Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 21 of 163.
- CVE-2018-7113 Security feature bypass in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- CVE-2018-7112 Information disclosure in Windows firmware installer for Gen9, Gen8, G7,and G6 HPE servers
- CVE-2018-7111 Missing authorization in HPE UIoT
- CVE-2018-7110 Race condition in HPE Service Governance Framework (SGF)
- CVE-2018-7109 Path traversal in HPE enhanced Internet Usage Manager (eIUM)
- CVE-2018-7108 Auth bypass in HPE StorageWorks XP7 Automation Director (AutoDir)
- CVE-2018-7107 SQL injection in HPE Device Entitlement Gateway (DEG)
- CVE-2018-7105 Code injection in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers, HPE Integrated Lights-Out 4 (iLO 4), HPE Integrated Lights-Out 3 (iLO 3)
- CVE-2018-7104 Code injection in HPE Intelligent Management Center (iMC) Wireless Services Manager Software
- CVE-2018-7103 Code injection in HPE Intelligent Management Center (iMC) Wireless Services Manager Software
- CVE-2018-7102 Path traversal in HPE Intelligent Management Center (iMC) PLAT
- CVE-2018-7101 Denial of service in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers, HPE Integrated Lights-Out 4 (iLO 4)
- CVE-2018-7100 Information disclosure in HP 1810-24G, HP 1810-48G, HP 1810-8 v2 Switches
- CVE-2018-7099 Information disclosure in HPE 3PAR Service Processors
- CVE-2018-7098 Path traversal in HPE 3PAR Service Processors
- CVE-2018-7097 Cross-site request forgery in HPE 3PAR Service Processors
- CVE-2018-7096 Code injection in HPE 3PAR Service Processors
- CVE-2018-7095 Auth bypass in HPE 3PAR Service Processors
- CVE-2018-7094 Information disclosure in HPE 3PAR Service Processors
- CVE-2018-7093 Denial of service in iLO 5 for HPE Gen10 Servers, iLO 4, iLO 3, Moonshot Chassis Management Firmware, Moonshot Component Packs for HPE ProLiant m510 and m710x server cartridges
- CVE-2018-7092 Path traversal in HPE Intelligent Management Center Platform (IMC Plat)
- CVE-2018-7091 Open redirect in HPE XP P9000 Command View Advanced Edition Software (CVAE)
- CVE-2018-7090 Cross-site scripting in HPE XP P9000 Command View Advanced Edition Software (CVAE) versions 7.0.0-00 to earlier than 8.60-00
- CVE-2018-7084 Command injection in Aruba Instant (IAP)
- CVE-2018-7083 Information disclosure in Aruba Instant (IAP)
- CVE-2018-7082 Command injection in Aruba Instant (IAP)
- CVE-2018-7081 Command injection in Aruba Mobility Controllers
- CVE-2018-7080 Privilege escalation in Aruba Access Points
- CVE-2018-7079 Missing authorization in Aruba ClearPass Policy Manager
- CVE-2018-7078 Code injection in HPE Integrated Lights-Out 4 (iLO 4), HPE Integrated Lights-Out 5 (iLO 5)
- CVE-2018-7077 Information disclosure in HPE XP P9000 Command View Advanced Edition (CVAE)
- CVE-2018-7076 Auth bypass in HPE intelligence Management Center (iMC) PLAT
- CVE-2018-7075 Cross-site scripting in HPE Intelligent Management Center (IMC)
- CVE-2018-7074 Code injection in HPE Intelligent Management Center (IMC)
- CVE-2018-7073 Path traversal in HPE Moonshot Provisioning Manager
- CVE-2018-7072 A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24.
