# Vulnerabilities published in 2018 - [CVE-2018-7724](https://insights.sbomify.com/CVE-2018-7724/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-7723](https://insights.sbomify.com/CVE-2018-7723/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-7722](https://insights.sbomify.com/CVE-2018-7722/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-7721](https://insights.sbomify.com/CVE-2018-7721/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7720](https://insights.sbomify.com/CVE-2018-7720/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-7719](https://insights.sbomify.com/CVE-2018-7719/): Path traversal in n/a (high 7.5) - [CVE-2018-7718](https://insights.sbomify.com/CVE-2018-7718/): Missing authorization in n/a (medium 6.5) - [CVE-2018-7717](https://insights.sbomify.com/CVE-2018-7717/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7716](https://insights.sbomify.com/CVE-2018-7716/): Privilege escalation in n/a (critical 9.8) - [CVE-2018-7715](https://insights.sbomify.com/CVE-2018-7715/): Privilege escalation in n/a (critical 9.8) - [CVE-2018-7714](https://insights.sbomify.com/CVE-2018-7714/): Denial of service in n/a (high 7.5) - [CVE-2018-7713](https://insights.sbomify.com/CVE-2018-7713/): Denial of service in n/a (high 7.5) - [CVE-2018-7712](https://insights.sbomify.com/CVE-2018-7712/): Denial of service in n/a (high 7.5) - [CVE-2018-7711](https://insights.sbomify.com/CVE-2018-7711/): SimpleSAMLphp saml2 incorrect signature validation (high 8.1) - [CVE-2018-7707](https://insights.sbomify.com/CVE-2018-7707/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7706](https://insights.sbomify.com/CVE-2018-7706/): Path traversal in n/a (medium 6.5) - [CVE-2018-7705](https://insights.sbomify.com/CVE-2018-7705/): Path traversal in n/a (high 8.1) - [CVE-2018-7704](https://insights.sbomify.com/CVE-2018-7704/): Information disclosure in n/a (medium 6.5) - [CVE-2018-7703](https://insights.sbomify.com/CVE-2018-7703/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7702](https://insights.sbomify.com/CVE-2018-7702/): Missing authorization in n/a (critical 9.1) - [CVE-2018-7701](https://insights.sbomify.com/CVE-2018-7701/): Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers to hijack the authe (medium 6.5) - [CVE-2018-7700](https://insights.sbomify.com/CVE-2018-7700/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-7698](https://insights.sbomify.com/CVE-2018-7698/): Information disclosure in n/a (high 8.1) - [CVE-2018-7692](https://insights.sbomify.com/CVE-2018-7692/): Open redirect in NetIQ eDirectory Versions prior to 9.1.1 HF1 (medium 6.1) - [CVE-2018-7691](https://insights.sbomify.com/CVE-2018-7691/): MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access (medium 6.5) - [CVE-2018-7690](https://insights.sbomify.com/CVE-2018-7690/): MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access (medium 6.5) - [CVE-2018-7689](https://insights.sbomify.com/CVE-2018-7689/): Open Build Service arbitrary package modification (high 7.1) - [CVE-2018-7688](https://insights.sbomify.com/CVE-2018-7688/): Open Build Service accepts arbitrary reviews (high 7.1) - [CVE-2018-7687](https://insights.sbomify.com/CVE-2018-7687/): Client for OES Elevation of Privilege via Buffer Overflow (high 7.8) - [CVE-2018-7686](https://insights.sbomify.com/CVE-2018-7686/): Information disclosure in eDirectory (ZDI) (high 7.5) - [CVE-2018-7685](https://insights.sbomify.com/CVE-2018-7685/): libzypp does not reevaluate malicious rpms once downloaded (high 7.8) - [CVE-2018-7683](https://insights.sbomify.com/CVE-2018-7683/): Information disclosure in Solutions Business Manager 11.4 (high 7.5) - [CVE-2018-7682](https://insights.sbomify.com/CVE-2018-7682/): Other