Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 58 of 163.
- CVE-2018-25031 Spoofing attack in swagger-ui
- CVE-2018-25030 Mirmay Secure Private Browser / File Manager Auto Lock improper authentication
- CVE-2018-2503 Missing authorization in SAP NetWeaver AS Java (ServerCore)
- CVE-2018-25029 Security feature bypass in Z-Wave
- CVE-2018-25028 Use after free in libpulse-binding project:libpulse-binding
- CVE-2018-25027 Use after free in libpulse-binding project:libpulse-binding
- CVE-2018-25026 Out-of-bounds Write in actix-web
- CVE-2018-25025 Out-of-bounds Write in actix-web
- CVE-2018-25024 Out-of-bounds Write in actix-web
- CVE-2018-25023 Use of Uninitialized Resource in smallvec
- CVE-2018-25022 Information disclosure in toktok:toxcore
- CVE-2018-25021 Denial of service in toktok:toxcore
- CVE-2018-25020 Integer overflow in linux:linux kernel
- CVE-2018-2502 Misconfiguration in SAP Business One Service Layer (B1 ON HANA)
- CVE-2018-25019 LearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload
- CVE-2018-25018 Memory corruption in rarlab:unrar
- CVE-2018-25017 Memory corruption in rawspeed:rawspeed
- CVE-2018-25016 Other in greenbone:greenbone os
- CVE-2018-25015 Use after free in linux:linux kernel
- CVE-2018-25014 Memory corruption in libwebp
- CVE-2018-25013 Memory corruption in libwebp
- CVE-2018-25012 Memory corruption in libwebp
- CVE-2018-25011 Memory corruption in libwebp
- CVE-2018-25010 Memory corruption in libwebp
- CVE-2018-25009 Memory corruption in libwebp
- CVE-2018-25008 Race condition in rust-lang:rust
- CVE-2018-25007 Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
- CVE-2018-25004 Invariant failure when explaining a find with a UUID
- CVE-2018-25002 Other in sunhater:kcfinder
- CVE-2018-25001 Duplicate Advisory: Use after free in libpulse-binding
- CVE-2018-2500 Information disclosure in SAP Mobile Secure for Android
- CVE-2018-2499 Information disclosure in SAP Financial Consolidation Cube Designer (BOBJ EADES)
- CVE-2018-2497 Other in SAP HANA
- CVE-2018-2494 Privilege escalation in SAP Basis (ABAP Platform)
- CVE-2018-2492 XML external entity in SAP NetWeaver Application Server (Java Library)
- CVE-2018-2491 Cross-site scripting in SAP Fiori Client
- CVE-2018-2490 Missing authorization in SAP Fiori Client
- CVE-2018-2489 Missing authorization in SAP Fiori Client
- CVE-2018-2488 Denial of service in SAP Fiori Client
- CVE-2018-2487 Path traversal in SAP Disclosure Management
- CVE-2018-2486 Cross-site scripting in SAP Marketing (SAPSCORE)
- CVE-2018-2485 Cross-site scripting in SAP Fiori Client
- CVE-2018-2484 Missing authorization in SAP Enterprise Financial Services (Bank/CFM)
- CVE-2018-2483 Auth bypass in SAP BusinessObjects Business Intelligence Platform
- CVE-2018-2482 Denial of service in SAP Mobile Secure Android Application
- CVE-2018-2481 Privilege escalation in SAP ABA
- CVE-2018-2479 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (BIWorkspace)
- CVE-2018-2478 Command injection in SAP Basis (TREX / BWA installation)
- CVE-2018-2477 XML external entity in Knowledge Management (XMLForms) in SAP NetWeaver
- CVE-2018-2476 Open redirect in SAP NetWeaver (forums)
- CVE-2018-2475 Misconfiguration in project “Gardener”
- CVE-2018-2474 Cross-site request forgery in SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2)
- CVE-2018-2473 Denial of service in SAP BusinessObjects Business Intelligence Platform Server