- CVE-2018-7071 Information disclosure in HPE Network Function Virtualization Director (NFVD)
- CVE-2018-7070 Information disclosure in HPE CentralView Fraud Risk Management
- CVE-2018-7069 Auth bypass in HPE CentralView Fraud Risk Management
- CVE-2018-7068 Other in HPE CentralView Fraud Risk Management
- CVE-2018-7067 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2018-7066 Command injection in Aruba ClearPass Policy Manager
- CVE-2018-7065 SQL injection in Aruba ClearPass Policy Manager
- CVE-2018-7064 Cross-site scripting in Aruba Instant (IAP)
- CVE-2018-7063 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2018-7060 Cross-site request forgery in Aruba ClearPass
- CVE-2018-7059 Information disclosure in n/a
- CVE-2018-7058 Auth bypass in Aruba ClearPass
- CVE-2018-7057 Cross-site scripting in n/a
- CVE-2018-7056 RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.
- CVE-2018-7055 Server-side request forgery in n/a
- CVE-2018-7054 Use after free in n/a
- CVE-2018-7053 Use after free in n/a
- CVE-2018-7052 Null dereference in n/a
- CVE-2018-7051 Memory corruption in n/a
- CVE-2018-7050 Null dereference in n/a
- CVE-2018-7049 Cross-site scripting in n/a
- CVE-2018-7048 Denial of service in n/a
- CVE-2018-7047 Hardcoded credentials in n/a
- CVE-2018-7046 Code injection in n/a
- CVE-2018-7039 Integer overflow in n/a
- CVE-2018-7035 Gleez CMS Stored XSS
- CVE-2018-7034 Auth bypass in n/a
- CVE-2018-7033 SQL injection in n/a
- CVE-2018-7032 Command injection in n/a
- CVE-2018-6983 Integer overflow in VMware Workstation and Fusion
- CVE-2018-6982 Information disclosure in VMware ESXi
- CVE-2018-6981 Memory corruption in VMware ESXi, VMware Workstation, and VMware Fusion
- CVE-2018-6980 Missing authorization in VMware vRealize Log Insight
- CVE-2018-6979 Auth bypass in VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console)
- CVE-2018-6978 Privilege escalation in n/a
- CVE-2018-6977 Denial of service in ESXi
- CVE-2018-6976 Information disclosure in Content Locker for iOS
- CVE-2018-6975 Information disclosure in AirWatch Agent for iOS prior to 5.8.1
- CVE-2018-6974 Memory corruption in ESXi
- CVE-2018-6973 Memory corruption in Fusion
- CVE-2018-6972 Null dereference in ESXi
- CVE-2018-6971 Information disclosure in Horizon View Agent
- CVE-2018-6970 Information disclosure in VMware Horizon 6, Horizon 7, and Horizon Client
- CVE-2018-6969 Information disclosure in VMware Tools
- CVE-2018-6968 Code injection in AirWatch Agent
- CVE-2018-6967 Information disclosure in VMware ESXi, Workstation, and Fusion
- CVE-2018-6966 Information disclosure in VMware ESXi, Workstation, and Fusion
- CVE-2018-6965 Information disclosure in VMware ESXi, Workstation, and Fusion
- CVE-2018-6964 Privilege escalation in Horizon Client for Linux
- CVE-2018-6963 Null dereference in Fusion
- CVE-2018-6962 VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation.
- CVE-2018-6961 VMware SD-WAN Edge by VeloCloud Command Injection
- CVE-2018-6960 Auth bypass in Horizon DaaS
- CVE-2018-6959 Auth bypass in vRealize Automation
- CVE-2018-6958 Cross-site scripting in vRealize Automation
- CVE-2018-6957 Denial of service in Fusion
- CVE-2018-6954 Path traversal in n/a
- CVE-2018-6953 Memory corruption in n/a
- CVE-2018-6952 Use after free in n/a
- CVE-2018-6951 Null dereference in n/a
- CVE-2018-6948 Memory corruption in n/a
- CVE-2018-6947 Privilege escalation in n/a
- CVE-2018-6944 Cross-site scripting in n/a
- CVE-2018-6943 Cross-site scripting in n/a