Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 24 of 163.
- CVE-2018-6608 Information disclosure in n/a
- CVE-2018-6606 Privilege escalation in n/a
- CVE-2018-6605 SQL injection in n/a
- CVE-2018-6604 SQL injection in n/a
- CVE-2018-6603 Cross-site scripting in n/a
- CVE-2018-6599 Information disclosure in n/a
- CVE-2018-6598 Missing authorization in n/a
- CVE-2018-6597 Privilege escalation in n/a
- CVE-2018-6596 Django-Anymail prone to a timing attack
- CVE-2018-6594 Pycrypto generates weak key parameters
- CVE-2018-6593 Privilege escalation in n/a
- CVE-2018-6592 Information disclosure in n/a
- CVE-2018-6591 Converse.js Exposure of Sensitive Information
- CVE-2018-6590 Cross-site scripting in CA API Developer Portal
- CVE-2018-6589 Denial of service in CA Spectrum
- CVE-2018-6588 Cross-site scripting in CA API Developer Portal
- CVE-2018-6587 Cross-site scripting in CA API Developer Portal
- CVE-2018-6586 Cross-site scripting in CA API Developer Portal
- CVE-2018-6585 SQL injection in n/a
- CVE-2018-6584 SQL injection in n/a
- CVE-2018-6583 SQL injection in n/a
- CVE-2018-6582 SQL injection in n/a
- CVE-2018-6581 SQL injection in n/a
- CVE-2018-6580 File upload in n/a
- CVE-2018-6579 SQL injection in n/a
- CVE-2018-6578 SQL injection in n/a
- CVE-2018-6577 SQL injection in n/a
- CVE-2018-6576 SQL injection in n/a
- CVE-2018-6575 SQL injection in n/a
- CVE-2018-6574 Code injection in n/a
- CVE-2018-6569 Missing authorization in n/a
- CVE-2018-6563 Cross-site request forgery in n/a
- CVE-2018-6562 Information disclosure in n/a
- CVE-2018-6561 dijit editor cross-site scripting vulnerability
- CVE-2018-6560 Security feature bypass in n/a
- CVE-2018-6559 Information disclosure in Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10
- CVE-2018-6558 Privilege Escalation in fscrypt
- CVE-2018-6557 Insecure temporary file use in base-files
- CVE-2018-6556 The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files
- CVE-2018-6555 Use after free in Linux Kernel
- CVE-2018-6554 Denial of service in Linux Kernel
- CVE-2018-6553 AppArmor cupsd Sandbox Bypass Due to Use of Hard Links
- CVE-2018-6552 Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing
- CVE-2018-6551 Integer overflow in n/a
- CVE-2018-6550 Cross-site scripting in n/a
- CVE-2018-6548 Use after free in n/a
- CVE-2018-6547 Missing authorization in n/a
- CVE-2018-6546 Auth bypass in n/a
- CVE-2018-6545 Cross-site scripting in n/a
- CVE-2018-6544 Denial of service in n/a
- CVE-2018-6543 Integer overflow in n/a
- CVE-2018-6542 Memory corruption in n/a
- CVE-2018-6541 Denial of service in n/a
- CVE-2018-6540 Denial of service in n/a
- CVE-2018-6537 Memory corruption in n/a
- CVE-2018-6536 Race condition in n/a
- CVE-2018-6535 Information disclosure in n/a
- CVE-2018-6534 Null dereference in n/a
- CVE-2018-6533 Privilege escalation in n/a
- CVE-2018-6532 Denial of service in n/a
- CVE-2018-6530 D-Link Multiple Routers OS Command Injection
- CVE-2018-6529 Cross-site scripting in n/a
- CVE-2018-6528 Cross-site scripting in n/a
- CVE-2018-6527 Cross-site scripting in n/a
- CVE-2018-6526 Information disclosure in n/a
- CVE-2018-6525 Denial of service in n/a
- CVE-2018-6524 Denial of service in n/a
- CVE-2018-6523 Denial of service in n/a
- CVE-2018-6522 Denial of service in n/a
- CVE-2018-6521 SimpleSAMLphp Use of insecure connection charset (sqlauth module)
- CVE-2018-6520 SimpleSAMLphp Open redirection protection bypass
- CVE-2018-6519 SimpleSAMLphp SAML2 library Regular Expression Denial of Service vulnerability
- CVE-2018-6518 Cross-site scripting in n/a
- CVE-2018-6517 Improper Certificate Validation in chloride
- CVE-2018-6516 Code injection in pe-client-tools
- CVE-2018-6515 Code injection in Puppet Agent
- CVE-2018-6514 Privilege escalation in Puppet Agent
- CVE-2018-6513 Privilege escalation in Puppet Enterprise and Puppet Agent
- CVE-2018-6512 Code injection in Puppet Enterprise 2018.1.x prior to 2018.1.1, razor-server and pe-razor-server prior to 1.9.0.0
- CVE-2018-6511 XSS Vulnerability in Puppet Enterprise Console
- CVE-2018-6510 XSS Vulnerability in Puppet Enterprise Console
- CVE-2018-6508 Code injection in Puppet Enterprise
- CVE-2018-6506 Cross-site scripting in n/a
- CVE-2018-6505 Path traversal in ArcSight Management Center
- CVE-2018-6504 Cross-site request forgery in ArcSight Management Center
- CVE-2018-6503 Missing authorization in ArcSight Management Center
- CVE-2018-6502 Cross-site scripting in ArcSight Management Center
- CVE-2018-6501 Missing authorization in n/a
- CVE-2018-6500 Path traversal in ArcSight Management Center
- CVE-2018-6499 Code injection in Data Center Automation Containerized Suite
- CVE-2018-6498 Micro Focus Container Deployment Foundation (CDF), Remote Code Execution
- CVE-2018-6497 MFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF
- CVE-2018-6496 MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF
- CVE-2018-6495 MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting
- CVE-2018-6494 MFSBGN03807 rev.1 - HP Service Manager Software, Multiple Vulnerabilities
- CVE-2018-6493 MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities
- CVE-2018-6492 MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities
- CVE-2018-6491 MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability
- CVE-2018-6490 MFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS)
- CVE-2018-6489 XML external entity in n/a