# Vulnerabilities published in 2018


- [CVE-2018-3776](https://insights.sbomify.com/CVE-2018-3776/): Other in Nextcloud Server (medium 5.3)
- [CVE-2018-3775](https://insights.sbomify.com/CVE-2018-3775/): Auth bypass in Nextcloud Server (high 8.8)
- [CVE-2018-3774](https://insights.sbomify.com/CVE-2018-3774/): Open Redirect in url-parse (critical 10.0)
- [CVE-2018-3773](https://insights.sbomify.com/CVE-2018-3773/): metascraper before v5.2.0 vulnerable to stored cross-site scripting (medium 6.1)
- [CVE-2018-3772](https://insights.sbomify.com/CVE-2018-3772/): Command Injection in whereis (critical 9.8)
- [CVE-2018-3771](https://insights.sbomify.com/CVE-2018-3771/): statics-server Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2018-3770](https://insights.sbomify.com/CVE-2018-3770/): Remote Code Execution in markdown-pdf (medium 5.5)
- [CVE-2018-3769](https://insights.sbomify.com/CVE-2018-3769/): grape subject to Cross-site Scripting (medium 6.1)
- [CVE-2018-3767](https://insights.sbomify.com/CVE-2018-3767/): Denial of Service in memjs (critical 9.1)
- [CVE-2018-3766](https://insights.sbomify.com/CVE-2018-3766/): Path Traversal in buttle (high 7.5)
- [CVE-2018-3764](https://insights.sbomify.com/CVE-2018-3764/): Cross-site scripting in Nextcloud Contacts application (medium 4.8)
- [CVE-2018-3763](https://insights.sbomify.com/CVE-2018-3763/): Cross-site scripting in Nextcloud Calendar application (medium 4.8)
- [CVE-2018-3762](https://insights.sbomify.com/CVE-2018-3762/): Missing authorization in Nextcloud Server (medium 4.3)
- [CVE-2018-3761](https://insights.sbomify.com/CVE-2018-3761/): Auth bypass in Nextcloud Server (high 8.1)
- [CVE-2018-3760](https://insights.sbomify.com/CVE-2018-3760/): Sprockets path traversal leads to information leak (high 7.5)
- [CVE-2018-3759](https://insights.sbomify.com/CVE-2018-3759/): private_address_check contains race condition (low 3.7)
- [CVE-2018-3758](https://insights.sbomify.com/CVE-2018-3758/): express-cart unrestricted file upload vulnerability (high 8.8)
- [CVE-2018-3757](https://insights.sbomify.com/CVE-2018-3757/): Command Injection in pdf-image (critical 9.8)
- [CVE-2018-3756](https://insights.sbomify.com/CVE-2018-3756/): Security feature bypass in hyperledger:iroha (high 7.5)
- [CVE-2018-3755](https://insights.sbomify.com/CVE-2018-3755/): Cross-Site Scripting in sexstatic (medium 6.1)
- [CVE-2018-3754](https://insights.sbomify.com/CVE-2018-3754/): SQL Injection in query-mysql (high 8.8)
- [CVE-2018-3753](https://insights.sbomify.com/CVE-2018-3753/): Prototype Pollution in async merge-object (critical 9.8)
- [CVE-2018-3752](https://insights.sbomify.com/CVE-2018-3752/): Prototype Pollution in merge-options (critical 9.8)
- [CVE-2018-3751](https://insights.sbomify.com/CVE-2018-3751/): Prototype Pollution in merge-recursive (critical 9.8)
- [CVE-2018-3750](https://insights.sbomify.com/CVE-2018-3750/): Prototype Pollution in deep-extend (critical 9.8)
- [CVE-2018-3749](https://insights.sbomify.com/CVE-2018-3749/): Improper Input Validation in Deap (critical 9.8)
- [CVE-2018-3748](https://insights.sbomify.com/CVE-2018-3748/): Cross-Site Scripting in glance (medium 6.1)
- [CVE-2018-3747](https://insights.sbomify.com/CVE-2018-3747/): Cross-Site Scripting in public (medium 6.1)
- [CVE-2018-3746](https://insights.sbomify.com/CVE-2018-3746/): Command Injection in pdfinfojs (critical 9.8)
- [CVE-2018-3745](https://insights.sbomify.com/CVE-2018-3745/): Out-of-bounds Read in atob (critical 9.1)
- [CVE-2018-3744](https://insights.sbomify.com/CVE-2018-3744/): Path Traversal in html-pages (critical 9.8)
- [CVE-2018-3743](https://insights.sbomify.com/CVE-2018-3743/): Open Redirect in hekto (medium 6.1)
- [CVE-2018-3741](https://insights.sbomify.com/CVE-2018-3741/): rails-html-sanitizer Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2018-3740](https://insights.sbomify.com/CVE-2018-3740/): Sanitize vulnerable to Improper Input Validation and Cross-site Scripting (high 7.5)
- [CVE-2018-3739](https://insights.sbomify.com/CVE-2018-3739/): Denial of Service in https-proxy-agent (critical 9.1)
