# Vulnerabilities published in 2018 - [CVE-2018-5329](https://insights.sbomify.com/CVE-2018-5329/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-5328](https://insights.sbomify.com/CVE-2018-5328/): Missing authorization in n/a (critical 9.8) - [CVE-2018-5327](https://insights.sbomify.com/CVE-2018-5327/): Security feature bypass in n/a (high 7.5) - [CVE-2018-5326](https://insights.sbomify.com/CVE-2018-5326/): Security feature bypass in n/a (high 7.5) - [CVE-2018-5319](https://insights.sbomify.com/CVE-2018-5319/): Information disclosure in n/a (high 7.5) - [CVE-2018-5316](https://insights.sbomify.com/CVE-2018-5316/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5315](https://insights.sbomify.com/CVE-2018-5315/): SQL injection in n/a (critical 9.8) - [CVE-2018-5314](https://insights.sbomify.com/CVE-2018-5314/): Command injection in n/a (high 7.5) - [CVE-2018-5313](https://insights.sbomify.com/CVE-2018-5313/): Privilege escalation in n/a (high 7.8) - [CVE-2018-5312](https://insights.sbomify.com/CVE-2018-5312/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5311](https://insights.sbomify.com/CVE-2018-5311/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5310](https://insights.sbomify.com/CVE-2018-5310/): Path traversal in n/a (medium 6.5) - [CVE-2018-5309](https://insights.sbomify.com/CVE-2018-5309/): Integer overflow in n/a (medium 5.5) - [CVE-2018-5308](https://insights.sbomify.com/CVE-2018-5308/): Null dereference in n/a (high 7.8) - [CVE-2018-5307](https://insights.sbomify.com/CVE-2018-5307/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5306](https://insights.sbomify.com/CVE-2018-5306/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5304](https://insights.sbomify.com/CVE-2018-5304/): Other in n/a (medium 4.3) - [CVE-2018-5303](https://insights.sbomify.com/CVE-2018-5303/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5301](https://insights.sbomify.com/CVE-2018-5301/): Magento Cross-Site Request Forgery (CSRF) (medium 6.5) - [CVE-2018-5299](https://insights.sbomify.com/CVE-2018-5299/): Memory corruption in n/a (critical 9.8) - [CVE-2018-5298](https://insights.sbomify.com/CVE-2018-5298/): Weak cryptography in n/a (high 7.5) - [CVE-2018-5296](https://insights.sbomify.com/CVE-2018-5296/): Denial of service in n/a (medium 5.5) - [CVE-2018-5295](https://insights.sbomify.com/CVE-2018-5295/): Integer overflow in n/a (medium 5.5) - [CVE-2018-5294](https://insights.sbomify.com/CVE-2018-5294/): Integer overflow in n/a (medium 6.5) - [CVE-2018-5293](https://insights.sbomify.com/CVE-2018-5293/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5292](https://insights.sbomify.com/CVE-2018-5292/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5291](https://insights.sbomify.com/CVE-2018-5291/): Path traversal in n/a (high 7.5) - [CVE-2018-5290](https://insights.sbomify.com/CVE-2018-5290/): Path traversal in n/a (high 7.5) - [CVE-2018-5289](https://insights.sbomify.com/CVE-2018-5289/): Path traversal in n/a (high 7.5) - [CVE-2018-5288](https://insights.sbomify.com/CVE-2018-5288/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5287](https://insights.sbomify.com/CVE-2018-5287/): Path traversal in n/a (high 7.5) - [CVE-2018-5286](https://insights.sbomify.com/CVE-2018-5286/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5285](https://insights.sbomify.com/CVE-2018-5285/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-5284](https://insights.sbomify.com/CVE-2018-5284/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5283](https://insights.sbomify.com/CVE-2018-5283/): Path