-2018-0108](https://insights.sbomify.com/CVE-2018-0108/): XML external entity in Cisco WebEx Meetings Server (medium 5.3) - [CVE-2018-0107](https://insights.sbomify.com/CVE-2018-0107/): Cross-site request forgery in Cisco Prime Service Catalog (high 8.8) - [CVE-2018-0106](https://insights.sbomify.com/CVE-2018-0106/): Information disclosure in Cisco Elastic Services Controller (low 3.3) - [CVE-2018-0105](https://insights.sbomify.com/CVE-2018-0105/): Information disclosure in Cisco Unified Communications Manager (medium 5.3) - [CVE-2018-0104](https://insights.sbomify.com/CVE-2018-0104/): Other in Cisco WebEx Advanced Recording Format Player (critical 9.6) - [CVE-2018-0103](https://insights.sbomify.com/CVE-2018-0103/): Memory corruption in Cisco WebEx Network Recording Player (high 7.8) - [CVE-2018-0102](https://insights.sbomify.com/CVE-2018-0102/): Memory corruption in Cisco NX-OS (high 7.4) - [CVE-2018-0101](https://insights.sbomify.com/CVE-2018-0101/): Memory corruption in Cisco Adaptive Security Appliance (critical 10.0) - [CVE-2018-0100](https://insights.sbomify.com/CVE-2018-0100/): XML external entity in Cisco AnyConnect (medium 4.4) - [CVE-2018-0099](https://insights.sbomify.com/CVE-2018-0099/): Command injection in Cisco D9800 Network Transport Receiver (high 8.8) - [CVE-2018-0098](https://insights.sbomify.com/CVE-2018-0098/): Cross-site scripting in Cisco WAP150 Wireless (medium 6.1) - [CVE-2018-0097](https://insights.sbomify.com/CVE-2018-0097/): Open redirect in Cisco Prime Infrastructure (medium 6.1) - [CVE-2018-0096](https://insights.sbomify.com/CVE-2018-0096/): Privilege escalation in Cisco Prime Infrastructure (medium 5.9) - [CVE-2018-0095](https://insights.sbomify.com/CVE-2018-0095/): Privilege escalation in Cisco Email Security and Content Security Management Appliance (high 7.8) - [CVE-2018-0094](https://insights.sbomify.com/CVE-2018-0094/): Denial of service in Cisco UCS Central Software (high 7.5) - [CVE-2018-0093](https://insights.sbomify.com/CVE-2018-0093/): Cross-site scripting in Cisco Web Security Appliance (medium 6.1) - [CVE-2018-0092](https://insights.sbomify.com/CVE-2018-0092/): Missing authorization in Cisco NX-OS (high 7.1) - [CVE-2018-0091](https://insights.sbomify.com/CVE-2018-0091/): Cross-site scripting in Cisco Identity Services Engine (medium 6.1) - [CVE-2018-0090](https://insights.sbomify.com/CVE-2018-0090/): Security feature bypass in Cisco NX-OS (high 7.5) - [CVE-2018-0089](https://insights.sbomify.com/CVE-2018-0089/): Information disclosure in Cisco Policy Suite (high 7.5) - [CVE-2018-0088](https://insights.sbomify.com/CVE-2018-0088/): Memory corruption in Cisco IOS (medium 6.7) - [CVE-2018-0087](https://insights.sbomify.com/CVE-2018-0087/): Auth bypass in Cisco Web Security Appliance (medium 5.6) - [CVE-2018-0086](https://insights.sbomify.com/CVE-2018-0086/): Denial of service in Cisco Unified Customer Voice Portal (high 8.6) - [CVE-2018-0063](https://insights.sbomify.com/CVE-2018-0063/): Denial of service in Junos OS (medium 6.5) - [CVE-2018-0062](https://insights.sbomify.com/CVE-2018-0062/): Junos OS: Denial of Service in J-Web (medium 5.3) - [CVE-2018-0061](https://insights.sbomify.com/CVE-2018-0061/): Junos OS: Denial of service in telnetd (medium 5.3) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/162/