- [CVE-2018-3738](https://insights.sbomify.com/CVE-2018-3738/): Denial of Service in protobufjs (medium 5.5)
- [CVE-2018-3737](https://insights.sbomify.com/CVE-2018-3737/): Regular Expression Denial of Service in sshpk (high 7.5)
- [CVE-2018-3735](https://insights.sbomify.com/CVE-2018-3735/): bracket-template vulnerable to reflected XSS (medium 6.1)
- [CVE-2018-3734](https://insights.sbomify.com/CVE-2018-3734/): Path Traversal in stattic (high 7.5)
- [CVE-2018-3733](https://insights.sbomify.com/CVE-2018-3733/): Path Traversal in crud-file-server (high 7.5)
- [CVE-2018-3732](https://insights.sbomify.com/CVE-2018-3732/): Path Traversal in resolve-path (high 7.5)
- [CVE-2018-3731](https://insights.sbomify.com/CVE-2018-3731/): Path Traversal in public (high 7.5)
- [CVE-2018-3730](https://insights.sbomify.com/CVE-2018-3730/): Path Traversal in mcstatic (high 7.5)
- [CVE-2018-3729](https://insights.sbomify.com/CVE-2018-3729/): Path Traversal in localhost-now (high 7.5)
- [CVE-2018-3728](https://insights.sbomify.com/CVE-2018-3728/): Prototype Pollution in hoek (high 8.8)
- [CVE-2018-3727](https://insights.sbomify.com/CVE-2018-3727/): Path Traversal in 626 (high 7.5)
- [CVE-2018-3726](https://insights.sbomify.com/CVE-2018-3726/): Cross-site Scripting (XSS) - Stored in crud-file-server (medium 6.1)
- [CVE-2018-3725](https://insights.sbomify.com/CVE-2018-3725/): Path Traversal in hekto (high 7.5)
- [CVE-2018-3724](https://insights.sbomify.com/CVE-2018-3724/): Path Traversal in general-file-server (high 7.5)
- [CVE-2018-3723](https://insights.sbomify.com/CVE-2018-3723/): Prototype Pollution in defaults-deep (high 8.8)
- [CVE-2018-3722](https://insights.sbomify.com/CVE-2018-3722/): Prototype Pollution in merge-deep (high 8.8)
- [CVE-2018-3721](https://insights.sbomify.com/CVE-2018-3721/): Prototype Pollution in lodash (medium 6.5)
- [CVE-2018-3720](https://insights.sbomify.com/CVE-2018-3720/): Prototype Pollution in assign-deep (high 8.8)
- [CVE-2018-3719](https://insights.sbomify.com/CVE-2018-3719/): Prototype Pollution in mixin-deep (high 8.8)
- [CVE-2018-3718](https://insights.sbomify.com/CVE-2018-3718/): vercel/serve allows access to restricted files if filename is URL encoded. (medium 5.3)
- [CVE-2018-3717](https://insights.sbomify.com/CVE-2018-3717/): Cross-Site Scripting in connect (medium 5.4)
- [CVE-2018-3716](https://insights.sbomify.com/CVE-2018-3716/): Stored Cross-Site Scripting in simplehttpserver (medium 5.4)
- [CVE-2018-3715](https://insights.sbomify.com/CVE-2018-3715/): Path Traversal in glance (medium 6.5)
- [CVE-2018-3714](https://insights.sbomify.com/CVE-2018-3714/): Path Traversal in node-srv (medium 6.5)
- [CVE-2018-3713](https://insights.sbomify.com/CVE-2018-3713/): Path Traversal in angular-http-server (medium 6.5)
- [CVE-2018-3712](https://insights.sbomify.com/CVE-2018-3712/): Directory Traversal in serve (medium 6.5)
- [CVE-2018-3711](https://insights.sbomify.com/CVE-2018-3711/): Denial of Service vulnerability with large JSON payloads in fastify (high 7.5)
- [CVE-2018-3710](https://insights.sbomify.com/CVE-2018-3710/): Path traversal in GitLab Community and Enterprise Editions (high 7.8)
- [CVE-2018-3705](https://insights.sbomify.com/CVE-2018-3705/): Misconfiguration in Intel System Defense Utility (medium 5.5)
- [CVE-2018-3704](https://insights.sbomify.com/CVE-2018-3704/): Privilege escalation in Intel Parallel Studio (high 7.8)
- [CVE-2018-3703](https://insights.sbomify.com/CVE-2018-3703/): Privilege escalation in Intel(R) SSD Data Center Tool for Windows (high 7.8)
- [CVE-2018-3702](https://insights.sbomify.com/CVE-2018-3702/): Privilege escalation in ITE Tech Consumer Infrared Driver for Windows 10 Advisory (high 7.8)
- [CVE-2018-3701](https://insights.sbomify.com/CVE-2018-3701/): Privilege escalation in Intel(R) PROSet/Wireless WiFi Software Advisory (high 7.8)
- [CVE-2018-3700](https://insights.sbomify.com/CVE-2018-3700/): Code injection in intel:usb 3.0 extensible host controller driver (medium 6.7)
- [CVE-2018-3699](https://insights.sbomify.com/CVE-2018-3699/): Cross-site scripting in Intel RAID Web Console v3 (medium 6.1)
