# Vulnerabilities published in 2018 - [CVE-2018-9352](https://insights.sbomify.com/CVE-2018-9352/): Integer overflow in Android (medium 6.5) - [CVE-2018-9351](https://insights.sbomify.com/CVE-2018-9351/): Denial of service in Android (medium 6.5) - [CVE-2018-9350](https://insights.sbomify.com/CVE-2018-9350/): Denial of service in Android (medium 6.5) - [CVE-2018-9349](https://insights.sbomify.com/CVE-2018-9349/): Memory corruption in Android (medium 6.5) - [CVE-2018-9348](https://insights.sbomify.com/CVE-2018-9348/): Integer overflow in Android (high 7.5) - [CVE-2018-9347](https://insights.sbomify.com/CVE-2018-9347/): Denial of service in Android (medium 6.5) - [CVE-2018-9346](https://insights.sbomify.com/CVE-2018-9346/): Information disclosure in Android (medium 5.5) - [CVE-2018-9345](https://insights.sbomify.com/CVE-2018-9345/): Information disclosure in Android (medium 5.5) - [CVE-2018-9344](https://insights.sbomify.com/CVE-2018-9344/): Use after free in Android (high 7.8) - [CVE-2018-9341](https://insights.sbomify.com/CVE-2018-9341/): Memory corruption in Android (critical 9.8) - [CVE-2018-9340](https://insights.sbomify.com/CVE-2018-9340/): Information disclosure in Android (high 7.5) - [CVE-2018-9339](https://insights.sbomify.com/CVE-2018-9339/): Privilege escalation in Android (high 7.8) - [CVE-2018-9338](https://insights.sbomify.com/CVE-2018-9338/): Memory corruption in Android (high 7.8) - [CVE-2018-9337](https://insights.sbomify.com/CVE-2018-9337/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9336](https://insights.sbomify.com/CVE-2018-9336/): Use after free in n/a (high 7.8) - [CVE-2018-9335](https://insights.sbomify.com/CVE-2018-9335/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9334](https://insights.sbomify.com/CVE-2018-9334/): Information disclosure in n/a (medium 5.5) - [CVE-2018-9333](https://insights.sbomify.com/CVE-2018-9333/): Memory corruption in n/a (high 7.8) - [CVE-2018-9332](https://insights.sbomify.com/CVE-2018-9332/): Privilege escalation in n/a (high 7.8) - [CVE-2018-9331](https://insights.sbomify.com/CVE-2018-9331/): Path traversal in n/a (high 7.5) - [CVE-2018-9330](https://insights.sbomify.com/CVE-2018-9330/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9328](https://insights.sbomify.com/CVE-2018-9328/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9327](https://insights.sbomify.com/CVE-2018-9327/): Code injection in n/a (high 8.1) - [CVE-2018-9326](https://insights.sbomify.com/CVE-2018-9326/): Code injection in n/a (critical 9.8) - [CVE-2018-9325](https://insights.sbomify.com/CVE-2018-9325/): Information disclosure in n/a (high 7.5) - [CVE-2018-9322](https://insights.sbomify.com/CVE-2018-9322/): Security feature bypass in n/a (high 7.8) - [CVE-2018-9320](https://insights.sbomify.com/CVE-2018-9320/): Security feature bypass in n/a (high 7.8) - [CVE-2018-9318](https://insights.sbomify.com/CVE-2018-9318/): Security feature bypass in n/a (critical 9.8) - [CVE-2018-9314](https://insights.sbomify.com/CVE-2018-9314/): Security feature bypass in n/a (medium 6.8) - [CVE-2018-9313](https://insights.sbomify.com/CVE-2018-9313/): Denial of service in n/a (medium 5.3) - [CVE-2018-9312](https://insights.sbomify.com/CVE-2018-9312/): Security feature bypass in n/a (high 7.8) - [CVE-2018-9311](https://insights.sbomify.com/CVE-2018-9311/): Security feature bypass in n/a (critical 9.8) - [CVE-2018-9310](https://insights.sbomify.com/CVE-2018-9310/): Privilege escalation in n/a (high 7.8) - [CVE-2018-9309](https://insights.sbomify.com/CVE-2018-9309/): SQL injection in n/a (critical 9.8) - [CVE-2018-9307](https://insights.sbomify.com/CVE-2018-9307/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9305](https://insights.sbomify.com/CVE-2018-9305/): Information disclosure in n/a (high 8.1) - [CVE-2018-9304](https://insights.sbomify.com/CVE-2018-9304/): Denial of service in n/a (medium 6.5) - [CVE-2018-9303](https://insights.sbomify.com/CVE-2018-9303/): Denial of service in n/a (medium 6.5) - [CVE-2018-9302](https://insights.sbomify.com/CVE-2018-9302/): Server-side request forgery in n/a (critical 9.1) - [CVE-2018-9285](https://insights.sbomify.com/CVE-2018-9285/): Command injection in n/a (critical 9.8) - [CVE-2018-9284](https://insights.sbomify.com/CVE-2018-9284/): Other in n/a (critical 9.8) - [CVE-2018-9283](https://insights.sbomify.com/CVE-2018-9283/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9282](https://insights.sbomify.com/CVE-2018-9282/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9281](https://insights.sbomify.com/CVE-2018-9281/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-9280](https://insights.sbomify.com/CVE-2018-9280/): Information disclosure in n/a (medium 4.9) - [CVE-2018-9279](https://insights.sbomify.com/CVE-2018-9279/): Information disclosure in n/a (medium 4.9) - [CVE-2018-9276](https://insights.sbomify.com/CVE-2018-9276/): Paessler PRTG Network Monitor OS Command Injection (high 7.2, exploited in the wild) - [CVE-2018-9275](https://insights.sbomify.com/CVE-2018-9275/): Information disclosure in n/a (high 8.2) - [CVE-2018-9274](https://insights.sbomify.com/CVE-2018-9274/): Denial of service in n/a (high 7.5) - [CVE-2018-9273](https://insights.sbomify.com/CVE-2018-9273/): Denial of service in n/a (high 7.5) - [CVE-2018-9272](https://insights.sbomify.com/CVE-2018-9272/): Denial of service in n/a (high 7.5) - [CVE-2018-9271](https://insights.sbomify.com/CVE-2018-9271/): Denial of service in n/a (high 7.5) - [CVE-2018-9270](https://insights.sbomify.com/CVE-2018-9270/): Denial of service in n/a (high 7.5) - [CVE-2018-9269](https://insights.sbomify.com/CVE-2018-9269/): Denial of service in n/a (high 7.5) - [CVE-2018-9268](https://insights.sbomify.com/CVE-2018-9268/): Denial of service in n/a (high 7.5) - [CVE-2018-9267](https://insights.sbomify.com/CVE-2018-9267/): Denial of service in n/a (high 7.5) - [CVE-2018-9266](https://insights.sbomify.com/CVE-2018-9266/): Denial of service in n/a (high 7.5) - [CVE-2018-9265](https://insights.sbomify.com/CVE-2018-9265/): Denial of service in n/a (high 7.5) - [CVE-2018-9264](https://insights.sbomify.com/CVE-2018-9264/): Memory corruption in n/a (high 7.5) - [CVE-2018-9263](https://insights.sbomify.com/CVE-2018-9263/): Denial of service in n/a (high 7.5) - [CVE-2018-9262](https://insights.sbomify.com/CVE-2018-9262/): Denial of service in n/a (high 7.5) - [CVE-2018-9261](https://insights.sbomify.com/CVE-2018-9261/): Memory corruption in n/a (high 7.5) - [CVE-2018-9260](https://insights.sbomify.com/CVE-2018-9260/): In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. (high 7.5) - [CVE-2018-9259](https://insights.sbomify.com/CVE-2018-9259/): Denial of service in n/a (high 7.5) - [CVE-2018-9258](https://insights.sbomify.com/CVE-2018-9258/): Denial of service in n/a (high 7.5) - [CVE-2018-9257](https://insights.sbomify.com/CVE-2018-9257/): Denial of service in n/a (high 7.5) - [CVE-2018-9256](https://insights.sbomify.com/CVE-2018-9256/): Denial of service in n/a (high 7.5) - [CVE-2018-9252](https://insights.sbomify.com/CVE-2018-9252/): Denial of service in n/a (medium 