# Vulnerabilities published in 2018


- [CVE-2018-4114](https://insights.sbomify.com/CVE-2018-4114/): Memory corruption in apple:icloud (high 8.8)
- [CVE-2018-4113](https://insights.sbomify.com/CVE-2018-4113/): Denial of service in apple:icloud (medium 6.5)
- [CVE-2018-4112](https://insights.sbomify.com/CVE-2018-4112/): Information disclosure in apple:mac os x (medium 5.5)
- [CVE-2018-4111](https://insights.sbomify.com/CVE-2018-4111/): Security feature bypass in apple:mac os x (medium 5.9)
- [CVE-2018-4110](https://insights.sbomify.com/CVE-2018-4110/): Security feature bypass in apple:iphone os (critical 9.8)
- [CVE-2018-4109](https://insights.sbomify.com/CVE-2018-4109/): Memory corruption in apple:apple tv (high 7.8)
- [CVE-2018-4108](https://insights.sbomify.com/CVE-2018-4108/): Other in apple:mac os x (critical 9.8)
- [CVE-2018-4107](https://insights.sbomify.com/CVE-2018-4107/): Security feature bypass in apple:mac os x (medium 6.5)
- [CVE-2018-4106](https://insights.sbomify.com/CVE-2018-4106/): Command injection in apple:mac os x (high 8.8)
- [CVE-2018-4105](https://insights.sbomify.com/CVE-2018-4105/): Security feature bypass in apple:mac os x (critical 9.8)
- [CVE-2018-4104](https://insights.sbomify.com/CVE-2018-4104/): Information disclosure in apple:iphone os (medium 5.5)
- [CVE-2018-4102](https://insights.sbomify.com/CVE-2018-4102/): Other in apple:safari (medium 6.5)
- [CVE-2018-4101](https://insights.sbomify.com/CVE-2018-4101/): Memory corruption in apple:icloud (high 8.8)
- [CVE-2018-4100](https://insights.sbomify.com/CVE-2018-4100/): Denial of service in apple:iphone os (high 7.5)
- [CVE-2018-4098](https://insights.sbomify.com/CVE-2018-4098/): Memory corruption in apple:mac os x (high 7.8)
- [CVE-2018-4097](https://insights.sbomify.com/CVE-2018-4097/): Other in apple:mac os x (high 7.8)
- [CVE-2018-4096](https://insights.sbomify.com/CVE-2018-4096/): Memory corruption in apple:apple tv (high 8.8)
- [CVE-2018-4095](https://insights.sbomify.com/CVE-2018-4095/): Memory corruption in apple:apple tv (high 7.8)
- [CVE-2018-4094](https://insights.sbomify.com/CVE-2018-4094/): Memory corruption in apple:apple tv (high 7.8)
- [CVE-2018-4093](https://insights.sbomify.com/CVE-2018-4093/): Information disclosure in apple:apple tv (medium 5.5)
- [CVE-2018-4092](https://insights.sbomify.com/CVE-2018-4092/): Race condition in apple:apple tv (medium 4.7)
- [CVE-2018-4091](https://insights.sbomify.com/CVE-2018-4091/): Security feature bypass in apple:mac os x (critical 10.0)
- [CVE-2018-4090](https://insights.sbomify.com/CVE-2018-4090/): Information disclosure in apple:apple tv (medium 5.5)
- [CVE-2018-4089](https://insights.sbomify.com/CVE-2018-4089/): Memory corruption in apple:apple tv (high 8.8)
- [CVE-2018-4088](https://insights.sbomify.com/CVE-2018-4088/): Memory corruption in apple:apple tv (high 8.8)
- [CVE-2018-4087](https://insights.sbomify.com/CVE-2018-4087/): Memory corruption in apple:apple tv (high 7.8)
- [CVE-2018-4086](https://insights.sbomify.com/CVE-2018-4086/): Security feature bypass in apple:apple tv (medium 5.9)
- [CVE-2018-4085](https://insights.sbomify.com/CVE-2018-4085/): Memory corruption in apple:apple tv (high 8.8)
- [CVE-2018-4084](https://insights.sbomify.com/CVE-2018-4084/): Information disclosure in apple:mac os x (medium 5.5)
- [CVE-2018-4083](https://insights.sbomify.com/CVE-2018-4083/): Memory corruption in apple:mac os x (high 7.8)
- [CVE-2018-4082](https://insights.sbomify.com/CVE-2018-4082/): Memory corruption in apple:apple tv (high 7.8)
- [CVE-2018-4073](https://insights.sbomify.com/CVE-2018-4073/): Missing authorization in Sierra Wireless (high 8.8)
- [CVE-2018-4072](https://insights.sbomify.com/CVE-2018-4072/): Missing authorization in Sierra Wireless (high 8.8)
