Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 54 of 163.
- CVE-2018-25431 No-Cms 1.0 SQL Injection via order_by Parameter
- CVE-2018-25430 Paroiciel 11.20 SQL Injection via eGeqIdEquipe Parameter
- CVE-2018-25429 Paroiciel 11.20 SQL Injection via zProIdPro Parameter
- CVE-2018-25428 Paroiciel 11.20 SQL Injection via tRecIdListe Parameter
- CVE-2018-25427 Arm Whois 3.11 Buffer Overflow via SEH Overwrite
- CVE-2018-25426 WinMTR 0.91 Denial of Service via Buffer Overflow
- CVE-2018-25425 Yot CMS 3.3.1 SQL Injection via aid and cid Parameters
- CVE-2018-25424 Gate Pass Management System 2.1 SQL Injection via login-exec.php
- CVE-2018-25423 Arm Whois 3.11 Denial of Service via Buffer Overflow
- CVE-2018-25422 MOGG web simulator Script All Version SQL Injection via play.php
- CVE-2018-25421 Open STA Manager 2.3 Arbitrary File Download via Path Traversal
- CVE-2018-25420 AiOPMSD Final 1.0.0 SQL Injection via watch.php
- CVE-2018-25419 AiOPMSD Final 1.0.0 SQL Injection via genre.php
- CVE-2018-25418 AiOPMSD Final 1.0.0 SQL Injection via year.php
- CVE-2018-25417 AiOPMSD Final 1.0.0 SQL Injection via quality.php
- CVE-2018-25416 AiOPMSD Final 1.0.0 SQL Injection via country.php
- CVE-2018-25415 AiOPMSD Final 1.0.0 SQL Injection via director Parameter
- CVE-2018-25414 AiOPMSD Final 1.0.0 SQL Injection via actor.php
- CVE-2018-25413 AiOPMSD Final 1.0.0 SQL Injection via search.php
- CVE-2018-25412 Delta Sql 1.8.2 Arbitrary File Upload via docs_upload.php
- CVE-2018-25411 MGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php
- CVE-2018-25410 SIM-PKH 2.4.1 SQL Injection via media.php id Parameter
- CVE-2018-25409 SIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php
- CVE-2018-25408 The Open ISES Project 3.30A Path Traversal Arbitrary File Download
- CVE-2018-25407 eNdonesia Portal 8.7 SQL Injection via mod.php
- CVE-2018-25406 eNdonesia Portal 8.7 SQL Injection via mod.php
- CVE-2018-25405 eNdonesia Portal 8.7 SQL Injection via mod.php
- CVE-2018-25404 The Open ISES Project 3.30A SQL Injection via add_facnote.php
- CVE-2018-25403 The Open ISES Project 3.30A SQL Injection via city_graph.php
- CVE-2018-25402 The Open ISES Project 3.30A SQL Injection via inc_types_graph.php
- CVE-2018-25401 The Open ISES Project 3.30A SQL Injection via sever_graph.php
- CVE-2018-25400 The Open ISES Project 3.30A SQL Injection via form_post.php
- CVE-2018-25399 The Open ISES Project 3.30A SQL Injection via nearby.php
- CVE-2018-25398 The Open ISES Project 3.30A SQL Injection via main.php
- CVE-2018-25397 PHP-SHOP 1.0 Cross-Site Request Forgery via users.php
- CVE-2018-25396 Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm
- CVE-2018-25395 Kados R10 GreenBee SQL Injection via update_feature.php
- CVE-2018-25394 Kados R10 GreenBee SQL Injection via update_release.php
- CVE-2018-25393 Navigate CMS 2.8.5 Path Traversal via navigate_download.php
- CVE-2018-25392 MaxOn ERP Software 8.x-9.x SQL Injection via nomor Parameter
- CVE-2018-25391 HaPe PKH 1.1 Missing Authorization Allows Unauthenticated Record Deletion
- CVE-2018-25390 HaPe PKH 1.1 SQL Injection via desa Parameter
- CVE-2018-25389 HaPe PKH 1.1 SQL Injection via nama_kelompok Parameter
- CVE-2018-25388 HaPe PKH 1.1 Arbitrary File Upload via aksi_foto.php
- CVE-2018-25387 HaPe PKH 1.1 Cross-Site Request Forgery via aksi_user.php
- CVE-2018-25386 HaPe PKH 1.1 SQL Injection via id Parameter in admin/media.php
- CVE-2018-25385 E-Registrasi Pencak Silat 18.10 SQL Injection via id_partai
- CVE-2018-25384 Wikidforum 2.20 Cross-Site Scripting via reply_text Parameter
- CVE-2018-25383 Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass
- CVE-2018-25382 Zechat 1.5 SQL Injection via uname Parameter
