# Vulnerabilities published in 2018


- [CVE-2018-6608](https://insights.sbomify.com/CVE-2018-6608/): Information disclosure in n/a (medium 4.3)
- [CVE-2018-6606](https://insights.sbomify.com/CVE-2018-6606/): Privilege escalation in n/a (high 7.8)
- [CVE-2018-6605](https://insights.sbomify.com/CVE-2018-6605/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6604](https://insights.sbomify.com/CVE-2018-6604/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6603](https://insights.sbomify.com/CVE-2018-6603/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-6599](https://insights.sbomify.com/CVE-2018-6599/): Information disclosure in n/a (medium 5.5)
- [CVE-2018-6598](https://insights.sbomify.com/CVE-2018-6598/): Missing authorization in n/a (high 7.1)
- [CVE-2018-6597](https://insights.sbomify.com/CVE-2018-6597/): Privilege escalation in n/a (medium 6.8)
- [CVE-2018-6596](https://insights.sbomify.com/CVE-2018-6596/): Django-Anymail prone to a timing attack (critical 9.1)
- [CVE-2018-6594](https://insights.sbomify.com/CVE-2018-6594/): Pycrypto generates weak key parameters (high 7.5)
- [CVE-2018-6593](https://insights.sbomify.com/CVE-2018-6593/): Privilege escalation in n/a (high 7.8)
- [CVE-2018-6592](https://insights.sbomify.com/CVE-2018-6592/): Information disclosure in n/a (high 7.8)
- [CVE-2018-6591](https://insights.sbomify.com/CVE-2018-6591/): Converse.js Exposure of Sensitive Information (medium 5.3)
- [CVE-2018-6590](https://insights.sbomify.com/CVE-2018-6590/): Cross-site scripting in CA API Developer Portal (medium 6.1)
- [CVE-2018-6589](https://insights.sbomify.com/CVE-2018-6589/): Denial of service in CA Spectrum (high 7.5)
- [CVE-2018-6588](https://insights.sbomify.com/CVE-2018-6588/): Cross-site scripting in CA API Developer Portal (medium 6.1)
- [CVE-2018-6587](https://insights.sbomify.com/CVE-2018-6587/): Cross-site scripting in CA API Developer Portal (medium 6.1)
- [CVE-2018-6586](https://insights.sbomify.com/CVE-2018-6586/): Cross-site scripting in CA API Developer Portal (medium 6.1)
- [CVE-2018-6585](https://insights.sbomify.com/CVE-2018-6585/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6584](https://insights.sbomify.com/CVE-2018-6584/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6583](https://insights.sbomify.com/CVE-2018-6583/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6582](https://insights.sbomify.com/CVE-2018-6582/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6581](https://insights.sbomify.com/CVE-2018-6581/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6580](https://insights.sbomify.com/CVE-2018-6580/): File upload in n/a (critical 9.8)
- [CVE-2018-6579](https://insights.sbomify.com/CVE-2018-6579/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6578](https://insights.sbomify.com/CVE-2018-6578/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6577](https://insights.sbomify.com/CVE-2018-6577/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6576](https://insights.sbomify.com/CVE-2018-6576/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6575](https://insights.sbomify.com/CVE-2018-6575/): SQL injection in n/a (critical 9.8)
- [CVE-2018-6574](https://insights.sbomify.com/CVE-2018-6574/): Code injection in n/a (high 7.8)
- [CVE-2018-6569](https://insights.sbomify.com/CVE-2018-6569/): Missing authorization in n/a (high 8.8)
- [CVE-2018-6563](https://insights.sbomify.com/CVE-2018-6563/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2018-6562](https://insights.sbomify.com/CVE-2018-6562/): Information disclosure in n/a (high 7.5)
- [CVE-2018-6561](https://insights.sbomify.com/CVE-2018-6561/): dijit editor cross-site scripting vulnerability (medium 6.1)
- [CVE-2018-6560](https://insights.sbomify.com/CVE-2018-6560/): Security feature bypass in n/a (high 8.8)