in Solutions Business Manager 11.4 (medium 6.5) - [CVE-2018-7681](https://insights.sbomify.com/CVE-2018-7681/): Cross-site scripting in Solutions Business Manager 11.4 (medium 4.8) - [CVE-2018-7680](https://insights.sbomify.com/CVE-2018-7680/): Cross-site scripting in Solutions Business Manager 11.4 (medium 6.1) - [CVE-2018-7679](https://insights.sbomify.com/CVE-2018-7679/): File upload in Solutions Business Manager 11.4 (critical 9.8) - [CVE-2018-7678](https://insights.sbomify.com/CVE-2018-7678/): XSS vulnerability in NetIQ Access Manager (NAM) Admin Console component (low 3.5) - [CVE-2018-7677](https://insights.sbomify.com/CVE-2018-7677/): CSRF in NetIQ Access Manager (NAM) Identity Server component (low 3.5) - [CVE-2018-7676](https://insights.sbomify.com/CVE-2018-7676/): IDM Information Leakage (low 3.9) - [CVE-2018-7675](https://insights.sbomify.com/CVE-2018-7675/): Potential Information Disclosure in Sentinel (low 2.8) - [CVE-2018-7674](https://insights.sbomify.com/CVE-2018-7674/): IDM URL Redirection attack (low 2.1) - [CVE-2018-7673](https://insights.sbomify.com/CVE-2018-7673/): NetIQ Identity Manager DoS Attack (medium 5.1) - [CVE-2018-7669](https://insights.sbomify.com/CVE-2018-7669/): Path traversal in n/a (high 7.5) - [CVE-2018-7668](https://insights.sbomify.com/CVE-2018-7668/): Path traversal in n/a (high 7.5) - [CVE-2018-7667](https://insights.sbomify.com/CVE-2018-7667/): vrana/adminer vulnerable to SSRF by connecting to privileged ports (critical 9.8) - [CVE-2018-7666](https://insights.sbomify.com/CVE-2018-7666/): SQL injection in n/a (critical 9.8) - [CVE-2018-7665](https://insights.sbomify.com/CVE-2018-7665/): File upload in n/a (critical 9.8) - [CVE-2018-7664](https://insights.sbomify.com/CVE-2018-7664/): An issue was discovered in ClipBucket before 4.0.0 Release 4902. (critical 9.8) - [CVE-2018-7663](https://insights.sbomify.com/CVE-2018-7663/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7662](https://insights.sbomify.com/CVE-2018-7662/): Information disclosure in n/a (medium 5.3) - [CVE-2018-7661](https://insights.sbomify.com/CVE-2018-7661/): Information disclosure in n/a (medium 5.3) - [CVE-2018-7660](https://insights.sbomify.com/CVE-2018-7660/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-7659](https://insights.sbomify.com/CVE-2018-7659/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-7658](https://insights.sbomify.com/CVE-2018-7658/): Denial of service in n/a (high 7.5) - [CVE-2018-7654](https://insights.sbomify.com/CVE-2018-7654/): Path traversal in n/a (medium 6.5) - [CVE-2018-7653](https://insights.sbomify.com/CVE-2018-7653/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7652](https://insights.sbomify.com/CVE-2018-7652/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7651](https://insights.sbomify.com/CVE-2018-7651/): Regular Expression Denial of Service in ssri (medium 5.9) - [CVE-2018-7650](https://insights.sbomify.com/CVE-2018-7650/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-7649](https://insights.sbomify.com/CVE-2018-7649/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7648](https://insights.sbomify.com/CVE-2018-7648/): Memory corruption in n/a (critical 9.8) - [CVE-2018-7644](https://insights.sbomify.com/CVE-2018-7644/): SimpleSAMLphp Improper Verification of Cryptographic Signature (high 7.5) - [CVE-2018-7643](https://insights.sbomify.com/CVE-2018-7643/): Integer overflow in n/a (high 7.8) - [CVE-2018-7642](https://insights.sbomify.com/CVE-2018-7642/): Null dereference in n/a (medium 5.5) - [CVE-2018-7641](https://insights.sbomify.com/CVE-2018-7641/): Memory corruption in n/a (high 7.8) - [CVE-2018-7640](https://insights.sbomify.com/CVE-2018-7640/): Memory