- CVE-2018-25381 Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters
- CVE-2018-25380 Joomla Component eXtroForms 2.1.5 SQL Injection via filter parameters
- CVE-2018-25379 Collectric CMU 1.0 SQL Injection via lang Parameter
- CVE-2018-25378 Notebook Pro 2.0 Denial of Service via Notebook Name Field
- CVE-2018-25377 Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH
- CVE-2018-25376 Socusoft 3GP Photo Slideshow 8.05 Buffer Overflow SEH
- CVE-2018-25375 SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH
- CVE-2018-25374 Softneta MedDream PACS Server Premium 6.7.1.1 Directory Traversal
- CVE-2018-25373 DVD Photo Slideshow Professional 8.07 Buffer Overflow SEH
- CVE-2018-25372 MedDream PACS Server Premium 6.7.1.1 SQL Injection via email
- CVE-2018-25371 mooSocial Store Plugin 2.6 SQL Injection via product parameter
- CVE-2018-25370 Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php
- CVE-2018-25369 Visual Ping 0.8.0.0 Buffer Overflow Denial of Service
- CVE-2018-25368 Nord VPN 6.14.31 Denial of Service via Password Field
- CVE-2018-25367 NASA openVSP 3.16.1 Denial of Service via Buffer Overflow
- CVE-2018-25366 CuteFTP 5.0 XP Buffer Overflow via Site Manager Label Field
- CVE-2018-25365 PCViewer vt1000 Directory Traversal via GET Request
- CVE-2018-25364 Twitter-Clone 1 SQL Injection via search.php
- CVE-2018-25363 Twitter-Clone 1 Cross-Site Request Forgery via tweetdel.php
- CVE-2018-25362 Twitter-Clone 1 SQL Injection via follow.php
- CVE-2018-25361 Soroush IM Desktop App 0.17.0 Authentication Bypass via Database Injection
- CVE-2018-25360 AgataSoft Auto PingMaster 1.5 Buffer Overflow SEH
- CVE-2018-25359 Splinterware System Scheduler Pro 5.12 Privilege Escalation
- CVE-2018-25358 D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi
- CVE-2018-25357 Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php
- CVE-2018-25356 SIPp 3.6 Local Buffer Overflow via Command-line Arguments
- CVE-2018-25355 Audiograbber 1.83 Local Buffer Overflow via SEH
- CVE-2018-25354 Joomla Component jomres 9.11.2 Cross-Site Request Forgery
- CVE-2018-25353 Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload
- CVE-2018-25352 WordPress Ultimate Form Builder Lite 1.3.7 SQL Injection via entry_id
- CVE-2018-25351 Joomla! Component EkRishta 2.10 SQL Injection via username
- CVE-2018-25350 userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php
- CVE-2018-25349 userSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header
- CVE-2018-25348 Joomla! Component Ek Rishta 2.10 SQL Injection via user_detail
- CVE-2018-25347 WordPress Contact Form Maker Plugin 1.12.20 SQL Injection
- CVE-2018-25346 WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php
- CVE-2018-25345 10-Strike Network Scanner 3.0 Local Buffer Overflow SEH
- CVE-2018-25344 10-Strike Network Inventory Explorer 8.54 Buffer Overflow SEH
- CVE-2018-25343 Smartshop 1 Cross-Site Request Forgery via editprofile.php
- CVE-2018-25342 Smartshop 1 SQL Injection via search.php
- CVE-2018-25341 Smartshop 1 SQL Injection via product.php id Parameter
- CVE-2018-25340 Smartshop 1 SQL Injection via category.php
- CVE-2018-25339 Zechat 1.5 SQL Injection via v parameter (time-based blind)
- CVE-2018-25338 Zechat 1.5 SQL Injection via hashtag parameter
- CVE-2018-25337 Joomla JoomOCShop 1.0 Cross-Site Request Forgery
- CVE-2018-25336 jCart for OpenCart 2.3.0.2 Cross-Site Request Forgery
- CVE-2018-25335 WordPress Plugin Peugeot Music 1.0 Arbitrary File Upload
- CVE-2018-25334 Zechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameter
- CVE-2018-25333 Nordex N149/4.0-4.5 Wind Turbine Web Server SQL Injection
- CVE-2018-25332 GitBucket 4.23.1 Unauthenticated Remote Code Execution