- [CVE-2018-6559](https://insights.sbomify.com/CVE-2018-6559/): Information disclosure in Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10 (low 3.3)
- [CVE-2018-6558](https://insights.sbomify.com/CVE-2018-6558/): Privilege Escalation in fscrypt (medium 6.5)
- [CVE-2018-6557](https://insights.sbomify.com/CVE-2018-6557/): Insecure temporary file use in base-files (high 7.0)
- [CVE-2018-6556](https://insights.sbomify.com/CVE-2018-6556/): The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files (low 3.3)
- [CVE-2018-6555](https://insights.sbomify.com/CVE-2018-6555/): Use after free in Linux Kernel (high 7.8)
- [CVE-2018-6554](https://insights.sbomify.com/CVE-2018-6554/): Denial of service in Linux Kernel (medium 5.5)
- [CVE-2018-6553](https://insights.sbomify.com/CVE-2018-6553/): AppArmor cupsd Sandbox Bypass Due to Use of Hard Links (high 8.8)
- [CVE-2018-6552](https://insights.sbomify.com/CVE-2018-6552/): Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing (high 7.8)
- [CVE-2018-6551](https://insights.sbomify.com/CVE-2018-6551/): Integer overflow in n/a (critical 9.8)
- [CVE-2018-6550](https://insights.sbomify.com/CVE-2018-6550/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-6548](https://insights.sbomify.com/CVE-2018-6548/): Use after free in n/a (critical 9.8)
- [CVE-2018-6547](https://insights.sbomify.com/CVE-2018-6547/): Missing authorization in n/a (critical 9.1)
- [CVE-2018-6546](https://insights.sbomify.com/CVE-2018-6546/): Auth bypass in n/a (critical 9.8)
- [CVE-2018-6545](https://insights.sbomify.com/CVE-2018-6545/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-6544](https://insights.sbomify.com/CVE-2018-6544/): Denial of service in n/a (medium 5.5)
- [CVE-2018-6543](https://insights.sbomify.com/CVE-2018-6543/): Integer overflow in n/a (high 7.8)
- [CVE-2018-6542](https://insights.sbomify.com/CVE-2018-6542/): Memory corruption in n/a (medium 6.5)
- [CVE-2018-6541](https://insights.sbomify.com/CVE-2018-6541/): Denial of service in n/a (medium 6.5)
- [CVE-2018-6540](https://insights.sbomify.com/CVE-2018-6540/): Denial of service in n/a (medium 6.5)
- [CVE-2018-6537](https://insights.sbomify.com/CVE-2018-6537/): Memory corruption in n/a (critical 9.8)
- [CVE-2018-6536](https://insights.sbomify.com/CVE-2018-6536/): Race condition in n/a (medium 5.5)
- [CVE-2018-6535](https://insights.sbomify.com/CVE-2018-6535/): Information disclosure in n/a (high 8.1)
- [CVE-2018-6534](https://insights.sbomify.com/CVE-2018-6534/): Null dereference in n/a (medium 6.5)
- [CVE-2018-6533](https://insights.sbomify.com/CVE-2018-6533/): Privilege escalation in n/a (high 7.8)
- [CVE-2018-6532](https://insights.sbomify.com/CVE-2018-6532/): Denial of service in n/a (high 7.5)
- [CVE-2018-6530](https://insights.sbomify.com/CVE-2018-6530/): D-Link Multiple Routers OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2018-6529](https://insights.sbomify.com/CVE-2018-6529/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-6528](https://insights.sbomify.com/CVE-2018-6528/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-6527](https://insights.sbomify.com/CVE-2018-6527/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-6526](https://insights.sbomify.com/CVE-2018-6526/): Information disclosure in n/a (medium 5.3)
- [CVE-2018-6525](https://insights.sbomify.com/CVE-2018-6525/): Denial of service in n/a (high 7.8)
- [CVE-2018-6524](https://insights.sbomify.com/CVE-2018-6524/): Denial of service in n/a (high 7.8)
- [CVE-2018-6523](https://insights.sbomify.com/CVE-2018-6523/): Denial of service in n/a (high 7.8)
- [CVE-2018-6522](https://insights.sbomify.com/CVE-2018-6522/): Denial of service in n/a (high 7.8)
- [CVE-2018-6521](https://insights.sbomify.com/CVE-2018-6521/): SimpleSAMLphp Use of insecure connection charset (sqlauth module) (critical 9.8)