- [CVE-2018-4071](https://insights.sbomify.com/CVE-2018-4071/): Missing authorization in Sierra Wireless (high 8.8)
- [CVE-2018-4070](https://insights.sbomify.com/CVE-2018-4070/): Missing authorization in Sierra Wireless (high 8.8)
- [CVE-2018-4069](https://insights.sbomify.com/CVE-2018-4069/): Information disclosure in Sierra Wireless (high 7.5)
- [CVE-2018-4068](https://insights.sbomify.com/CVE-2018-4068/): Information disclosure in Sierra Wireless (medium 5.3)
- [CVE-2018-4067](https://insights.sbomify.com/CVE-2018-4067/): Information disclosure in Sierra Wireless (medium 6.5)
- [CVE-2018-4066](https://insights.sbomify.com/CVE-2018-4066/): Cross-site request forgery in Sierra Wireless (high 8.8)
- [CVE-2018-4065](https://insights.sbomify.com/CVE-2018-4065/): Cross-site scripting in Sierra Wireless (medium 6.1)
- [CVE-2018-4064](https://insights.sbomify.com/CVE-2018-4064/): Auth bypass in Sierra Wireless (high 7.1)
- [CVE-2018-4063](https://insights.sbomify.com/CVE-2018-4063/): Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type (high 8.8, exploited in the wild)
- [CVE-2018-4062](https://insights.sbomify.com/CVE-2018-4062/): Hardcoded credentials in Sierra Wireless (high 8.1)
- [CVE-2018-4061](https://insights.sbomify.com/CVE-2018-4061/): Command injection in Sierra Wireless (high 8.8)
- [CVE-2018-4059](https://insights.sbomify.com/CVE-2018-4059/): Misconfiguration in coTURN (medium 6.5)
- [CVE-2018-4058](https://insights.sbomify.com/CVE-2018-4058/): Misconfiguration in coTURN (high 7.7)
- [CVE-2018-4056](https://insights.sbomify.com/CVE-2018-4056/): SQL injection in coTURN (critical 9.1)
- [CVE-2018-4055](https://insights.sbomify.com/CVE-2018-4055/): Privilege escalation in Pixar Renderman (high 7.1)
- [CVE-2018-4054](https://insights.sbomify.com/CVE-2018-4054/): Privilege escalation in Pixar Renderman (critical 9.0)
- [CVE-2018-4053](https://insights.sbomify.com/CVE-2018-4053/): Denial of service in GOG Galaxy (medium 6.2)
- [CVE-2018-4052](https://insights.sbomify.com/CVE-2018-4052/): Information disclosure in GOG Galaxy (medium 6.2)
- [CVE-2018-4051](https://insights.sbomify.com/CVE-2018-4051/): Privilege escalation in GOG Galaxy (high 7.1)
- [CVE-2018-4050](https://insights.sbomify.com/CVE-2018-4050/): Privilege escalation in GOG Galaxy (high 7.1)
- [CVE-2018-4049](https://insights.sbomify.com/CVE-2018-4049/): Misconfiguration in GOG Galaxy (critical 9.3)
- [CVE-2018-4048](https://insights.sbomify.com/CVE-2018-4048/): Privilege escalation in GOG Galaxy (critical 9.3)
- [CVE-2018-4047](https://insights.sbomify.com/CVE-2018-4047/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4046](https://insights.sbomify.com/CVE-2018-4046/): Denial of service in Clean My Mac (high 7.1)
- [CVE-2018-4045](https://insights.sbomify.com/CVE-2018-4045/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4044](https://insights.sbomify.com/CVE-2018-4044/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4043](https://insights.sbomify.com/CVE-2018-4043/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4042](https://insights.sbomify.com/CVE-2018-4042/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4041](https://insights.sbomify.com/CVE-2018-4041/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4040](https://insights.sbomify.com/CVE-2018-4040/): Memory corruption in Atlantis Word Processor (high 8.8)
- [CVE-2018-4039](https://insights.sbomify.com/CVE-2018-4039/): Memory corruption in Atlantis Word Processor (high 8.8)
- [CVE-2018-4038](https://insights.sbomify.com/CVE-2018-4038/): Memory corruption in Atlantis Word Processor (high 8.8)
