# Vulnerabilities published in 2018 - [CVE-2018-7447](https://insights.sbomify.com/CVE-2018-7447/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-7445](https://insights.sbomify.com/CVE-2018-7445/): MikroTik RouterOS Stack-Based Buffer Overflow (critical 9.8, exploited in the wild) - [CVE-2018-7443](https://insights.sbomify.com/CVE-2018-7443/): Denial of service in n/a (medium 6.5) - [CVE-2018-7442](https://insights.sbomify.com/CVE-2018-7442/): Path traversal in n/a (critical 9.1) - [CVE-2018-7441](https://insights.sbomify.com/CVE-2018-7441/): Race condition in n/a (high 7.0) - [CVE-2018-7440](https://insights.sbomify.com/CVE-2018-7440/): Command injection in n/a (critical 9.8) - [CVE-2018-7439](https://insights.sbomify.com/CVE-2018-7439/): Memory corruption in n/a (high 8.8) - [CVE-2018-7438](https://insights.sbomify.com/CVE-2018-7438/): Memory corruption in n/a (high 8.8) - [CVE-2018-7437](https://insights.sbomify.com/CVE-2018-7437/): Memory corruption in n/a (high 8.8) - [CVE-2018-7436](https://insights.sbomify.com/CVE-2018-7436/): Memory corruption in n/a (high 8.8) - [CVE-2018-7435](https://insights.sbomify.com/CVE-2018-7435/): Memory corruption in n/a (high 8.8) - [CVE-2018-7434](https://insights.sbomify.com/CVE-2018-7434/): Information disclosure in n/a (medium 5.3) - [CVE-2018-7433](https://insights.sbomify.com/CVE-2018-7433/): Cross-site scripting in n/a (high 7.5) - [CVE-2018-7432](https://insights.sbomify.com/CVE-2018-7432/): Denial of service in n/a (high 7.5) - [CVE-2018-7431](https://insights.sbomify.com/CVE-2018-7431/): Path traversal in n/a (medium 6.5) - [CVE-2018-7429](https://insights.sbomify.com/CVE-2018-7429/): Denial of service in n/a (high 7.5) - [CVE-2018-7427](https://insights.sbomify.com/CVE-2018-7427/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7422](https://insights.sbomify.com/CVE-2018-7422/): Path traversal in n/a (high 7.5) - [CVE-2018-7421](https://insights.sbomify.com/CVE-2018-7421/): Denial of service in n/a (high 7.5) - [CVE-2018-7420](https://insights.sbomify.com/CVE-2018-7420/): Denial of service in n/a (high 7.5) - [CVE-2018-7419](https://insights.sbomify.com/CVE-2018-7419/): Null dereference in n/a (high 7.5) - [CVE-2018-7418](https://insights.sbomify.com/CVE-2018-7418/): Denial of service in n/a (high 7.5) - [CVE-2018-7417](https://insights.sbomify.com/CVE-2018-7417/): Denial of service in n/a (high 7.5) - [CVE-2018-7409](https://insights.sbomify.com/CVE-2018-7409/): Memory corruption in n/a (critical 9.8) - [CVE-2018-7408](https://insights.sbomify.com/CVE-2018-7408/): Incorrect Permission Assignment for Critical Resource in NPM (high 7.8) - [CVE-2018-7407](https://insights.sbomify.com/CVE-2018-7407/): Memory corruption in n/a (high 8.8) - [CVE-2018-7406](https://insights.sbomify.com/CVE-2018-7406/): Memory corruption in n/a (high 8.8) - [CVE-2018-7405](https://insights.sbomify.com/CVE-2018-7405/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7366](https://insights.sbomify.com/CVE-2018-7366/): Auth bypass in ZXV10 B860AV2.1 ChinaMobile (medium 4.3) - [CVE-2018-7365](https://insights.sbomify.com/CVE-2018-7365/): Path traversal in uSmartView (medium 5.1) - [CVE-2018-7364](https://insights.sbomify.com/CVE-2018-7364/): Missing authorization in ZXIN10-European region (high 8.3) - [CVE-2018-7363](https://insights.sbomify.com/CVE-2018-7363/): Auth bypass in ZXHN F670 (medium 4.3) - [CVE-2018-7362](https://insights.sbomify.com/CVE-2018-7362/): Missing authorization in ZXHN