- [CVE-2018-6520](https://insights.sbomify.com/CVE-2018-6520/): SimpleSAMLphp Open redirection protection bypass (medium 6.1)
- [CVE-2018-6519](https://insights.sbomify.com/CVE-2018-6519/): SimpleSAMLphp SAML2 library Regular Expression Denial of Service vulnerability (high 7.5)
- [CVE-2018-6518](https://insights.sbomify.com/CVE-2018-6518/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2018-6517](https://insights.sbomify.com/CVE-2018-6517/): Improper Certificate Validation in chloride (high 7.5)
- [CVE-2018-6516](https://insights.sbomify.com/CVE-2018-6516/): Code injection in pe-client-tools (high 7.8)
- [CVE-2018-6515](https://insights.sbomify.com/CVE-2018-6515/): Code injection in Puppet Agent (high 7.8)
- [CVE-2018-6514](https://insights.sbomify.com/CVE-2018-6514/): Privilege escalation in Puppet Agent (high 7.8)
- [CVE-2018-6513](https://insights.sbomify.com/CVE-2018-6513/): Privilege escalation in Puppet Enterprise and Puppet Agent (high 8.8)
- [CVE-2018-6512](https://insights.sbomify.com/CVE-2018-6512/): Code injection in Puppet Enterprise 2018.1.x prior to 2018.1.1, razor-server and pe-razor-server prior to 1.9.0.0 (critical 9.8)
- [CVE-2018-6511](https://insights.sbomify.com/CVE-2018-6511/): XSS Vulnerability in Puppet Enterprise Console (medium 5.4)
- [CVE-2018-6510](https://insights.sbomify.com/CVE-2018-6510/): XSS Vulnerability in Puppet Enterprise Console (medium 5.4)
- [CVE-2018-6508](https://insights.sbomify.com/CVE-2018-6508/): Code injection in Puppet Enterprise (high 8.0)
- [CVE-2018-6506](https://insights.sbomify.com/CVE-2018-6506/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2018-6505](https://insights.sbomify.com/CVE-2018-6505/): Path traversal in ArcSight Management Center (high 7.5)
- [CVE-2018-6504](https://insights.sbomify.com/CVE-2018-6504/): Cross-site request forgery in ArcSight Management Center (high 8.8)
- [CVE-2018-6503](https://insights.sbomify.com/CVE-2018-6503/): Missing authorization in ArcSight Management Center (medium 6.5)
- [CVE-2018-6502](https://insights.sbomify.com/CVE-2018-6502/): Cross-site scripting in ArcSight Management Center (medium 6.5)
- [CVE-2018-6501](https://insights.sbomify.com/CVE-2018-6501/): Missing authorization in n/a (medium 6.5)
- [CVE-2018-6500](https://insights.sbomify.com/CVE-2018-6500/): Path traversal in ArcSight Management Center (high 7.5)
- [CVE-2018-6499](https://insights.sbomify.com/CVE-2018-6499/): Code injection in Data Center Automation Containerized Suite (high 7.1)
- [CVE-2018-6498](https://insights.sbomify.com/CVE-2018-6498/): Micro Focus Container Deployment Foundation (CDF), Remote Code Execution (high 8.8)
- [CVE-2018-6497](https://insights.sbomify.com/CVE-2018-6497/): MFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF (high 7.5)
- [CVE-2018-6496](https://insights.sbomify.com/CVE-2018-6496/): MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF (high 7.5)
- [CVE-2018-6495](https://insights.sbomify.com/CVE-2018-6495/): MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting (medium 6.3)
- [CVE-2018-6494](https://insights.sbomify.com/CVE-2018-6494/): MFSBGN03807 rev.1 - HP Service Manager Software, Multiple Vulnerabilities (medium 6.4)
- [CVE-2018-6493](https://insights.sbomify.com/CVE-2018-6493/): MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities (high 8.7)
- [CVE-2018-6492](https://insights.sbomify.com/CVE-2018-6492/): MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities (medium 4.7)
- [CVE-2018-6491](https://insights.sbomify.com/CVE-2018-6491/): MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability (high 8.1)
- [CVE-2018-6490](https://insights.sbomify.com/CVE-2018-6490/): MFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS) (medium 5.9)
- [CVE-2018-6489](https://insights.sbomify.com/CVE-2018-6489/): XML external entity in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/24/