6.5) - [CVE-2018-9251](https://insights.sbomify.com/CVE-2018-9251/): Denial of service in n/a (medium 5.3) - [CVE-2018-9250](https://insights.sbomify.com/CVE-2018-9250/): SQL injection in n/a (high 8.8) - [CVE-2018-9249](https://insights.sbomify.com/CVE-2018-9249/): Auth bypass in n/a (critical 9.8) - [CVE-2018-9248](https://insights.sbomify.com/CVE-2018-9248/): Auth bypass in n/a (critical 9.8) - [CVE-2018-9247](https://insights.sbomify.com/CVE-2018-9247/): SQL injection in n/a (critical 9.8) - [CVE-2018-9246](https://insights.sbomify.com/CVE-2018-9246/): Command injection in n/a (critical 9.8) - [CVE-2018-9245](https://insights.sbomify.com/CVE-2018-9245/): SQL injection in n/a (critical 9.8) - [CVE-2018-9244](https://insights.sbomify.com/CVE-2018-9244/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9243](https://insights.sbomify.com/CVE-2018-9243/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9242](https://insights.sbomify.com/CVE-2018-9242/): Path traversal in n/a (medium 5.5) - [CVE-2018-9240](https://insights.sbomify.com/CVE-2018-9240/): Null dereference in n/a (high 7.5) - [CVE-2018-9238](https://insights.sbomify.com/CVE-2018-9238/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9237](https://insights.sbomify.com/CVE-2018-9237/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9236](https://insights.sbomify.com/CVE-2018-9236/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9235](https://insights.sbomify.com/CVE-2018-9235/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9234](https://insights.sbomify.com/CVE-2018-9234/): Security feature bypass in n/a (high 7.5) - [CVE-2018-9233](https://insights.sbomify.com/CVE-2018-9233/): Weak cryptography in n/a (high 7.8) - [CVE-2018-9232](https://insights.sbomify.com/CVE-2018-9232/): Security feature bypass in n/a (high 7.8) - [CVE-2018-9230](https://insights.sbomify.com/CVE-2018-9230/): Security feature bypass in n/a (critical 9.8) - [CVE-2018-9209](https://insights.sbomify.com/CVE-2018-9209/): FineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability (critical 9.8) - [CVE-2018-9208](https://insights.sbomify.com/CVE-2018-9208/): File upload in jQuery Picture Cut (critical 9.8) - [CVE-2018-9207](https://insights.sbomify.com/CVE-2018-9207/): Unrestricted Upload of File with Dangerous Type in jquery-file-upload (critical 9.8) - [CVE-2018-9206](https://insights.sbomify.com/CVE-2018-9206/): Unrestricted Upload of File with Dangerous Type in blueimp-file-upload (critical 9.8) - [CVE-2018-9205](https://insights.sbomify.com/CVE-2018-9205/): Path traversal in avatar uploader (high 7.5) - [CVE-2018-9195](https://insights.sbomify.com/CVE-2018-9195/): Hardcoded credentials in FortiClient for Mac OS (medium 5.9) - [CVE-2018-9194](https://insights.sbomify.com/CVE-2018-9194/): Weak cryptography in FortiOS (medium 5.9) - [CVE-2018-9193](https://insights.sbomify.com/CVE-2018-9193/): Privilege escalation in FortiClientWindows (high 7.1) - [CVE-2018-9192](https://insights.sbomify.com/CVE-2018-9192/): Weak cryptography in FortiOS (medium 5.9) - [CVE-2018-9191](https://insights.sbomify.com/CVE-2018-9191/): Privilege escalation in Fortinet FortiClient for Windows (high 7.8) - [CVE-2018-9190](https://insights.sbomify.com/CVE-2018-9190/): Null dereference in Fortinet FortiClientWindows (medium 5.5) - [CVE-2018-9186](https://insights.sbomify.com/CVE-2018-9186/): Cross-site scripting in FortiAuthenticator (medium 6.1) - [CVE-2018-9185](https://insights.sbomify.com/CVE-2018-9185/): Information disclosure in Fortinet FortiOS (high 8.1) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/5/