# Vulnerabilities published in 2018 - [CVE-2018-5766](https://insights.sbomify.com/CVE-2018-5766/): Memory corruption in n/a (high 8.8) - [CVE-2018-5764](https://insights.sbomify.com/CVE-2018-5764/): Security feature bypass in n/a (high 7.5) - [CVE-2018-5763](https://insights.sbomify.com/CVE-2018-5763/): Denial of service in n/a (medium 5.9) - [CVE-2018-5762](https://insights.sbomify.com/CVE-2018-5762/): Weak cryptography in n/a (medium 5.9) - [CVE-2018-5761](https://insights.sbomify.com/CVE-2018-5761/): Security feature bypass in n/a (high 8.1) - [CVE-2018-5759](https://insights.sbomify.com/CVE-2018-5759/): Denial of service in n/a (medium 5.5) - [CVE-2018-5758](https://insights.sbomify.com/CVE-2018-5758/): XML external entity in n/a (medium 6.5) - [CVE-2018-5757](https://insights.sbomify.com/CVE-2018-5757/): Command injection in n/a (high 8.8) - [CVE-2018-5756](https://insights.sbomify.com/CVE-2018-5756/): Missing authorization in n/a (medium 4.3) - [CVE-2018-5755](https://insights.sbomify.com/CVE-2018-5755/): Path traversal in n/a (medium 5.5) - [CVE-2018-5754](https://insights.sbomify.com/CVE-2018-5754/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5753](https://insights.sbomify.com/CVE-2018-5753/): Other in n/a (medium 6.5) - [CVE-2018-5752](https://insights.sbomify.com/CVE-2018-5752/): Server-side request forgery in n/a (high 8.8) - [CVE-2018-5751](https://insights.sbomify.com/CVE-2018-5751/): Information disclosure in n/a (medium 6.5) - [CVE-2018-5750](https://insights.sbomify.com/CVE-2018-5750/): Information disclosure in n/a (medium 5.5) - [CVE-2018-5749](https://insights.sbomify.com/CVE-2018-5749/): Code injection in n/a (critical 9.8) - [CVE-2018-5748](https://insights.sbomify.com/CVE-2018-5748/): Denial of service in n/a (high 7.5) - [CVE-2018-5747](https://insights.sbomify.com/CVE-2018-5747/): Use after free in n/a (medium 5.5) - [CVE-2018-5745](https://insights.sbomify.com/CVE-2018-5745/): An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys (medium 4.9) - [CVE-2018-5744](https://insights.sbomify.com/CVE-2018-5744/): A specially crafted packet can cause named to leak memory (high 7.5) - [CVE-2018-5743](https://insights.sbomify.com/CVE-2018-5743/): Limiting simultaneous TCP clients was ineffective (high 7.5) - [CVE-2018-5742](https://insights.sbomify.com/CVE-2018-5742/): An oversight while backporting a feature leads to an assertion failure in buffer.c:420 (medium 5.9) - [CVE-2018-5741](https://insights.sbomify.com/CVE-2018-5741/): Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation (medium 6.5) - [CVE-2018-5740](https://insights.sbomify.com/CVE-2018-5740/): A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named (high 7.5) - [CVE-2018-5739](https://insights.sbomify.com/CVE-2018-5739/): Failure to release memory may exhaust system resources (medium 6.5) - [CVE-2018-5738](https://insights.sbomify.com/CVE-2018-5738/): Some versions of BIND can improperly permit recursive query service to unauthorized clients (medium 5.3) - [CVE-2018-5737](https://insights.sbomify.com/CVE-2018-5737/): A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. (medium 5.9) - [CVE-2018-5736](https://insights.sbomify.com/CVE-2018-5736/): Denial of service in n/a (medium 5.3) - [CVE-2018-5735](https://insights.sbomify.com/CVE-2018-5735/): Backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858 (high 7.5) - [CVE-2018-5734](https://insights.sbomify.com/CVE-2018-5734/): A malformed request can trigger an assertion failure in badcache.c (high 7.5) - [CVE-2018-5733](https://insights.sbomify.com/CVE-2018-5733/): A malicious client can overflow a reference