# Vulnerabilities published in 2018


- [CVE-2018-7564](https://insights.sbomify.com/CVE-2018-7564/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-7563](https://insights.sbomify.com/CVE-2018-7563/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-7562](https://insights.sbomify.com/CVE-2018-7562/): Race condition in n/a (high 7.5)
- [CVE-2018-7561](https://insights.sbomify.com/CVE-2018-7561/): Memory corruption in n/a (critical 9.8)
- [CVE-2018-7560](https://insights.sbomify.com/CVE-2018-7560/): AWS Lambda parser is vulnerable to Regular Expression Denial of Service (high 7.5)
- [CVE-2018-7559](https://insights.sbomify.com/CVE-2018-7559/): OPC UA applications can allow a remote attacker to determine a Server's private key (medium 5.3)
- [CVE-2018-7557](https://insights.sbomify.com/CVE-2018-7557/): Denial of service in n/a (medium 6.5)
- [CVE-2018-7556](https://insights.sbomify.com/CVE-2018-7556/): Information disclosure in n/a (critical 9.1)
- [CVE-2018-7554](https://insights.sbomify.com/CVE-2018-7554/): Use after free in n/a (critical 9.8)
- [CVE-2018-7553](https://insights.sbomify.com/CVE-2018-7553/): Memory corruption in n/a (critical 9.8)
- [CVE-2018-7552](https://insights.sbomify.com/CVE-2018-7552/): Use after free in n/a (critical 9.8)
- [CVE-2018-7551](https://insights.sbomify.com/CVE-2018-7551/): Use after free in n/a (critical 9.8)
- [CVE-2018-7550](https://insights.sbomify.com/CVE-2018-7550/): Memory corruption in n/a (high 8.8)
- [CVE-2018-7549](https://insights.sbomify.com/CVE-2018-7549/): Null dereference in n/a (high 7.5)
- [CVE-2018-7548](https://insights.sbomify.com/CVE-2018-7548/): Null dereference in n/a (critical 9.8)
- [CVE-2018-7547](https://insights.sbomify.com/CVE-2018-7547/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2018-7546](https://insights.sbomify.com/CVE-2018-7546/): Denial of service in n/a (medium 5.5)
- [CVE-2018-7544](https://insights.sbomify.com/CVE-2018-7544/): Cross-site request forgery in n/a (critical 9.1)
- [CVE-2018-7543](https://insights.sbomify.com/CVE-2018-7543/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-7542](https://insights.sbomify.com/CVE-2018-7542/): Null dereference in n/a (medium 6.5)
- [CVE-2018-7541](https://insights.sbomify.com/CVE-2018-7541/): Privilege escalation in n/a (high 8.8)
- [CVE-2018-7540](https://insights.sbomify.com/CVE-2018-7540/): Denial of service in n/a (medium 6.5)
- [CVE-2018-7539](https://insights.sbomify.com/CVE-2018-7539/): Path traversal in n/a (critical 9.8)
- [CVE-2018-7538](https://insights.sbomify.com/CVE-2018-7538/): SQL injection in n/a (critical 9.8)
- [CVE-2018-7537](https://insights.sbomify.com/CVE-2018-7537/): Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters (medium 5.3)
- [CVE-2018-7536](https://insights.sbomify.com/CVE-2018-7536/): Django denial-of-service possibility in urlize and urlizetrunc template filters (medium 5.3)
- [CVE-2018-7535](https://insights.sbomify.com/CVE-2018-7535/): Privilege escalation in n/a (high 7.8)
- [CVE-2018-7534](https://insights.sbomify.com/CVE-2018-7534/): Information disclosure in n/a (medium 4.7)
- [CVE-2018-7533](https://insights.sbomify.com/CVE-2018-7533/): Misconfiguration in OSIsoft PI Data Archive (high 7.8)
- [CVE-2018-7532](https://insights.sbomify.com/CVE-2018-7532/): Auth bypass in Geutebrück G-Cam/EFD-2250 (part n° 5.02024) firmware and Topline TopFD-2125 (part n° 5.02820) firmware (critical 9.8)
- [CVE-2018-7531](https://insights.sbomify.com/CVE-2018-7531/): Denial of service in OSIsoft PI Data Archive (medium 5.9)
- [CVE-2018-7530](https://insights.sbomify.com/CVE-2018-7530/): Memory corruption in Omron CX-One (high 7.8)
- [CVE-2018-7529](https://insights.sbomify.com/CVE-2018-7529/): Deserialization in OSIsoft PI Data Archive (high 7.5)
- [CVE-2018-7528](https://insights.sbomify.com/CVE-2018-7528/): SQL injection in Geutebrück G-Cam/EFD-2250 (part n° 5.02024) firmware and Topline TopFD-2125 (part n° 5.02820) firmware (critical 9.1)
