# Vulnerabilities published in 2018 - [CVE-2018-7268](https://insights.sbomify.com/CVE-2018-7268/): Information disclosure in n/a (medium 5.5) - [CVE-2018-7265](https://insights.sbomify.com/CVE-2018-7265/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7264](https://insights.sbomify.com/CVE-2018-7264/): Memory corruption in n/a (critical 9.8) - [CVE-2018-7263](https://insights.sbomify.com/CVE-2018-7263/): Memory corruption in n/a (critical 9.8) - [CVE-2018-7262](https://insights.sbomify.com/CVE-2018-7262/): Null dereference in n/a (high 7.5) - [CVE-2018-7261](https://insights.sbomify.com/CVE-2018-7261/): radiant vulnerable to Cross-site Scripting (medium 5.4) - [CVE-2018-7260](https://insights.sbomify.com/CVE-2018-7260/): phpMyAdmin Cross-site scripting (XSS) vulnerability in central columns feature (medium 5.4) - [CVE-2018-7259](https://insights.sbomify.com/CVE-2018-7259/): Information disclosure in n/a (critical 9.8) - [CVE-2018-7254](https://insights.sbomify.com/CVE-2018-7254/): Memory corruption in n/a (high 7.8) - [CVE-2018-7253](https://insights.sbomify.com/CVE-2018-7253/): Memory corruption in n/a (high 7.8) - [CVE-2018-7251](https://insights.sbomify.com/CVE-2018-7251/): Anchor CMS Logs Credentials (critical 9.8) - [CVE-2018-7250](https://insights.sbomify.com/CVE-2018-7250/): Information disclosure in n/a (medium 5.5) - [CVE-2018-7249](https://insights.sbomify.com/CVE-2018-7249/): Use after free in n/a (high 7.0) - [CVE-2018-7248](https://insights.sbomify.com/CVE-2018-7248/): Information disclosure in n/a (medium 5.3) - [CVE-2018-7247](https://insights.sbomify.com/CVE-2018-7247/): Memory corruption in n/a (critical 9.8) - [CVE-2018-7246](https://insights.sbomify.com/CVE-2018-7246/): Information disclosure in 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS (critical 9.8) - [CVE-2018-7245](https://insights.sbomify.com/CVE-2018-7245/): Missing authorization in 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS (critical 9.1) - [CVE-2018-7244](https://insights.sbomify.com/CVE-2018-7244/): Information disclosure in 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS (medium 5.3) - [CVE-2018-7243](https://insights.sbomify.com/CVE-2018-7243/): Auth bypass in 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS (critical 9.8) - [CVE-2018-7242](https://insights.sbomify.com/CVE-2018-7242/): Weak cryptography in Modicon Premium, Modicon Quantum, Modicon M340, BMXNOR0200 (critical 9.8) - [CVE-2018-7241](https://insights.sbomify.com/CVE-2018-7241/): Hardcoded credentials in Modicon Premium, Modicon Quantum, Modicon M340, BMXNOR0200 (critical 9.8) - [CVE-2018-7240](https://insights.sbomify.com/CVE-2018-7240/): Command injection in Modicon Quantum (high 8.8) - [CVE-2018-7239](https://insights.sbomify.com/CVE-2018-7239/): A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to (high 7.8) - [CVE-2018-7238](https://insights.sbomify.com/CVE-2018-7238/): Memory corruption in Pelco Sarix Professional (critical 9.8) - [CVE-2018-7237](https://insights.sbomify.com/CVE-2018-7237/): Path traversal in Pelco Sarix Professional (critical 9.1) - [CVE-2018-7236](https://insights.sbomify.com/CVE-2018-7236/): Auth bypass in Pelco Sarix Professional (high 8.1) - [CVE-2018-7235](https://insights.sbomify.com/CVE-2018-7235/): Path traversal in Pelco Sarix Professional (high 7.5) - [CVE-2018-7234](https://insights.sbomify.com/CVE-2018-7234/): Security feature bypass in Pelco Sarix Professional (high 7.5) - [CVE-2018-7233](https://insights.sbomify.com/CVE-2018-7233/): Command injection in Pelco Sarix Professional (critical 9.8) - [CVE-2018-7232](https://insights.sbomify.com/CVE-2018-7232/): Command injection in Pelco Sarix Professional (critical 9.8) - [CVE-2018-7231](https://insights.sbomify.com/CVE-2018-7231/): Command injection in Pelco Sarix Professional (critical 