F670 (high 7.5) - [CVE-2018-7361](https://insights.sbomify.com/CVE-2018-7361/): Null dereference in ZXHN F670 (medium 6.5) - [CVE-2018-7360](https://insights.sbomify.com/CVE-2018-7360/): Information disclosure in ZXHN F670 (critical 9.6) - [CVE-2018-7359](https://insights.sbomify.com/CVE-2018-7359/): Memory corruption in ZXHN F670 (critical 9.0) - [CVE-2018-7358](https://insights.sbomify.com/CVE-2018-7358/): Auth bypass in ZXHN H168N (medium 6.5) - [CVE-2018-7357](https://insights.sbomify.com/CVE-2018-7357/): Missing authorization in ZXHN H168N (medium 6.5) - [CVE-2018-7356](https://insights.sbomify.com/CVE-2018-7356/): Other in ZXR10 8905E (medium 5.6) - [CVE-2018-7355](https://insights.sbomify.com/CVE-2018-7355/): Cross-site scripting in MF65 (medium 6.1) - [CVE-2018-7340](https://insights.sbomify.com/CVE-2018-7340/): Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal (high 7.7) - [CVE-2018-7339](https://insights.sbomify.com/CVE-2018-7339/): Integer overflow in n/a (high 8.8) - [CVE-2018-7337](https://insights.sbomify.com/CVE-2018-7337/): Denial of service in n/a (high 7.5) - [CVE-2018-7336](https://insights.sbomify.com/CVE-2018-7336/): Null dereference in n/a (high 7.5) - [CVE-2018-7335](https://insights.sbomify.com/CVE-2018-7335/): In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. (high 7.5) - [CVE-2018-7334](https://insights.sbomify.com/CVE-2018-7334/): Denial of service in n/a (high 7.5) - [CVE-2018-7333](https://insights.sbomify.com/CVE-2018-7333/): Denial of service in n/a (high 7.5) - [CVE-2018-7332](https://insights.sbomify.com/CVE-2018-7332/): Denial of service in n/a (high 7.5) - [CVE-2018-7331](https://insights.sbomify.com/CVE-2018-7331/): Denial of service in n/a (high 7.5) - [CVE-2018-7330](https://insights.sbomify.com/CVE-2018-7330/): Denial of service in n/a (high 7.5) - [CVE-2018-7329](https://insights.sbomify.com/CVE-2018-7329/): Denial of service in n/a (high 7.5) - [CVE-2018-7328](https://insights.sbomify.com/CVE-2018-7328/): Denial of service in n/a (high 7.5) - [CVE-2018-7327](https://insights.sbomify.com/CVE-2018-7327/): Denial of service in n/a (high 7.5) - [CVE-2018-7326](https://insights.sbomify.com/CVE-2018-7326/): Denial of service in n/a (high 7.5) - [CVE-2018-7325](https://insights.sbomify.com/CVE-2018-7325/): Denial of service in n/a (high 7.5) - [CVE-2018-7324](https://insights.sbomify.com/CVE-2018-7324/): Denial of service in n/a (high 7.5) - [CVE-2018-7323](https://insights.sbomify.com/CVE-2018-7323/): Denial of service in n/a (high 7.5) - [CVE-2018-7322](https://insights.sbomify.com/CVE-2018-7322/): Denial of service in n/a (high 7.5) - [CVE-2018-7321](https://insights.sbomify.com/CVE-2018-7321/): Denial of service in n/a (high 7.5) - [CVE-2018-7320](https://insights.sbomify.com/CVE-2018-7320/): Denial of service in n/a (high 7.5) - [CVE-2018-7319](https://insights.sbomify.com/CVE-2018-7319/): SQL injection in n/a (critical 9.8) - [CVE-2018-7318](https://insights.sbomify.com/CVE-2018-7318/): SQL injection in n/a (critical 9.8) - [CVE-2018-7317](https://insights.sbomify.com/CVE-2018-7317/): Information disclosure in n/a (high 7.5) - [CVE-2018-7316](https://insights.sbomify.com/CVE-2018-7316/): File upload in n/a (critical 9.8) - [CVE-2018-7315](https://insights.sbomify.com/CVE-2018-7315/): SQL injection in n/a (critical 9.8) - [CVE-2018-7314](https://insights.sbomify.com/CVE-2018-7314/): SQL injection in n/a (critical 9.8) - [CVE-2018-7313](https://insights.sbomify.com/CVE-2018-7313/): SQL