Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 33 of 163.
- CVE-2018-5459 Auth bypass in WAGO PFC200 Series
- CVE-2018-5458 Weak cryptography in Philips IntelliSpace Portal
- CVE-2018-5457 Other in Vyaire Medical CareFusion Upgrade Utility Vulnerability
- CVE-2018-5455 Auth bypass in Moxa OnCell G3100-HSPA Series
- CVE-2018-5454 Security feature bypass in Philips IntelliSpace Portal
- CVE-2018-5453 Denial of service in Moxa OnCell G3100-HSPA Series
- CVE-2018-5452 Memory corruption in Emerson ControlWave Micro Process Automation Controller
- CVE-2018-5451 Auth bypass in Philips Alice 6 System
- CVE-2018-5449 Null dereference in Moxa OnCell G3100-HSPA Series
- CVE-2018-5448 Medtronic 2090 Carelink Programmer Relative Path Traversal
- CVE-2018-5447 Information disclosure in Nari PCS-9611
- CVE-2018-5446 Medtronic 2090 Carelink Programmer Storing Passwords in a Recoverable Format
- CVE-2018-5445 Path traversal in Advantech WebAccess/SCADA
- CVE-2018-5443 SQL injection in Advantech WebAccess/SCADA
- CVE-2018-5442 Memory corruption in Fuji Electric V-Server VPR
- CVE-2018-5441 Other in PHOENIX CONTACT mGuard
- CVE-2018-5440 Memory corruption in 3S-Smart Software Solutions GmbH CODESYS Web Server
- CVE-2018-5439 Command injection in Nortek Linear eMerge E3 Series
- CVE-2018-5438 Auth bypass in n/a
- CVE-2018-5437 TIBCO Spotfire Product Family Information Disclosure Vulnerability
- CVE-2018-5436 TIBCO Spotfire Server information disclosure vulnerabilities
- CVE-2018-5435 TIBCO Spotfire Product Family Remote Code Execution Vulnerability
- CVE-2018-5434 XML eXternal Entity Expansion Vulnerabilities with TIBCO Runtime Agent
- CVE-2018-5433 XML eXternal Entity Expansion Vulnerabilities with TIBCO Administrator
- CVE-2018-5432 TIBCO Administrator - Enterprise Edition Cross-Site Scripting Vulnerability
- CVE-2018-5431 TIBCO JasperReports Server Cross Site Scripting Vulnerability
- CVE-2018-5430 TIBCO JasperReports Server Information Disclosure
- CVE-2018-5429 TIBCO JasperReports Library Code Sandboxing Problem
- CVE-2018-5428 TIBCO Data Virtualization Command Injection Vulnerability
- CVE-2018-5413 Privilege escalation in SecureSphere
- CVE-2018-5412 Command injection in SecureSphere
- CVE-2018-5411 Pixar's Tractor software, versions 2.2 and earlier, contains a stored cross-site scripting vulnerability
- CVE-2018-5410 Dokan file system driver contains a stack-based buffer overflow
- CVE-2018-5409 PrinterLogic Print Management Software updates and executes the code without origin and code verification
- CVE-2018-5408 PrinterLogic Print Management Software fails to validate the management portal SSL certificates
- CVE-2018-5407 Information disclosure in Processors supporting Simultaneous Multi-Threading
- CVE-2018-5406 The Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism.
- CVE-2018-5405 The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.
- CVE-2018-5404 The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.
- CVE-2018-5403 Command injection in SecureSphere
- CVE-2018-5402 Weak cryptography in DCU-210E
- CVE-2018-5401 Information disclosure in DCU-210E
- CVE-2018-5400 Missing authorization in DCU-210E
- CVE-2018-5399 Hardcoded credentials in DCU-210E
- CVE-2018-5393 TP-Link EAP Controller versions 2.5.3 and earlier lack RMI authentication
- CVE-2018-5392 mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR
- CVE-2018-5391 Denial of service in Kernel
- CVE-2018-5390 Denial of service in Linux Kernel
- CVE-2018-5389 CVE-2018-5389
- CVE-2018-5388 Denial of service in strongSwan
- CVE-2018-5387 Wizkunde SAMLBase SAML Bypass
- CVE-2018-5386 Auth bypass in Infinity
- CVE-2018-5385 Navarino Infinity web interface up to version 2.2 is prone to session fixation attacks
- CVE-2018-5384 SQL injection in Infinity
- CVE-2018-5383 Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange
- CVE-2018-5382 Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions
- CVE-2018-5381 Denial of service in bgpd
- CVE-2018-5380 Memory corruption in bgpd
- CVE-2018-5379 Use after free in bgpd
- CVE-2018-5378 Information disclosure in bgpd
- CVE-2018-5377 Missing authorization in n/a
- CVE-2018-5376 Cross-site scripting in n/a
- CVE-2018-5375 Cross-site scripting in n/a
- CVE-2018-5374 SQL injection in n/a
- CVE-2018-5373 SQL injection in n/a
- CVE-2018-5372 SQL injection in n/a
- CVE-2018-5371 Command injection in n/a
- CVE-2018-5370 Cross-site scripting in n/a
- CVE-2018-5369 Cross-site scripting in n/a
- CVE-2018-5368 Cross-site request forgery in n/a
- CVE-2018-5367 WPGlobus plugin Stored XSS & CSRF security vulnerability
- CVE-2018-5366 WPGlobus plugin Stored XSS & CSRF security vulnerability
- CVE-2018-5365 WPGlobus plugin Stored XSS & CSRF security vulnerability
- CVE-2018-5364 WPGlobus plugin Stored XSS & CSRF security vulnerability
- CVE-2018-5363 WPGlobus plugin Stored XSS & CSRF security vulnerability
- CVE-2018-5362 WPGlobus plugin Stored XSS & CSRF security vulnerability
- CVE-2018-5361 WPGlobus plugin Stored XSS & CSRF security vulnerability
- CVE-2018-5360 Memory corruption in n/a
- CVE-2018-5359 Memory corruption in n/a
- CVE-2018-5358 Denial of service in n/a
- CVE-2018-5357 Denial of service in n/a
- CVE-2018-5354 Security feature bypass in n/a
- CVE-2018-5353 Auth bypass in n/a
- CVE-2018-5349 Privilege escalation in n/a
- CVE-2018-5347 Command injection in n/a
- CVE-2018-5345 Memory corruption in n/a
- CVE-2018-5344 Use after free in n/a
- CVE-2018-5342 Privilege escalation in n/a
- CVE-2018-5341 File upload in n/a
- CVE-2018-5340 Privilege escalation in n/a
- CVE-2018-5339 Missing authorization in n/a
- CVE-2018-5338 Missing authorization in n/a
- CVE-2018-5337 Path traversal in n/a
- CVE-2018-5336 Denial of service in n/a
- CVE-2018-5335 Denial of service in n/a
- CVE-2018-5334 Denial of service in n/a
- CVE-2018-5333 Null dereference in n/a
- CVE-2018-5332 Memory corruption in n/a
- CVE-2018-5331 Cross-site scripting in n/a
- CVE-2018-5330 Denial of service in n/a