traversal in n/a (high 7.5) - [CVE-2018-5282](https://insights.sbomify.com/CVE-2018-5282/): Memory corruption in n/a (high 7.8) - [CVE-2018-5281](https://insights.sbomify.com/CVE-2018-5281/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5280](https://insights.sbomify.com/CVE-2018-5280/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5279](https://insights.sbomify.com/CVE-2018-5279/): Denial of service in n/a (high 7.8) - [CVE-2018-5278](https://insights.sbomify.com/CVE-2018-5278/): Denial of service in n/a (low 3.3) - [CVE-2018-5277](https://insights.sbomify.com/CVE-2018-5277/): Denial of service in n/a (high 7.8) - [CVE-2018-5276](https://insights.sbomify.com/CVE-2018-5276/): Denial of service in n/a (high 7.8) - [CVE-2018-5275](https://insights.sbomify.com/CVE-2018-5275/): Denial of service in n/a (high 7.8) - [CVE-2018-5274](https://insights.sbomify.com/CVE-2018-5274/): Denial of service in n/a (high 7.8) - [CVE-2018-5273](https://insights.sbomify.com/CVE-2018-5273/): Denial of service in n/a (high 7.8) - [CVE-2018-5272](https://insights.sbomify.com/CVE-2018-5272/): Denial of service in n/a (high 7.8) - [CVE-2018-5271](https://insights.sbomify.com/CVE-2018-5271/): Denial of service in n/a (high 7.8) - [CVE-2018-5270](https://insights.sbomify.com/CVE-2018-5270/): Denial of service in n/a (high 7.8) - [CVE-2018-5269](https://insights.sbomify.com/CVE-2018-5269/): Reachable Assertion in OpenCV. (medium 5.5) - [CVE-2018-5268](https://insights.sbomify.com/CVE-2018-5268/): Out-of-bounds Write in OpenCV. (medium 5.5) - [CVE-2018-5267](https://insights.sbomify.com/CVE-2018-5267/): Auth bypass in n/a (critical 9.8) - [CVE-2018-5266](https://insights.sbomify.com/CVE-2018-5266/): Information disclosure in n/a (high 7.5) - [CVE-2018-5265](https://insights.sbomify.com/CVE-2018-5265/): Command injection in n/a (high 7.2) - [CVE-2018-5264](https://insights.sbomify.com/CVE-2018-5264/): Auth bypass in n/a (medium 5.9) - [CVE-2018-5263](https://insights.sbomify.com/CVE-2018-5263/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5262](https://insights.sbomify.com/CVE-2018-5262/): Memory corruption in n/a (critical 9.8) - [CVE-2018-5261](https://insights.sbomify.com/CVE-2018-5261/): Weak cryptography in n/a (high 8.1) - [CVE-2018-5259](https://insights.sbomify.com/CVE-2018-5259/): Missing authorization in n/a (high 8.8) - [CVE-2018-5258](https://insights.sbomify.com/CVE-2018-5258/): Security feature bypass in n/a (medium 5.9) - [CVE-2018-5256](https://insights.sbomify.com/CVE-2018-5256/): Missing authorization in n/a (high 7.5) - [CVE-2018-5255](https://insights.sbomify.com/CVE-2018-5255/): Denial of service in n/a (medium 6.5) - [CVE-2018-5254](https://insights.sbomify.com/CVE-2018-5254/): Denial of service in n/a (high 7.5) - [CVE-2018-5253](https://insights.sbomify.com/CVE-2018-5253/): Denial of service in n/a (high 7.8) - [CVE-2018-5252](https://insights.sbomify.com/CVE-2018-5252/): Denial of service in n/a (medium 5.3) - [CVE-2018-5251](https://insights.sbomify.com/CVE-2018-5251/): Integer overflow in n/a (medium 6.5) - [CVE-2018-5249](https://insights.sbomify.com/CVE-2018-5249/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5248](https://insights.sbomify.com/CVE-2018-5248/): Memory corruption in n/a (high 8.8) - [CVE-2018-5247](https://insights.sbomify.com/CVE-2018-5247/): Denial of service in n/a (medium 6.5) - [CVE-2018-5246](https://insights.sbomify.com/CVE-2018-5246/): Denial of service in n/a (medium 6.5) - [CVE-2018-5244](https://insights.sbomify.com/CVE-2018-5244/): Denial