injection in n/a (critical 9.8) - [CVE-2018-7312](https://insights.sbomify.com/CVE-2018-7312/): SQL injection in n/a (critical 9.8) - [CVE-2018-7311](https://insights.sbomify.com/CVE-2018-7311/): Privilege escalation in n/a (high 8.8) - [CVE-2018-7308](https://insights.sbomify.com/CVE-2018-7308/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-7307](https://insights.sbomify.com/CVE-2018-7307/): Auth0-js bypasses CSRF checks (high 8.8) - [CVE-2018-7305](https://insights.sbomify.com/CVE-2018-7305/): Cross-site request forgery in n/a (medium 4.9) - [CVE-2018-7304](https://insights.sbomify.com/CVE-2018-7304/): Code injection in n/a (high 8.8) - [CVE-2018-7303](https://insights.sbomify.com/CVE-2018-7303/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-7302](https://insights.sbomify.com/CVE-2018-7302/): Tiki Wiki CMS XSS Vulnerability (medium 5.4) - [CVE-2018-7301](https://insights.sbomify.com/CVE-2018-7301/): Missing authorization in n/a (critical 9.8) - [CVE-2018-7300](https://insights.sbomify.com/CVE-2018-7300/): Path traversal in n/a (critical 9.8) - [CVE-2018-7299](https://insights.sbomify.com/CVE-2018-7299/): File upload in n/a (high 8.0) - [CVE-2018-7298](https://insights.sbomify.com/CVE-2018-7298/): Supply chain in n/a (high 8.1) - [CVE-2018-7297](https://insights.sbomify.com/CVE-2018-7297/): Command injection in n/a (critical 9.8) - [CVE-2018-7296](https://insights.sbomify.com/CVE-2018-7296/): Path traversal in n/a (medium 5.3) - [CVE-2018-7295](https://insights.sbomify.com/CVE-2018-7295/): Other in n/a (high 8.1) - [CVE-2018-7290](https://insights.sbomify.com/CVE-2018-7290/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-7289](https://insights.sbomify.com/CVE-2018-7289/): Security feature bypass in n/a (low 3.3) - [CVE-2018-7287](https://insights.sbomify.com/CVE-2018-7287/): Denial of service in n/a (medium 5.9) - [CVE-2018-7286](https://insights.sbomify.com/CVE-2018-7286/): Denial of service in n/a (medium 6.5) - [CVE-2018-7285](https://insights.sbomify.com/CVE-2018-7285/): Null dereference in n/a (high 7.5) - [CVE-2018-7284](https://insights.sbomify.com/CVE-2018-7284/): Memory corruption in n/a (high 7.5) - [CVE-2018-7282](https://insights.sbomify.com/CVE-2018-7282/): SQL injection in n/a (critical 9.8) - [CVE-2018-7281](https://insights.sbomify.com/CVE-2018-7281/): Command injection in n/a (high 8.8) - [CVE-2018-7280](https://insights.sbomify.com/CVE-2018-7280/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7279](https://insights.sbomify.com/CVE-2018-7279/): Code injection in n/a (critical 9.8) - [CVE-2018-7278](https://insights.sbomify.com/CVE-2018-7278/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7277](https://insights.sbomify.com/CVE-2018-7277/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7276](https://insights.sbomify.com/CVE-2018-7276/): Information disclosure in n/a (high 7.5) - [CVE-2018-7274](https://insights.sbomify.com/CVE-2018-7274/): Yab Quarx persistent cross-site scripting vulnerability (medium 6.1) - [CVE-2018-7273](https://insights.sbomify.com/CVE-2018-7273/): Information disclosure in n/a (medium 5.5) - [CVE-2018-7272](https://insights.sbomify.com/CVE-2018-7272/): Information disclosure in n/a (medium 6.5) - [CVE-2018-7271](https://insights.sbomify.com/CVE-2018-7271/): Code injection in n/a (high 8.1) - [CVE-2018-7269](https://insights.sbomify.com/CVE-2018-7269/): Yii SQL injection vulnerability (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/19/