- [CVE-2018-7527](https://insights.sbomify.com/CVE-2018-7527/): Memory corruption in LeviStudio HMI Editor (medium 5.3)
- [CVE-2018-7526](https://insights.sbomify.com/CVE-2018-7526/): Missing authorization in n/a (high 7.5)
- [CVE-2018-7525](https://insights.sbomify.com/CVE-2018-7525/): Null dereference in Omron CX-Supervisor (medium 5.3)
- [CVE-2018-7524](https://insights.sbomify.com/CVE-2018-7524/): Cross-site request forgery in Geutebrück G-Cam/EFD-2250 (part n° 5.02024) firmware and Topline TopFD-2125 (part n° 5.02820) firmware (high 8.8)
- [CVE-2018-7523](https://insights.sbomify.com/CVE-2018-7523/): Use after free in Omron CX-Supervisor (medium 5.3)
- [CVE-2018-7522](https://insights.sbomify.com/CVE-2018-7522/): Memory corruption in Triconex Tricon (medium 6.7)
- [CVE-2018-7521](https://insights.sbomify.com/CVE-2018-7521/): Use after free in Omron CX-Supervisor (medium 5.3)
- [CVE-2018-7520](https://insights.sbomify.com/CVE-2018-7520/): Missing authorization in Geutebrück G-Cam/EFD-2250 (part n° 5.02024) firmware and Topline TopFD-2125 (part n° 5.02820) firmware (critical 9.8)
- [CVE-2018-7519](https://insights.sbomify.com/CVE-2018-7519/): Memory corruption in Omron CX-Supervisor (medium 5.3)
- [CVE-2018-7518](https://insights.sbomify.com/CVE-2018-7518/): Information disclosure in BeaconMedæs TotalAlert Scroll Medical Air Systems web application (critical 9.8)
- [CVE-2018-7517](https://insights.sbomify.com/CVE-2018-7517/): Memory corruption in Omron CX-Supervisor (medium 5.3)
- [CVE-2018-7516](https://insights.sbomify.com/CVE-2018-7516/): Server-side request forgery in Geutebrück G-Cam/EFD-2250 (part n° 5.02024) firmware and Topline TopFD-2125 (part n° 5.02820) firmware (high 7.3)
- [CVE-2018-7515](https://insights.sbomify.com/CVE-2018-7515/): Null dereference in BeaconMedæs TotalAlert Scroll Medical Air Systems web application (medium 5.3)
- [CVE-2018-7514](https://insights.sbomify.com/CVE-2018-7514/): Memory corruption in Omron CX-One (high 7.8)
- [CVE-2018-7513](https://insights.sbomify.com/CVE-2018-7513/): Memory corruption in Omron CX-Supervisor (medium 5.3)
- [CVE-2018-7512](https://insights.sbomify.com/CVE-2018-7512/): Cross-site scripting in Geutebrück G-Cam/EFD-2250 (part n° 5.02024) firmware and Topline TopFD-2125 (part n° 5.02820) firmware (medium 6.1)
- [CVE-2018-7511](https://insights.sbomify.com/CVE-2018-7511/): Memory corruption in Eaton ELCSoft (medium 5.3)
- [CVE-2018-7510](https://insights.sbomify.com/CVE-2018-7510/): Information disclosure in BeaconMedaes TotalAlert Scroll Medical Air Systems web application (critical 9.8)
- [CVE-2018-7509](https://insights.sbomify.com/CVE-2018-7509/): Memory corruption in Delta Electronics WPLSoft (high 8.8)
- [CVE-2018-7508](https://insights.sbomify.com/CVE-2018-7508/): Cross-site scripting in OSIsoft PI Web API (medium 6.1)
- [CVE-2018-7507](https://insights.sbomify.com/CVE-2018-7507/): Memory corruption in Delta Electronics WPLSoft (high 8.8)
- [CVE-2018-7506](https://insights.sbomify.com/CVE-2018-7506/): Information disclosure in Moxa MXview (high 7.5)
- [CVE-2018-7505](https://insights.sbomify.com/CVE-2018-7505/): File upload in WebAccess (critical 9.8)
- [CVE-2018-7504](https://insights.sbomify.com/CVE-2018-7504/): Cross-site scripting in OSIsoft PI Vision (medium 6.1)
- [CVE-2018-7503](https://insights.sbomify.com/CVE-2018-7503/): Path traversal in WebAccess (high 7.5)
- [CVE-2018-7502](https://insights.sbomify.com/CVE-2018-7502/): Privilege escalation in Beckhoff TwinCAT PLC products (high 7.8)
- [CVE-2018-7501](https://insights.sbomify.com/CVE-2018-7501/): SQL injection in WebAccess (high 7.5)
- [CVE-2018-7500](https://insights.sbomify.com/CVE-2018-7500/): Privilege escalation in OSIsoft PI Web API (critical 9.8)
- [CVE-2018-7499](https://insights.sbomify.com/CVE-2018-7499/): Memory corruption in WebAccess (critical 9.8)