of service in n/a (medium 6.5) - [CVE-2018-5243](https://insights.sbomify.com/CVE-2018-5243/): Denial of service in Symantec Encryption Management Server (SEMS) (high 7.5) - [CVE-2018-5242](https://insights.sbomify.com/CVE-2018-5242/): Security feature bypass in Norton App Lock (medium 6.2) - [CVE-2018-5241](https://insights.sbomify.com/CVE-2018-5241/): Auth bypass in Advanced Secure Gateway (ASG) (critical 9.8) - [CVE-2018-5240](https://insights.sbomify.com/CVE-2018-5240/): Privilege escalation in Inventory Plugin for Symantec Management Agent (high 8.0) - [CVE-2018-5239](https://insights.sbomify.com/CVE-2018-5239/): Security feature bypass in Norton App Lock (medium 6.2) - [CVE-2018-5238](https://insights.sbomify.com/CVE-2018-5238/): Other in Norton Power Eraser (high 7.8) - [CVE-2018-5237](https://insights.sbomify.com/CVE-2018-5237/): Privilege escalation in Symantec Endpoint Protection (high 8.8) - [CVE-2018-5236](https://insights.sbomify.com/CVE-2018-5236/): Race condition in Symantec Endpoint Protection (medium 5.3) - [CVE-2018-5235](https://insights.sbomify.com/CVE-2018-5235/): Other in Norton Utilities (medium 6.0) - [CVE-2018-5234](https://insights.sbomify.com/CVE-2018-5234/): Command injection in Norton Core (high 8.0) - [CVE-2018-5233](https://insights.sbomify.com/CVE-2018-5233/): Grav CMS Cross-site scripting (XSS) vulnerability (medium 6.1) - [CVE-2018-5232](https://insights.sbomify.com/CVE-2018-5232/): Cross-site scripting in Jira (medium 6.1) - [CVE-2018-5231](https://insights.sbomify.com/CVE-2018-5231/): Denial of service in Jira (high 7.5) - [CVE-2018-5230](https://insights.sbomify.com/CVE-2018-5230/): Cross-site scripting in Jira (medium 6.1) - [CVE-2018-5229](https://insights.sbomify.com/CVE-2018-5229/): Cross-site scripting in Universal Plugin Manager (medium 5.4) - [CVE-2018-5228](https://insights.sbomify.com/CVE-2018-5228/): Cross-site scripting in Fisheye and Crucible (medium 6.1) - [CVE-2018-5227](https://insights.sbomify.com/CVE-2018-5227/): Cross-site scripting in Atlassian Application Links (medium 4.8) - [CVE-2018-5226](https://insights.sbomify.com/CVE-2018-5226/): Command injection in SourceTree Windows (high 8.8) - [CVE-2018-5225](https://insights.sbomify.com/CVE-2018-5225/): Path traversal in Bitbucket Server (critical 9.9) - [CVE-2018-5224](https://insights.sbomify.com/CVE-2018-5224/): Command injection in Bamboo (high 8.8) - [CVE-2018-5223](https://insights.sbomify.com/CVE-2018-5223/): Command injection in Fisheye and Crucible (high 7.2) - [CVE-2018-5221](https://insights.sbomify.com/CVE-2018-5221/): Memory corruption in n/a (high 8.8) - [CVE-2018-5220](https://insights.sbomify.com/CVE-2018-5220/): Denial of service in n/a (high 7.8) - [CVE-2018-5219](https://insights.sbomify.com/CVE-2018-5219/): Denial of service in n/a (high 7.8) - [CVE-2018-5218](https://insights.sbomify.com/CVE-2018-5218/): Denial of service in n/a (high 7.8) - [CVE-2018-5217](https://insights.sbomify.com/CVE-2018-5217/): Denial of service in n/a (high 7.8) - [CVE-2018-5216](https://insights.sbomify.com/CVE-2018-5216/): Radiant CMS vulnerable to Cross-site Scripting (medium 5.4) - [CVE-2018-5215](https://insights.sbomify.com/CVE-2018-5215/): Fork CMS XSS Vulnerability (medium 5.4) - [CVE-2018-5214](https://insights.sbomify.com/CVE-2018-5214/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-5213](https://insights.sbomify.com/CVE-2018-5213/): Cross-site scripting in n/a (medium 5.4) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/34/