corruption in n/a (high 7.8) - [CVE-2018-7639](https://insights.sbomify.com/CVE-2018-7639/): Memory corruption in n/a (high 7.8) - [CVE-2018-7638](https://insights.sbomify.com/CVE-2018-7638/): Memory corruption in n/a (high 7.8) - [CVE-2018-7637](https://insights.sbomify.com/CVE-2018-7637/): Memory corruption in n/a (high 7.8) - [CVE-2018-7636](https://insights.sbomify.com/CVE-2018-7636/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7635](https://insights.sbomify.com/CVE-2018-7635/): Other in n/a (medium 5.3) - [CVE-2018-7634](https://insights.sbomify.com/CVE-2018-7634/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-7633](https://insights.sbomify.com/CVE-2018-7633/): Cross-site scripting in n/a (critical 9.8) - [CVE-2018-7632](https://insights.sbomify.com/CVE-2018-7632/): Memory corruption in n/a (high 7.5) - [CVE-2018-7631](https://insights.sbomify.com/CVE-2018-7631/): Memory corruption in n/a (critical 9.8) - [CVE-2018-7603](https://insights.sbomify.com/CVE-2018-7603/): Search Autocomplete (medium 6.1) - [CVE-2018-7602](https://insights.sbomify.com/CVE-2018-7602/): Drupal Core Remote Code Execution (high 8.1, exploited in the wild) - [CVE-2018-7600](https://insights.sbomify.com/CVE-2018-7600/): Drupal Core Remote Code Execution (critical 9.8, exploited in the wild) - [CVE-2018-7590](https://insights.sbomify.com/CVE-2018-7590/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-7589](https://insights.sbomify.com/CVE-2018-7589/): Use after free in n/a (high 7.8) - [CVE-2018-7588](https://insights.sbomify.com/CVE-2018-7588/): Memory corruption in n/a (high 7.8) - [CVE-2018-7587](https://insights.sbomify.com/CVE-2018-7587/): Denial of service in n/a (high 7.8) - [CVE-2018-7586](https://insights.sbomify.com/CVE-2018-7586/): Path traversal in n/a (high 7.5) - [CVE-2018-7584](https://insights.sbomify.com/CVE-2018-7584/): Memory corruption in n/a (critical 9.8) - [CVE-2018-7583](https://insights.sbomify.com/CVE-2018-7583/): Denial of service in n/a (high 7.5) - [CVE-2018-7582](https://insights.sbomify.com/CVE-2018-7582/): Denial of service in n/a (high 7.5) - [CVE-2018-7581](https://insights.sbomify.com/CVE-2018-7581/): Misconfiguration in n/a (high 7.8) - [CVE-2018-7580](https://insights.sbomify.com/CVE-2018-7580/): Denial of service in n/a (high 7.5) - [CVE-2018-7579](https://insights.sbomify.com/CVE-2018-7579/): SQL injection in n/a (high 7.2) - [CVE-2018-7577](https://insights.sbomify.com/CVE-2018-7577/): Improper Input Validation in Google TensorFlow (high 8.1) - [CVE-2018-7576](https://insights.sbomify.com/CVE-2018-7576/): Null pointer dereference in TensorFlow leads to exploitation (medium 6.5) - [CVE-2018-7575](https://insights.sbomify.com/CVE-2018-7575/): Integer Overflow or Wraparound in Google TensorFlow (critical 9.8) - [CVE-2018-7573](https://insights.sbomify.com/CVE-2018-7573/): Memory corruption in n/a (critical 9.8) - [CVE-2018-7572](https://insights.sbomify.com/CVE-2018-7572/): Auth bypass in n/a (medium 6.8) - [CVE-2018-7570](https://insights.sbomify.com/CVE-2018-7570/): Null dereference in n/a (medium 5.5) - [CVE-2018-7569](https://insights.sbomify.com/CVE-2018-7569/): Integer overflow in n/a (medium 5.5) - [CVE-2018-7568](https://insights.sbomify.com/CVE-2018-7568/): Integer overflow in n/a (medium 5.5) - [CVE-2018-7567](https://insights.sbomify.com/CVE-2018-7567/): File upload in n/a (high 7.2) - [CVE-2018-7566](https://insights.sbomify.com/CVE-2018-7566/): Memory corruption in n/a (high 7.8) - [CVE-2018-7565](https://insights.sbomify.com/CVE-2018-7565/): CSRF exists on Polycom QDX 6000 devices. (high 8.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/17/