# Vulnerabilities published in 2018


- [CVE-2018-4901](https://insights.sbomify.com/CVE-2018-4901/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (high 8.8)
- [CVE-2018-4900](https://insights.sbomify.com/CVE-2018-4900/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4899](https://insights.sbomify.com/CVE-2018-4899/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4898](https://insights.sbomify.com/CVE-2018-4898/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (high 8.8)
- [CVE-2018-4897](https://insights.sbomify.com/CVE-2018-4897/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4896](https://insights.sbomify.com/CVE-2018-4896/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4895](https://insights.sbomify.com/CVE-2018-4895/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (critical 9.8)
- [CVE-2018-4894](https://insights.sbomify.com/CVE-2018-4894/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4893](https://insights.sbomify.com/CVE-2018-4893/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4892](https://insights.sbomify.com/CVE-2018-4892/): Use after free in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (high 8.8)
- [CVE-2018-4891](https://insights.sbomify.com/CVE-2018-4891/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4890](https://insights.sbomify.com/CVE-2018-4890/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (high 8.8)
- [CVE-2018-4889](https://insights.sbomify.com/CVE-2018-4889/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4888](https://insights.sbomify.com/CVE-2018-4888/): Use after free in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (high 8.8)
- [CVE-2018-4887](https://insights.sbomify.com/CVE-2018-4887/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4886](https://insights.sbomify.com/CVE-2018-4886/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4885](https://insights.sbomify.com/CVE-2018-4885/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4884](https://insights.sbomify.com/CVE-2018-4884/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4883](https://insights.sbomify.com/CVE-2018-4883/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4882](https://insights.sbomify.com/CVE-2018-4882/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4881](https://insights.sbomify.com/CVE-2018-4881/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4880](https://insights.sbomify.com/CVE-2018-4880/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (medium 6.5)
- [CVE-2018-4879](https://insights.sbomify.com/CVE-2018-4879/): Memory corruption in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (critical 9.8)
- [CVE-2018-4878](https://insights.sbomify.com/CVE-2018-4878/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2018-4877](https://insights.sbomify.com/CVE-2018-4877/): Use after free in Adobe Flash Player before 28.0.0.161 (critical 9.8)
- [CVE-2018-4876](https://insights.sbomify.com/CVE-2018-4876/): Cross-site scripting in Adobe Experience Manager 6.3, 6.2, 6.1 (medium 6.1)
- [CVE-2018-4875](https://insights.sbomify.com/CVE-2018-4875/): Cross-site scripting in Adobe Experience Manager 6.1, 6.0 (medium 6.1)
- [CVE-2018-4873](https://insights.sbomify.com/CVE-2018-4873/): Privilege escalation in Creative Cloud Desktop Application 4.4.1.298 and earlier versions (high 7.8)
- [CVE-2018-4872](https://insights.sbomify.com/CVE-2018-4872/): Security feature bypass in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions (critical 10.0)
- [CVE-2018-4871](https://insights.sbomify.com/CVE-2018-4871/): Memory corruption in Adobe Flash Player before 28.0.0.137 (high 7.5)
- [CVE-2018-4868](https://insights.sbomify.com/CVE-2018-4868/): Denial of service in exiv2:exiv2 (medium 5.5)
- [CVE-2018-4863](https://insights.sbomify.com/CVE-2018-4863/): Security feature bypass in sophos:endpoint protection (medium 5.5)
- [CVE-2018-4862](https://insights.sbomify.com/CVE-2018-4862/): Privilege escalation in octopus:octopus deploy (high 8.8)
- [CVE-2018-4861](https://insights.sbomify.com/CVE-2018-4861/): Path traversal in SCALANCE M875 (medium 4.9)
- [CVE-2018-4860](https://insights.sbomify.com/CVE-2018-4860/): Command injection in SCALANCE M875 (high 7.2)