counter in ISC dhcpd (medium 5.9) - [CVE-2018-5732](https://insights.sbomify.com/CVE-2018-5732/): A specially constructed response from a malicious server can cause a buffer overflow in dhclient (high 7.5) - [CVE-2018-5731](https://insights.sbomify.com/CVE-2018-5731/): Race condition in n/a (high 7.0) - [CVE-2018-5730](https://insights.sbomify.com/CVE-2018-5730/): Security feature bypass in n/a (low 3.8) - [CVE-2018-5729](https://insights.sbomify.com/CVE-2018-5729/): Null dereference in n/a (medium 4.7) - [CVE-2018-5728](https://insights.sbomify.com/CVE-2018-5728/): Information disclosure in n/a (medium 5.3) - [CVE-2018-5727](https://insights.sbomify.com/CVE-2018-5727/): Integer overflow in n/a (medium 6.5) - [CVE-2018-5726](https://insights.sbomify.com/CVE-2018-5726/): Information disclosure in n/a (critical 9.8) - [CVE-2018-5725](https://insights.sbomify.com/CVE-2018-5725/): Missing authorization in n/a (high 7.5) - [CVE-2018-5724](https://insights.sbomify.com/CVE-2018-5724/): File upload in n/a (critical 9.8) - [CVE-2018-5723](https://insights.sbomify.com/CVE-2018-5723/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2018-5721](https://insights.sbomify.com/CVE-2018-5721/): Memory corruption in n/a (high 8.8) - [CVE-2018-5720](https://insights.sbomify.com/CVE-2018-5720/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-5718](https://insights.sbomify.com/CVE-2018-5718/): Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft SysWatch, SoftControl/ (high 7.1) - [CVE-2018-5717](https://insights.sbomify.com/CVE-2018-5717/): Missing authorization in n/a (high 7.5) - [CVE-2018-5716](https://insights.sbomify.com/CVE-2018-5716/): Path traversal in n/a (high 8.1) - [CVE-2018-5715](https://insights.sbomify.com/CVE-2018-5715/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5714](https://insights.sbomify.com/CVE-2018-5714/): Denial of service in n/a (high 7.8) - [CVE-2018-5713](https://insights.sbomify.com/CVE-2018-5713/): Denial of service in n/a (high 7.8) - [CVE-2018-5712](https://insights.sbomify.com/CVE-2018-5712/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5711](https://insights.sbomify.com/CVE-2018-5711/): Denial of service in n/a (medium 5.5) - [CVE-2018-5710](https://insights.sbomify.com/CVE-2018-5710/): Null dereference in n/a (medium 6.5) - [CVE-2018-5709](https://insights.sbomify.com/CVE-2018-5709/): Integer overflow in n/a (high 7.5) - [CVE-2018-5708](https://insights.sbomify.com/CVE-2018-5708/): Information disclosure in n/a (high 8.0) - [CVE-2018-5706](https://insights.sbomify.com/CVE-2018-5706/): An issue was discovered in Octopus Deploy before 4.1.9. (high 8.8) - [CVE-2018-5705](https://insights.sbomify.com/CVE-2018-5705/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5704](https://insights.sbomify.com/CVE-2018-5704/): Command injection in n/a (critical 9.6) - [CVE-2018-5703](https://insights.sbomify.com/CVE-2018-5703/): Memory corruption in n/a (critical 9.8) - [CVE-2018-5702](https://insights.sbomify.com/CVE-2018-5702/): Auth bypass in n/a (high 8.8) - [CVE-2018-5701](https://insights.sbomify.com/CVE-2018-5701/): Memory corruption in n/a (critical 9.8) - [CVE-2018-5700](https://insights.sbomify.com/CVE-2018-5700/): Path traversal in n/a (high 8.8) - [CVE-2018-5698](https://insights.sbomify.com/CVE-2018-5698/): Memory corruption in n/a (high 7.8) - [CVE-2018-5697](https://insights.sbomify.com/CVE-2018-5697/): SQL injection in n/a (high 7.2) - [CVE-2018-5696](https://insights.sbomify.com/CVE-2018-5696/): SQL injection in n/a (critical 9.8) - [CVE-2018-5695](https://insights.sbomify.com/CVE-2018-5695/): SQL injection in n/a (high 