Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 45 of 163.
- CVE-2018-3776 Other in Nextcloud Server
- CVE-2018-3775 Auth bypass in Nextcloud Server
- CVE-2018-3774 Open Redirect in url-parse
- CVE-2018-3773 metascraper before v5.2.0 vulnerable to stored cross-site scripting
- CVE-2018-3772 Command Injection in whereis
- CVE-2018-3771 statics-server Cross-site Scripting vulnerability
- CVE-2018-3770 Remote Code Execution in markdown-pdf
- CVE-2018-3769 grape subject to Cross-site Scripting
- CVE-2018-3767 Denial of Service in memjs
- CVE-2018-3766 Path Traversal in buttle
- CVE-2018-3764 Cross-site scripting in Nextcloud Contacts application
- CVE-2018-3763 Cross-site scripting in Nextcloud Calendar application
- CVE-2018-3762 Missing authorization in Nextcloud Server
- CVE-2018-3761 Auth bypass in Nextcloud Server
- CVE-2018-3760 Sprockets path traversal leads to information leak
- CVE-2018-3759 private_address_check contains race condition
- CVE-2018-3758 express-cart unrestricted file upload vulnerability
- CVE-2018-3757 Command Injection in pdf-image
- CVE-2018-3756 Security feature bypass in hyperledger:iroha
- CVE-2018-3755 Cross-Site Scripting in sexstatic
- CVE-2018-3754 SQL Injection in query-mysql
- CVE-2018-3753 Prototype Pollution in async merge-object
- CVE-2018-3752 Prototype Pollution in merge-options
- CVE-2018-3751 Prototype Pollution in merge-recursive
- CVE-2018-3750 Prototype Pollution in deep-extend
- CVE-2018-3749 Improper Input Validation in Deap
- CVE-2018-3748 Cross-Site Scripting in glance
- CVE-2018-3747 Cross-Site Scripting in public
- CVE-2018-3746 Command Injection in pdfinfojs
- CVE-2018-3745 Out-of-bounds Read in atob
- CVE-2018-3744 Path Traversal in html-pages
- CVE-2018-3743 Open Redirect in hekto
- CVE-2018-3741 rails-html-sanitizer Cross-site Scripting vulnerability
- CVE-2018-3740 Sanitize vulnerable to Improper Input Validation and Cross-site Scripting
- CVE-2018-3739 Denial of Service in https-proxy-agent
- CVE-2018-3738 Denial of Service in protobufjs
- CVE-2018-3737 Regular Expression Denial of Service in sshpk
- CVE-2018-3735 bracket-template vulnerable to reflected XSS
- CVE-2018-3734 Path Traversal in stattic
- CVE-2018-3733 Path Traversal in crud-file-server
- CVE-2018-3732 Path Traversal in resolve-path
- CVE-2018-3731 Path Traversal in public
- CVE-2018-3730 Path Traversal in mcstatic
- CVE-2018-3729 Path Traversal in localhost-now
- CVE-2018-3728 Prototype Pollution in hoek
- CVE-2018-3727 Path Traversal in 626
- CVE-2018-3726 Cross-site Scripting (XSS) - Stored in crud-file-server
- CVE-2018-3725 Path Traversal in hekto
- CVE-2018-3724 Path Traversal in general-file-server
- CVE-2018-3723 Prototype Pollution in defaults-deep
- CVE-2018-3722 Prototype Pollution in merge-deep
- CVE-2018-3721 Prototype Pollution in lodash
- CVE-2018-3720 Prototype Pollution in assign-deep
- CVE-2018-3719 Prototype Pollution in mixin-deep
- CVE-2018-3718 vercel/serve allows access to restricted files if filename is URL encoded.
- CVE-2018-3717 Cross-Site Scripting in connect
- CVE-2018-3716 Stored Cross-Site Scripting in simplehttpserver
- CVE-2018-3715 Path Traversal in glance
- CVE-2018-3714 Path Traversal in node-srv
- CVE-2018-3713 Path Traversal in angular-http-server
- CVE-2018-3712 Directory Traversal in serve
- CVE-2018-3711 Denial of Service vulnerability with large JSON payloads in fastify
- CVE-2018-3710 Path traversal in GitLab Community and Enterprise Editions
- CVE-2018-3705 Misconfiguration in Intel System Defense Utility
- CVE-2018-3704 Privilege escalation in Intel Parallel Studio
- CVE-2018-3703 Privilege escalation in Intel(R) SSD Data Center Tool for Windows
- CVE-2018-3702 Privilege escalation in ITE Tech Consumer Infrared Driver for Windows 10 Advisory
- CVE-2018-3701 Privilege escalation in Intel(R) PROSet/Wireless WiFi Software Advisory
- CVE-2018-3700 Code injection in intel:usb 3.0 extensible host controller driver
- CVE-2018-3699 Cross-site scripting in Intel RAID Web Console v3
- CVE-2018-3698 Misconfiguration in Intel Ready Mode Technology
- CVE-2018-3697 Privilege escalation in Intel Media Server Studio
- CVE-2018-3696 Auth bypass in Intel RAID Web Console v3 for Windows
- CVE-2018-3693 Information disclosure in Most Modern Operating Systems
- CVE-2018-3691 Weak cryptography in Integrated Performance Primitives Cryptography Library
- CVE-2018-3689 Denial of service in Guard Extensions Platform Software Component for Linux
- CVE-2018-3688 Privilege escalation in Intel Quartus Prime Programmer and Tools
- CVE-2018-3687 Privilege escalation in Intel Quartus II Programmer and Tools
- CVE-2018-3686 Code injection in INTEL-SA-00086 Detection Tool
- CVE-2018-3684 Privilege escalation in Intel Quartus II
- CVE-2018-3683 Privilege escalation in Intel Quartus Prime
- CVE-2018-3682 Privilege escalation in Intel Server Boards, Compute Modules and Systems
- CVE-2018-3679 Privilege escalation in Intel(R) Data Center Manager SDK
- CVE-2018-3672 Privilege escalation in Smart Sound Technology
- CVE-2018-3671 Privilege escalation in Saffron MemoryBase
- CVE-2018-3670 Memory corruption in Smart Sound Technology
- CVE-2018-3669 Denial of service in Intel(R) Centrino(R) Wireless-N and Intel(R) Centrino(R) Advanced-N products Bluetooth
- CVE-2018-3668 Privilege escalation in Intel Processor Diagnostic Tool
- CVE-2018-3667 Misconfiguration in Intel Processor Diagnostic Tool
- CVE-2018-3666 Memory corruption in Smart Sound Technology
- CVE-2018-3665 Information disclosure in Intel Core-based microprocessors
- CVE-2018-3663 Privilege escalation in Saffron MemoryBase
- CVE-2018-3662 Privilege escalation in Saffron MemoryBase
- CVE-2018-3661 Memory corruption in System Configuration Utilities
- CVE-2018-3659 Information disclosure in Intel(R) Platform Trust Technology (PTT)
- CVE-2018-3658 Denial of service in Intel(R) Active Management Technology
- CVE-2018-3657 Memory corruption in Intel(R) Active Management Technology
- CVE-2018-3655 Other in Intel(R) CSME before version 11.21.55, Intel(R) Server Platform Services before version 4.0 and Intel(R) Trusted Execution Engine Firmware
- CVE-2018-3652 Information disclosure in Intel Xeon Processor
- CVE-2018-3650 Security feature bypass in Intel Distribution for Python