- [CVE-2018-4859](https://insights.sbomify.com/CVE-2018-4859/): Command injection in SCALANCE M875 (high 7.2)
- [CVE-2018-4858](https://insights.sbomify.com/CVE-2018-4858/): Missing authorization in IEC 61850 system configurator, DIGSI 5 (affected as IEC 61850 system configurator is incorporated), DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, SICAM SCC (high 7.8)
- [CVE-2018-4856](https://insights.sbomify.com/CVE-2018-4856/): Auth bypass in SICLOCK TC100, SICLOCK TC400 (medium 4.9)
- [CVE-2018-4855](https://insights.sbomify.com/CVE-2018-4855/): Information disclosure in SICLOCK TC100, SICLOCK TC400 (medium 6.5)
- [CVE-2018-4854](https://insights.sbomify.com/CVE-2018-4854/): Missing authorization in SICLOCK TC100, SICLOCK TC400 (high 8.8)
- [CVE-2018-4853](https://insights.sbomify.com/CVE-2018-4853/): Missing authorization in SICLOCK TC100, SICLOCK TC400 (critical 9.8)
- [CVE-2018-4852](https://insights.sbomify.com/CVE-2018-4852/): Auth bypass in SICLOCK TC100, SICLOCK TC400 (critical 9.8)
- [CVE-2018-4851](https://insights.sbomify.com/CVE-2018-4851/): Denial of service in SICLOCK TC100, SICLOCK TC400 (high 8.2)
- [CVE-2018-4850](https://insights.sbomify.com/CVE-2018-4850/): Denial of service in SIMATIC S7-400 (incl. F) CPU hardware version 4.0 and below, SIMATIC S7-400 (incl. F) CPU hardware version 5.0, SIMATIC S7-400H CPU hardware version 4.5 and below (high 7.5)
- [CVE-2018-4849](https://insights.sbomify.com/CVE-2018-4849/): Security feature bypass in Siveillance VMS Video for Android, Siveillance VMS Video for iOS (high 7.4)
- [CVE-2018-4848](https://insights.sbomify.com/CVE-2018-4848/): Cross-site scripting in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (medium 6.1)
- [CVE-2018-4847](https://insights.sbomify.com/CVE-2018-4847/): Information disclosure in SIMATIC WinCC OA Operator iOS App (medium 4.6)
- [CVE-2018-4846](https://insights.sbomify.com/CVE-2018-4846/): Hardcoded credentials in RAPIDLab 1200 systems RAPIDPoint 400 systems RAPIDPoint 500 systems RAPIDLab 1200 Series RAPIDPoint 500 systems RAPIDPoint 500 systems RAPIDPoint 500 systems RAPIDPoint 400 systems (critical 9.8)
- [CVE-2018-4845](https://insights.sbomify.com/CVE-2018-4845/): Privilege escalation in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems, RAPIDLab 1200 Series, RAPIDPoint 500 systems, RAPIDPoint 500 systems, RAPIDPoint 500 systems, RAPIDPoint 400 systems (high 8.8)
- [CVE-2018-4844](https://insights.sbomify.com/CVE-2018-4844/): Privilege escalation in SIMATIC WinCC OA UI for Android, SIMATIC WinCC OA UI for iOS (medium 6.7)
- [CVE-2018-4843](https://insights.sbomify.com/CVE-2018-4843/): Other in SIMATIC CP 343-1 (incl. SIPLUS variants) (medium 6.5)
- [CVE-2018-4842](https://insights.sbomify.com/CVE-2018-4842/): Cross-site scripting in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (medium 4.8)
- [CVE-2018-4841](https://insights.sbomify.com/CVE-2018-4841/): Auth bypass in TIM 1531 IRC (critical 9.8)
- [CVE-2018-4840](https://insights.sbomify.com/CVE-2018-4840/): Missing authorization in DIGSI 4 (high 7.5)
- [CVE-2018-4839](https://insights.sbomify.com/CVE-2018-4839/): Weak cryptography in DIGSI 4 (medium 5.3)
- [CVE-2018-4838](https://insights.sbomify.com/CVE-2018-4838/): Missing authorization in EN100 Ethernet module DNP3 variant (high 7.5)
- [CVE-2018-4837](https://insights.sbomify.com/CVE-2018-4837/): Denial of service in TeleControl Server Basic (high 7.5)
- [CVE-2018-4836](https://insights.sbomify.com/CVE-2018-4836/): Privilege escalation in TeleControl Server Basic (high 8.8)
- [CVE-2018-4835](https://insights.sbomify.com/CVE-2018-4835/): Auth bypass in TeleControl Server Basic (medium 5.3)
- [CVE-2018-4834](https://insights.sbomify.com/CVE-2018-4834/): Missing authorization in Desigo PXC00-E.D V4.10 (critical 9.8)
- [CVE-2018-4833](https://insights.sbomify.com/CVE-2018-4833/): Memory corruption in RFID 181EIP (high 8.8)
- [CVE-2018-4832](https://insights.sbomify.com/CVE-2018-4832/): Denial of service in OpenPCS 7 V7.1 and earlier (high 7.5)
- [CVE-2018-4478](https://insights.sbomify.com/CVE-2018-4478/): Privilege escalation in macOS (medium 6.8)
- [CVE-2018-4474](https://insights.sbomify.com/CVE-2018-4474/): Denial of service in Safari (high 7.5)
- [CVE-2018-4470](https://insights.sbomify.com/CVE-2018-4470/): Information disclosure in macOS (low 3.3)