7.2) - [CVE-2018-5694](https://insights.sbomify.com/CVE-2018-5694/): Command injection in n/a (high 8.8) - [CVE-2018-5693](https://insights.sbomify.com/CVE-2018-5693/): Information disclosure in n/a (low 3.3) - [CVE-2018-5692](https://insights.sbomify.com/CVE-2018-5692/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5691](https://insights.sbomify.com/CVE-2018-5691/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5690](https://insights.sbomify.com/CVE-2018-5690/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5689](https://insights.sbomify.com/CVE-2018-5689/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5688](https://insights.sbomify.com/CVE-2018-5688/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5687](https://insights.sbomify.com/CVE-2018-5687/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5686](https://insights.sbomify.com/CVE-2018-5686/): Denial of service in n/a (medium 5.5) - [CVE-2018-5685](https://insights.sbomify.com/CVE-2018-5685/): Denial of service in n/a (medium 6.5) - [CVE-2018-5684](https://insights.sbomify.com/CVE-2018-5684/): Memory corruption in n/a (high 8.8) - [CVE-2018-5683](https://insights.sbomify.com/CVE-2018-5683/): Denial of service in n/a (medium 6.0) - [CVE-2018-5682](https://insights.sbomify.com/CVE-2018-5682/): Information disclosure in n/a (medium 5.3) - [CVE-2018-5681](https://insights.sbomify.com/CVE-2018-5681/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5680](https://insights.sbomify.com/CVE-2018-5680/): Memory corruption in n/a (high 8.8) - [CVE-2018-5679](https://insights.sbomify.com/CVE-2018-5679/): Memory corruption in n/a (high 8.8) - [CVE-2018-5678](https://insights.sbomify.com/CVE-2018-5678/): Memory corruption in n/a (high 8.8) - [CVE-2018-5677](https://insights.sbomify.com/CVE-2018-5677/): Memory corruption in n/a (high 8.8) - [CVE-2018-5676](https://insights.sbomify.com/CVE-2018-5676/): Memory corruption in n/a (high 8.8) - [CVE-2018-5675](https://insights.sbomify.com/CVE-2018-5675/): Memory corruption in n/a (high 8.8) - [CVE-2018-5674](https://insights.sbomify.com/CVE-2018-5674/): Memory corruption in n/a (high 8.8) - [CVE-2018-5673](https://insights.sbomify.com/CVE-2018-5673/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-5672](https://insights.sbomify.com/CVE-2018-5672/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5671](https://insights.sbomify.com/CVE-2018-5671/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5670](https://insights.sbomify.com/CVE-2018-5670/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5669](https://insights.sbomify.com/CVE-2018-5669/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-5668](https://insights.sbomify.com/CVE-2018-5668/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5667](https://insights.sbomify.com/CVE-2018-5667/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5666](https://insights.sbomify.com/CVE-2018-5666/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5665](https://insights.sbomify.com/CVE-2018-5665/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5664](https://insights.sbomify.com/CVE-2018-5664/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5663](https://insights.sbomify.com/CVE-2018-5663/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5662](https://insights.sbomify.com/CVE-2018-5662/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5661](https://insights.sbomify.com/CVE-2018-5661/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5660](https://insights.sbomify.com/CVE-2018-5660/): Cross-site scripting in n/a (medium 4.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/31/