- [CVE-2018-4037](https://insights.sbomify.com/CVE-2018-4037/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4036](https://insights.sbomify.com/CVE-2018-4036/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4035](https://insights.sbomify.com/CVE-2018-4035/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4034](https://insights.sbomify.com/CVE-2018-4034/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4033](https://insights.sbomify.com/CVE-2018-4033/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4032](https://insights.sbomify.com/CVE-2018-4032/): Privilege escalation in Clean My Mac (high 7.1)
- [CVE-2018-4031](https://insights.sbomify.com/CVE-2018-4031/): Code injection in CUJO (critical 9.0)
- [CVE-2018-4030](https://insights.sbomify.com/CVE-2018-4030/): Security feature bypass in CUJO (medium 5.3)
- [CVE-2018-4029](https://insights.sbomify.com/CVE-2018-4029/): Memory corruption in Novatek (critical 10.0)
- [CVE-2018-4028](https://insights.sbomify.com/CVE-2018-4028/): Path traversal in Novatek (medium 5.3)
- [CVE-2018-4027](https://insights.sbomify.com/CVE-2018-4027/): Denial of service in Novatek (medium 5.3)
- [CVE-2018-4026](https://insights.sbomify.com/CVE-2018-4026/): Denial of service in Novatek (high 7.5)
- [CVE-2018-4025](https://insights.sbomify.com/CVE-2018-4025/): Memory corruption in Novatek (high 7.5)
- [CVE-2018-4024](https://insights.sbomify.com/CVE-2018-4024/): Null dereference in Novatek (high 7.5)
- [CVE-2018-4023](https://insights.sbomify.com/CVE-2018-4023/): Memory corruption in Novatek (critical 10.0)
- [CVE-2018-4022](https://insights.sbomify.com/CVE-2018-4022/): Use after free in MKVToolNix (high 7.3)
- [CVE-2018-4021](https://insights.sbomify.com/CVE-2018-4021/): Command injection in Netgate pfSense (high 7.2)
- [CVE-2018-4020](https://insights.sbomify.com/CVE-2018-4020/): Command injection in Netgate pfSense (high 7.2)
- [CVE-2018-4019](https://insights.sbomify.com/CVE-2018-4019/): Command injection in Netgate pfSense (high 7.2)
- [CVE-2018-4018](https://insights.sbomify.com/CVE-2018-4018/): File upload in Novatek (critical 10.0)
- [CVE-2018-4017](https://insights.sbomify.com/CVE-2018-4017/): Hardcoded credentials in Anker (high 7.1)
- [CVE-2018-4016](https://insights.sbomify.com/CVE-2018-4016/): Memory corruption in Anker (high 8.0)
- [CVE-2018-4015](https://insights.sbomify.com/CVE-2018-4015/): Security feature bypass in Webroot (high 8.1)
- [CVE-2018-4014](https://insights.sbomify.com/CVE-2018-4014/): Memory corruption in Anker (high 8.0)
- [CVE-2018-4013](https://insights.sbomify.com/CVE-2018-4013/): Memory corruption in LIVE555 Media Server (critical 10.0)
- [CVE-2018-4012](https://insights.sbomify.com/CVE-2018-4012/): Memory corruption in Webroot (critical 9.0)
- [CVE-2018-4011](https://insights.sbomify.com/CVE-2018-4011/): Integer overflow in CUJO (medium 6.5)
- [CVE-2018-4010](https://insights.sbomify.com/CVE-2018-4010/): Command injection in ProtonVPN (high 8.8)
- [CVE-2018-4009](https://insights.sbomify.com/CVE-2018-4009/): Privilege escalation in Shimo VPN (high 8.8)
- [CVE-2018-4008](https://insights.sbomify.com/CVE-2018-4008/): Privilege escalation in Shimo VPN (critical 9.3)
- [CVE-2018-4007](https://insights.sbomify.com/CVE-2018-4007/): Privilege escalation in Shimo VPN (critical 9.0)
- [CVE-2018-4006](https://insights.sbomify.com/CVE-2018-4006/): Privilege escalation in Shimo VPN (critical 9.3)
- [CVE-2018-4005](https://insights.sbomify.com/CVE-2018-4005/): Privilege escalation in Shimo VPN (critical 9.3)
- [CVE-2018-4004](https://insights.sbomify.com/CVE-2018-4004/): Privilege escalation in Shimo VPN (high 7.1)
- [CVE-2018-4003](https://insights.sbomify.com/CVE-2018-4003/): Memory corruption in CUJO (high 8.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/42/