- [CVE-2018-4468](https://insights.sbomify.com/CVE-2018-4468/): Missing authorization in macOS (medium 5.5)
- [CVE-2018-4467](https://insights.sbomify.com/CVE-2018-4467/): Memory corruption in macOS (high 7.8)
- [CVE-2018-4465](https://insights.sbomify.com/CVE-2018-4465/): Memory corruption in iOS, macOS, tvOS, watchOS (high 7.8)
- [CVE-2018-4464](https://insights.sbomify.com/CVE-2018-4464/): Memory corruption in iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows (high 8.8)
- [CVE-2018-4463](https://insights.sbomify.com/CVE-2018-4463/): Memory corruption in macOS (high 7.8)
- [CVE-2018-4462](https://insights.sbomify.com/CVE-2018-4462/): Other in macOS (medium 5.5)
- [CVE-2018-4461](https://insights.sbomify.com/CVE-2018-4461/): Memory corruption in iOS, macOS, tvOS, watchOS (high 7.8)
- [CVE-2018-4460](https://insights.sbomify.com/CVE-2018-4460/): Denial of service in iOS, macOS, tvOS, watchOS (medium 6.5)
- [CVE-2018-4456](https://insights.sbomify.com/CVE-2018-4456/): Memory corruption in macOS (high 7.8)
- [CVE-2018-4452](https://insights.sbomify.com/CVE-2018-4452/): Memory corruption in macOS (high 7.8)
- [CVE-2018-4451](https://insights.sbomify.com/CVE-2018-4451/): Memory corruption in macOS (high 7.8)
- [CVE-2018-4450](https://insights.sbomify.com/CVE-2018-4450/): Memory corruption in macOS (high 7.8)
- [CVE-2018-4449](https://insights.sbomify.com/CVE-2018-4449/): Memory corruption in macOS (high 7.8)
- [CVE-2018-4448](https://insights.sbomify.com/CVE-2018-4448/): Information disclosure in iOS (medium 5.5)
- [CVE-2018-4447](https://insights.sbomify.com/CVE-2018-4447/): Memory corruption in iOS, macOS, tvOS, watchOS (high 7.8)
- [CVE-2018-4446](https://insights.sbomify.com/CVE-2018-4446/): Other in iOS (low 3.3)
- [CVE-2018-4445](https://insights.sbomify.com/CVE-2018-4445/): Information disclosure in iOS, Safari (medium 4.3)
- [CVE-2018-4444](https://insights.sbomify.com/CVE-2018-4444/): Information disclosure in Safari (medium 6.5)
- [CVE-2018-4443](https://insights.sbomify.com/CVE-2018-4443/): Memory corruption in iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows (high 8.8)
- [CVE-2018-4442](https://insights.sbomify.com/CVE-2018-4442/): Memory corruption in iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows (high 8.8)
- [CVE-2018-4441](https://insights.sbomify.com/CVE-2018-4441/): Memory corruption in iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows (high 8.8)
- [CVE-2018-4440](https://insights.sbomify.com/CVE-2018-4440/): Business logic in iOS, Safari, iTunes for Windows, iCloud for Windows (medium 4.3)
- [CVE-2018-4439](https://insights.sbomify.com/CVE-2018-4439/): Business logic in iOS, Safari, iTunes for Windows, iCloud for Windows (medium 6.5)
- [CVE-2018-4438](https://insights.sbomify.com/CVE-2018-4438/): Memory corruption in iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows (high 8.8)
- [CVE-2018-4437](https://insights.sbomify.com/CVE-2018-4437/): Memory corruption in iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows (high 8.8)
- [CVE-2018-4436](https://insights.sbomify.com/CVE-2018-4436/): Security feature bypass in iOS, tvOS, watchOS (high 7.5)
- [CVE-2018-4435](https://insights.sbomify.com/CVE-2018-4435/): Business logic in iOS, macOS, tvOS, watchOS (high 7.8)
- [CVE-2018-4434](https://insights.sbomify.com/CVE-2018-4434/): Memory corruption in macOS (high 7.1)
- [CVE-2018-4433](https://insights.sbomify.com/CVE-2018-4433/): Security feature bypass in iOS (medium 5.5)
- [CVE-2018-4431](https://insights.sbomify.com/CVE-2018-4431/): Information disclosure in iOS, macOS, tvOS, watchOS (medium 5.5)
- [CVE-2018-4430](https://insights.sbomify.com/CVE-2018-4430/): Security feature bypass in iOS (low 2.4)
- [CVE-2018-4429](https://insights.sbomify.com/CVE-2018-4429/): Other in iOS, watchOS (medium 6.5)
- [CVE-2018-4428](https://insights.sbomify.com/CVE-2018-4428/): Security feature bypass in iOS (high 7.1)
- [CVE-2018-4427](https://insights.sbomify.com/CVE-2018-4427/): Memory corruption in watchOS, tvOS, macOS (high 7.8)
- [CVE-2018-4426](https://insights.sbomify.com/CVE-2018-4426/): Memory corruption in iOS, macOS, tvOS, watchOS (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/38/