- [CVE-2018-7498](https://insights.sbomify.com/CVE-2018-7498/): Weak cryptography in Philips Alice 6 System (critical 9.8)
- [CVE-2018-7497](https://insights.sbomify.com/CVE-2018-7497/): Null dereference in WebAccess (critical 9.8)
- [CVE-2018-7496](https://insights.sbomify.com/CVE-2018-7496/): Information disclosure in OSIsoft PI Vision (medium 5.3)
- [CVE-2018-7495](https://insights.sbomify.com/CVE-2018-7495/): Path traversal in WebAccess (high 7.5)
- [CVE-2018-7494](https://insights.sbomify.com/CVE-2018-7494/): Memory corruption in Delta Electronics WPLSoft (high 8.8)
- [CVE-2018-7493](https://insights.sbomify.com/CVE-2018-7493/): Privilege escalation in n/a (critical 9.8)
- [CVE-2018-7492](https://insights.sbomify.com/CVE-2018-7492/): Null dereference in n/a (medium 5.5)
- [CVE-2018-7491](https://insights.sbomify.com/CVE-2018-7491/): Other in n/a (high 7.5)
- [CVE-2018-7490](https://insights.sbomify.com/CVE-2018-7490/): uWSGI Directory Traversal vulnerability (high 7.5)
- [CVE-2018-7489](https://insights.sbomify.com/CVE-2018-7489/): FasterXML jackson-databind allows unauthenticated remote code execution (critical 9.8)
- [CVE-2018-7487](https://insights.sbomify.com/CVE-2018-7487/): Memory corruption in n/a (high 7.8)
- [CVE-2018-7486](https://insights.sbomify.com/CVE-2018-7486/): Code injection in n/a (high 7.2)
- [CVE-2018-7485](https://insights.sbomify.com/CVE-2018-7485/): Memory corruption in n/a (critical 9.8)
- [CVE-2018-7484](https://insights.sbomify.com/CVE-2018-7484/): Privilege escalation in n/a (high 7.8)
- [CVE-2018-7482](https://insights.sbomify.com/CVE-2018-7482/): Path traversal in n/a (high 7.5)
- [CVE-2018-7480](https://insights.sbomify.com/CVE-2018-7480/): Use after free in n/a (high 7.8)
- [CVE-2018-7479](https://insights.sbomify.com/CVE-2018-7479/): Information disclosure in n/a (medium 5.3)
- [CVE-2018-7477](https://insights.sbomify.com/CVE-2018-7477/): SQL injection in n/a (critical 9.8)
- [CVE-2018-7476](https://insights.sbomify.com/CVE-2018-7476/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-7475](https://insights.sbomify.com/CVE-2018-7475/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-7474](https://insights.sbomify.com/CVE-2018-7474/): SQL injection in n/a (critical 9.8)
- [CVE-2018-7473](https://insights.sbomify.com/CVE-2018-7473/): Open redirect in n/a (medium 6.1)
- [CVE-2018-7472](https://insights.sbomify.com/CVE-2018-7472/): Denial of service in n/a (medium 5.5)
- [CVE-2018-7471](https://insights.sbomify.com/CVE-2018-7471/): Integer overflow in n/a (high 7.8)
- [CVE-2018-7470](https://insights.sbomify.com/CVE-2018-7470/): Denial of service in n/a (medium 6.5)
- [CVE-2018-7469](https://insights.sbomify.com/CVE-2018-7469/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2018-7467](https://insights.sbomify.com/CVE-2018-7467/): Path traversal in n/a (high 7.5)
- [CVE-2018-7466](https://insights.sbomify.com/CVE-2018-7466/): Code injection in n/a (high 7.5)
- [CVE-2018-7465](https://insights.sbomify.com/CVE-2018-7465/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-7463](https://insights.sbomify.com/CVE-2018-7463/): SQL injection in n/a (critical 9.8)
- [CVE-2018-7456](https://insights.sbomify.com/CVE-2018-7456/): Null dereference in n/a (medium 6.5)
- [CVE-2018-7455](https://insights.sbomify.com/CVE-2018-7455/): Denial of service in n/a (medium 5.5)
- [CVE-2018-7454](https://insights.sbomify.com/CVE-2018-7454/): Null dereference in n/a (medium 5.5)
- [CVE-2018-7453](https://insights.sbomify.com/CVE-2018-7453/): Denial of service in n/a (medium 5.5)
- [CVE-2018-7452](https://insights.sbomify.com/CVE-2018-7452/): Null dereference in n/a (medium 5.5)
- [CVE-2018-7449](https://insights.sbomify.com/CVE-2018-7449/): Denial of service in n/a (high 7.5)
- [CVE-2018-7448](https://insights.sbomify.com/CVE-2018-7448/): Code injection in n/a (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/18/