9.8) - [CVE-2018-7230](https://insights.sbomify.com/CVE-2018-7230/): XML external entity in Pelco Sarix Professional (high 8.8) - [CVE-2018-7229](https://insights.sbomify.com/CVE-2018-7229/): Hardcoded credentials in Pelco Sarix Professional (critical 9.8) - [CVE-2018-7228](https://insights.sbomify.com/CVE-2018-7228/): Auth bypass in Pelco Sarix Professional (critical 9.8) - [CVE-2018-7227](https://insights.sbomify.com/CVE-2018-7227/): Information disclosure in Pelco Sarix Professional (medium 5.3) - [CVE-2018-7226](https://insights.sbomify.com/CVE-2018-7226/): Integer overflow in n/a (critical 9.8) - [CVE-2018-7225](https://insights.sbomify.com/CVE-2018-7225/): Integer overflow in n/a (critical 9.8) - [CVE-2018-7219](https://insights.sbomify.com/CVE-2018-7219/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-7218](https://insights.sbomify.com/CVE-2018-7218/): Code injection in n/a (critical 9.8) - [CVE-2018-7217](https://insights.sbomify.com/CVE-2018-7217/): File upload in n/a (high 8.8) - [CVE-2018-7216](https://insights.sbomify.com/CVE-2018-7216/): Cross-site request forgery in n/a (high 8.0) - [CVE-2018-7213](https://insights.sbomify.com/CVE-2018-7213/): Security feature bypass in n/a (critical 9.8) - [CVE-2018-7212](https://insights.sbomify.com/CVE-2018-7212/): Sinatra Path Traversal vulnerability (medium 5.3) - [CVE-2018-7211](https://insights.sbomify.com/CVE-2018-7211/): Weak cryptography in n/a (high 8.1) - [CVE-2018-7210](https://insights.sbomify.com/CVE-2018-7210/): Information disclosure in n/a (high 7.5) - [CVE-2018-7209](https://insights.sbomify.com/CVE-2018-7209/): Information disclosure in n/a (high 7.5) - [CVE-2018-7208](https://insights.sbomify.com/CVE-2018-7208/): Null dereference in n/a (high 7.8) - [CVE-2018-7206](https://insights.sbomify.com/CVE-2018-7206/): JupyterHub OAuthenticator elevation of privilege (high 8.8) - [CVE-2018-7205](https://insights.sbomify.com/CVE-2018-7205/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-7204](https://insights.sbomify.com/CVE-2018-7204/): Information disclosure in n/a (high 7.5) - [CVE-2018-7203](https://insights.sbomify.com/CVE-2018-7203/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7202](https://insights.sbomify.com/CVE-2018-7202/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7201](https://insights.sbomify.com/CVE-2018-7201/): Other in n/a (high 8.8) - [CVE-2018-7198](https://insights.sbomify.com/CVE-2018-7198/): October CMS - RainLab Blog Plugin XSS (medium 6.1) - [CVE-2018-7197](https://insights.sbomify.com/CVE-2018-7197/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7196](https://insights.sbomify.com/CVE-2018-7196/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7195](https://insights.sbomify.com/CVE-2018-7195/): Auth bypass in n/a (high 8.1) - [CVE-2018-7194](https://insights.sbomify.com/CVE-2018-7194/): Integer overflow in n/a (medium 4.9) - [CVE-2018-7193](https://insights.sbomify.com/CVE-2018-7193/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7192](https://insights.sbomify.com/CVE-2018-7192/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-7191](https://insights.sbomify.com/CVE-2018-7191/): Null dereference in n/a (medium 5.5) - [CVE-2018-7188](https://insights.sbomify.com/CVE-2018-7188/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-7187](https://insights.sbomify.com/CVE-2018-7187/): Command injection in n/a (high 8.8) - [CVE-2018-7186](https://insights.sbomify.com/CVE-2018-7186/): Memory corruption in n/a (critical 9.8) - [CVE-2018-7185](https://insights.sbomify.com/CVE-2018-7185/): Denial of service in n/a (high 7.5) - [CVE-2018-7184](https://insights.sbomify.com/CVE-2018-7184/): Denial of service in n/a (high 7.5) - [CVE-2018-7183](https://insights.sbomify.com/CVE-2018-7183/): Memory corruption in n/a (critical 9.8) - [CVE-2018-7182](https://insights.sbomify.com/CVE-2018-7182/): Denial