- [CVE-2018-3698](https://insights.sbomify.com/CVE-2018-3698/): Misconfiguration in Intel Ready Mode Technology (high 7.8)
- [CVE-2018-3697](https://insights.sbomify.com/CVE-2018-3697/): Privilege escalation in Intel Media Server Studio (high 7.8)
- [CVE-2018-3696](https://insights.sbomify.com/CVE-2018-3696/): Auth bypass in Intel RAID Web Console v3 for Windows (medium 5.5)
- [CVE-2018-3693](https://insights.sbomify.com/CVE-2018-3693/): Information disclosure in Most Modern Operating Systems (medium 5.6)
- [CVE-2018-3691](https://insights.sbomify.com/CVE-2018-3691/): Weak cryptography in Integrated Performance Primitives Cryptography Library (medium 4.7)
- [CVE-2018-3689](https://insights.sbomify.com/CVE-2018-3689/): Denial of service in Guard Extensions Platform Software Component for Linux (medium 5.5)
- [CVE-2018-3688](https://insights.sbomify.com/CVE-2018-3688/): Privilege escalation in Intel Quartus Prime Programmer and Tools (high 7.8)
- [CVE-2018-3687](https://insights.sbomify.com/CVE-2018-3687/): Privilege escalation in Intel Quartus II Programmer and Tools (high 7.8)
- [CVE-2018-3686](https://insights.sbomify.com/CVE-2018-3686/): Code injection in INTEL-SA-00086 Detection Tool (medium 6.7)
- [CVE-2018-3684](https://insights.sbomify.com/CVE-2018-3684/): Privilege escalation in Intel Quartus II (high 7.8)
- [CVE-2018-3683](https://insights.sbomify.com/CVE-2018-3683/): Privilege escalation in Intel Quartus Prime (high 7.8)
- [CVE-2018-3682](https://insights.sbomify.com/CVE-2018-3682/): Privilege escalation in Intel Server Boards, Compute Modules and Systems (high 8.2)
- [CVE-2018-3679](https://insights.sbomify.com/CVE-2018-3679/): Privilege escalation in Intel(R) Data Center Manager SDK (critical 9.6)
- [CVE-2018-3672](https://insights.sbomify.com/CVE-2018-3672/): Privilege escalation in Smart Sound Technology (high 8.8)
- [CVE-2018-3671](https://insights.sbomify.com/CVE-2018-3671/): Privilege escalation in Saffron MemoryBase (medium 5.7)
- [CVE-2018-3670](https://insights.sbomify.com/CVE-2018-3670/): Memory corruption in Smart Sound Technology (high 8.8)
- [CVE-2018-3669](https://insights.sbomify.com/CVE-2018-3669/): Denial of service in Intel(R) Centrino(R) Wireless-N and Intel(R) Centrino(R) Advanced-N products Bluetooth (high 7.5)
- [CVE-2018-3668](https://insights.sbomify.com/CVE-2018-3668/): Privilege escalation in Intel Processor Diagnostic Tool (high 7.8)
- [CVE-2018-3667](https://insights.sbomify.com/CVE-2018-3667/): Misconfiguration in Intel Processor Diagnostic Tool (high 7.8)
- [CVE-2018-3666](https://insights.sbomify.com/CVE-2018-3666/): Memory corruption in Smart Sound Technology (high 8.8)
- [CVE-2018-3665](https://insights.sbomify.com/CVE-2018-3665/): Information disclosure in Intel Core-based microprocessors (medium 5.6)
- [CVE-2018-3663](https://insights.sbomify.com/CVE-2018-3663/): Privilege escalation in Saffron MemoryBase (medium 5.7)
- [CVE-2018-3662](https://insights.sbomify.com/CVE-2018-3662/): Privilege escalation in Saffron MemoryBase (high 8.0)
- [CVE-2018-3661](https://insights.sbomify.com/CVE-2018-3661/): Memory corruption in System Configuration Utilities (medium 5.5)
- [CVE-2018-3659](https://insights.sbomify.com/CVE-2018-3659/): Information disclosure in Intel(R) Platform Trust Technology (PTT) (medium 6.8)
- [CVE-2018-3658](https://insights.sbomify.com/CVE-2018-3658/): Denial of service in Intel(R) Active Management Technology (medium 5.3)
- [CVE-2018-3657](https://insights.sbomify.com/CVE-2018-3657/): Memory corruption in Intel(R) Active Management Technology (medium 6.7)
- [CVE-2018-3655](https://insights.sbomify.com/CVE-2018-3655/): Other in Intel(R) CSME before version 11.21.55, Intel(R) Server Platform Services before version 4.0 and Intel(R) Trusted Execution Engine Firmware (high 7.3)
- [CVE-2018-3652](https://insights.sbomify.com/CVE-2018-3652/): Information disclosure in Intel Xeon Processor (high 7.6)
- [CVE-2018-3650](https://insights.sbomify.com/CVE-2018-3650/): Security feature bypass in Intel Distribution for Python (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/45/