- CVE-2018-2472 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform
- CVE-2018-2471 Information disclosure in SAP BusinessObjects Business Intelligence Platform
- CVE-2018-2470 Cross-site scripting in SAP NetWeaver Application Server for ABAP
- CVE-2018-2469 Information disclosure in SAP Adaptive Server Enterprise (ASE)
- CVE-2018-2468 Information disclosure in SAP Adaptive Server Enterprise (ASE)
- CVE-2018-2467 Information disclosure in SAP BusinessObjects BI Platform Servers (Software Development Kit)
- CVE-2018-2466 Cross-site scripting in SAP Data Services
- CVE-2018-2465 Denial of service in SAP HANA
- CVE-2018-2464 Cross-site scripting in SAP WebDynpro
- CVE-2018-2463 Server-side request forgery in SAP Hybris Commerce
- CVE-2018-2462 XML external entity in SAP NetWeaver BI
- CVE-2018-2461 Missing authorization in GBX01 HR
- CVE-2018-2460 Security feature bypass in SAP Business One Android application
- CVE-2018-2459 Information disclosure in SAP Mobile Platform
- CVE-2018-2458 Information disclosure in SAP Business One
- CVE-2018-2457 Information disclosure in SAP Adaptive Server Enterprise
- CVE-2018-2455 Missing authorization in SAP Enterprise Financial Services
- CVE-2018-2454 Missing authorization in SAP Enterprise Financial Services
- CVE-2018-2452 Cross-site scripting in SAP NetWeaver AS Java
- CVE-2018-2451 Auth bypass in SAP HANA Extended Application Services
- CVE-2018-2450 SQL injection in SAP MaxDB (liveCache)
- CVE-2018-2449 Auth bypass in SAP Supplier Relationship Management Master Data Management Catalog
- CVE-2018-2448 Information disclosure in SAP SRM-MDM CATALOG
- CVE-2018-2447 SQL injection in SAP BusinessObjects Business Intelligence
- CVE-2018-2446 Information disclosure in SAP BusinessObjects Business Intelligence
- CVE-2018-2445 Server-side request forgery in SAP BusinessObjects Business Intelligence Platform
- CVE-2018-2444 Cross-site scripting in SAP BusinessObjects Financial Consolidation
- CVE-2018-2442 Cross-site request forgery in SAP BusinessObjects Business Intelligence
- CVE-2018-2441 Information disclosure in SAP Change and Transport System (ABAP)
- CVE-2018-2440 Information disclosure in SAP Dynamic Authorization Management (DAM) by NextLabs (Java Policy Controller versions)
- CVE-2018-2439 Denial of service in SAP Internet Graphics Server (IGS)
- CVE-2018-2438 Denial of service in SAP Internet Graphics Server (IGS)
- CVE-2018-2437 Command injection in SAP Internet Graphics Server (IGS)
- CVE-2018-2436 Missing authorization in SAP R/3 Enterprise Retail
- CVE-2018-2435 Cross-site scripting in SAP NetWeaver Enterprise Portal
- CVE-2018-2434 Other in SAP NetWeaver
- CVE-2018-2433 Denial of service in SAP Gateway
- CVE-2018-2432 Cross-site scripting in SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console)
- CVE-2018-2431 Cross-site scripting in SAP BusinessObjects Business Intelligence Suite
- CVE-2018-2428 Information disclosure in SAP Infrastructure
- CVE-2018-2427 Code injection in SAP BusinessObjects Business Intelligence Suite
- CVE-2018-2425 Information disclosure in SAP Business One
- CVE-2018-2424 Cross-site scripting in SAP HANA Database
- CVE-2018-2423 Denial of service in SAP Internet Graphics Server (IGS)
- CVE-2018-2422 Denial of service in SAP Internet Graphics Server (IGS)
- CVE-2018-2421 Denial of service in SAP Internet Graphics Server (IGS)
- CVE-2018-2420 File upload in SAP Internet Graphics Server (IGS)