of service in n/a (high 7.5) - [CVE-2018-7180](https://insights.sbomify.com/CVE-2018-7180/): SQL injection in n/a (critical 9.8) - [CVE-2018-7179](https://insights.sbomify.com/CVE-2018-7179/): SQL injection in n/a (critical 9.8) - [CVE-2018-7178](https://insights.sbomify.com/CVE-2018-7178/): SQL injection in n/a (critical 9.8) - [CVE-2018-7177](https://insights.sbomify.com/CVE-2018-7177/): SQL injection in n/a (critical 9.8) - [CVE-2018-7176](https://insights.sbomify.com/CVE-2018-7176/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-7175](https://insights.sbomify.com/CVE-2018-7175/): Null dereference in n/a (medium 5.5) - [CVE-2018-7174](https://insights.sbomify.com/CVE-2018-7174/): Denial of service in n/a (medium 5.5) - [CVE-2018-7173](https://insights.sbomify.com/CVE-2018-7173/): Denial of service in n/a (medium 5.5) - [CVE-2018-7172](https://insights.sbomify.com/CVE-2018-7172/): Path traversal in n/a (medium 4.9) - [CVE-2018-7171](https://insights.sbomify.com/CVE-2018-7171/): Path traversal in n/a (high 7.5) - [CVE-2018-7170](https://insights.sbomify.com/CVE-2018-7170/): Business logic in n/a (medium 5.3) - [CVE-2018-7169](https://insights.sbomify.com/CVE-2018-7169/): Privilege escalation in n/a (medium 5.3) - [CVE-2018-7167](https://insights.sbomify.com/CVE-2018-7167/): Denial of service in Node.js (high 7.5) - [CVE-2018-7166](https://insights.sbomify.com/CVE-2018-7166/): Information disclosure in Node.js (high 7.5) - [CVE-2018-7164](https://insights.sbomify.com/CVE-2018-7164/): Denial of service in Node.js (high 7.5) - [CVE-2018-7162](https://insights.sbomify.com/CVE-2018-7162/): Denial of service in Node.js (high 7.5) - [CVE-2018-7161](https://insights.sbomify.com/CVE-2018-7161/): Use after free in Node.js (high 7.5) - [CVE-2018-7160](https://insights.sbomify.com/CVE-2018-7160/): Server-side request forgery in Node.js (high 8.8) - [CVE-2018-7159](https://insights.sbomify.com/CVE-2018-7159/): Other in Node.js (medium 5.3) - [CVE-2018-7158](https://insights.sbomify.com/CVE-2018-7158/): Denial of service in Node.js (high 7.5) - [CVE-2018-7125](https://insights.sbomify.com/CVE-2018-7125/): Code injection in HPE Intelligent Management Center (IMC) PLAT (medium 6.3) - [CVE-2018-7124](https://insights.sbomify.com/CVE-2018-7124/): Code injection in HPE Intelligent Management Center (IMC) PLAT (critical 9.8) - [CVE-2018-7123](https://insights.sbomify.com/CVE-2018-7123/): Auth bypass in HPE Intelligent Management Center (IMC) PLAT (high 7.5) - [CVE-2018-7122](https://insights.sbomify.com/CVE-2018-7122/): Information disclosure in HPE Intelligent Management Center (IMC) PLAT (medium 5.3) - [CVE-2018-7121](https://insights.sbomify.com/CVE-2018-7121/): Auth bypass in HPE Intelligent Management Center (IMC) PLAT (critical 9.8) - [CVE-2018-7120](https://insights.sbomify.com/CVE-2018-7120/): Privilege escalation in HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy (critical 9.8) - [CVE-2018-7119](https://insights.sbomify.com/CVE-2018-7119/): Information disclosure in NonStop SAFEGAURD and NonStop H-series STDSEC-STANDARD SECURITY Product (high 7.0) - [CVE-2018-7118](https://insights.sbomify.com/CVE-2018-7118/): A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0. (high 7.8) - [CVE-2018-7117](https://insights.sbomify.com/CVE-2018-7117/): Cross-site scripting in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers (medium 6.1) - [CVE-2018-7116](https://insights.sbomify.com/CVE-2018-7116/): Denial of service in HPE Intelligent Management Center (IMC) (high 7.5) - [CVE-2018-7115](https://insights.sbomify.com/CVE-2018-7115/): Memory corruption in HPE Intelligent Management Center (IMC) (medium 5.3) - [CVE-2018-7114](https://insights.sbomify.com/CVE-2018-7114/): Memory corruption in HPE Intelligent Management Center (IMC) (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/20/