Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 59 of 163.
- CVE-2018-2419 Missing authorization in SAP Enterprise Financial Services (EA-FINSERV)
- CVE-2018-2418 Code injection in SAP MaxDB ODBC driver
- CVE-2018-2417 Information disclosure in SAP Identity Management
- CVE-2018-2416 XML external entity in SAP Identity Management
- CVE-2018-2415 Other in SAP NetWeaver Application Server (Engine API)
- CVE-2018-2413 Missing authorization in SAP Disclosure Management
- CVE-2018-2412 Missing authorization in SAP Disclosure Management
- CVE-2018-2410 Cross-site scripting in SAP Business One
- CVE-2018-2409 Auth bypass in SAP Cloud Platform Connector
- CVE-2018-2408 Auth bypass in SAP Business Objects
- CVE-2018-2406 Privilege escalation in SAP Crystal Reports Server, OEM Edition
- CVE-2018-2405 Cross-site scripting in SAP Solution Manager
- CVE-2018-2404 File upload in SAP Disclosure Management
- CVE-2018-2403 Missing authorization in SAP Disclosure Management
- CVE-2018-2402 Information disclosure in SAP HANA
- CVE-2018-2401 XML external entity in SAP Business Process Automation (BPA) By Redwood
- CVE-2018-2400 Information disclosure in redwood:sap business process automation
- CVE-2018-2399 Cross-site scripting in SAP Process Monitoring Infrastructure
- CVE-2018-2398 Information disclosure in SAP Business Client
- CVE-2018-2397 Cross-site scripting in SAP Business Objects Business Intelligence Platform
- CVE-2018-2396 Denial of service in SAP Internet Graphics Server
- CVE-2018-2395 Other in SAP Internet Graphics Server
- CVE-2018-2394 Denial of service in SAP Internet Graphics Server
- CVE-2018-2393 XML external entity in SAP Internet Graphics Server
- CVE-2018-2392 XML external entity in SAP Internet Graphics Server
- CVE-2018-2391 Denial of service in sap:internet graphics server
- CVE-2018-2390 Denial of service in sap:internet graphics server
- CVE-2018-2389 Other in SAP Internet Graphics Server
- CVE-2018-2388 Cross-site scripting in SAP Internet Graphics Server
- CVE-2018-2387 Information disclosure in SAP Internet Graphics Server
- CVE-2018-2386 Memory corruption in SAP Internet Graphics Server
- CVE-2018-2385 Denial of service in SAP Internet Graphics Server
- CVE-2018-2384 Null dereference in SAP Internet Graphics Server
- CVE-2018-2383 Cross-site scripting in SAP Internet Graphics Server
- CVE-2018-2382 Information disclosure in SAP Internet Graphics Server
- CVE-2018-2381 Missing authorization in SAP ERP Financials Information System
- CVE-2018-2380 SAP Customer Relationship Management (CRM) Path Traversal
- CVE-2018-2379 Information disclosure in SAP HANA Extended Application Services
- CVE-2018-2378 Missing authorization in SAP HANA Extended Application Services
- CVE-2018-2377 Information disclosure in SAP HANA Extended Application Services
- CVE-2018-2376 Missing authorization in SAP HANA Extended Application Services
- CVE-2018-2375 Missing authorization in SAP HANA Extended Application Services
- CVE-2018-2374 Missing authorization in SAP HANA Extended Application Services
- CVE-2018-2373 SQL injection in SAP HANA Extended Application Services
- CVE-2018-2372 Information disclosure in SAP HANA Extended Application Services
- CVE-2018-2371 Cross-site scripting in SAP NetWeaver Java Web Application
- CVE-2018-2370 Server-side request forgery in SAP BI Launchpad
- CVE-2018-2369 Information disclosure in SAP HANA
- CVE-2018-2368 Missing authorization in SAP NetWeaver System Landscape Directory, LM-Core
- CVE-2018-2367 Path traversal in SAP BASIS (ABAP File Interface)
- CVE-2018-2366 Path traversal in SAP Business Process Automation (BPA) By Redwood
- CVE-2018-2365 Cross-site scripting in SAP NetWeaver Portal WebDynpro RunTime
- CVE-2018-2364 Cross-site scripting in S4FND
- CVE-2018-2363 Code injection in SAP NetWeaver
- CVE-2018-2362 Information disclosure in SAP HANA
- CVE-2018-2361 Privilege escalation in SAP Solution Manager
- CVE-2018-2360 Missing authorization in SAP Startup Service
- CVE-2018-21270 Out-of-bounds Read in stringstream
- CVE-2018-21269 Path traversal in openrc project:openrc
- CVE-2018-21268 Node-Traceroute RCE Vulnerability
- CVE-2018-21265 Security feature bypass in mattermost:mattermost desktop
- CVE-2018-21264 Security feature bypass in mattermost:mattermost server
- CVE-2018-21263 Auth bypass in mattermost:mattermost server
- CVE-2018-21262 Denial of service in mattermost:mattermost server
- CVE-2018-21261 Business logic in mattermost:mattermost server
- CVE-2018-21260 Information disclosure in mattermost:mattermost server
- CVE-2018-21259 Denial of service in mattermost:mattermost server
- CVE-2018-21258 Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command
- CVE-2018-21257 Missing authorization in mattermost:mattermost server
- CVE-2018-21256 Missing authorization in mattermost:mattermost server
- CVE-2018-21255 Missing authorization in mattermost:mattermost server
- CVE-2018-21254 Missing authorization in mattermost:mattermost server
- CVE-2018-21253 Missing authorization in mattermost:mattermost server
- CVE-2018-21252 Security feature bypass in mattermost:mattermost server
- CVE-2018-21251 Missing authorization in mattermost:mattermost server
- CVE-2018-21250 Denial of service in mattermost:mattermost server
- CVE-2018-21249 Weak cryptography in mattermost:mattermost server
- CVE-2018-21248 Information disclosure in mattermost:mattermost server
- CVE-2018-21247 Information disclosure in canonical:ubuntu linux
- CVE-2018-21246 Caddy vulnerable to Authentication Bypass due to mishandling of TLS client authentication
- CVE-2018-21245 Other in apsis:pound
- CVE-2018-21244 File upload in foxitsoftware:phantompdf
- CVE-2018-21243 Other in foxitsoftware:phantompdf
- CVE-2018-21242 Code injection in foxitsoftware:phantompdf
- CVE-2018-21241 Other in foxitsoftware:phantompdf
- CVE-2018-21240 Denial of service in foxitsoftware:phantompdf
- CVE-2018-21239 Information disclosure in foxitsoftware:phantompdf
- CVE-2018-21238 Denial of service in foxitsoftware:phantompdf
- CVE-2018-21237 Information disclosure in foxitsoftware:phantompdf
- CVE-2018-21236 Null dereference in foxitsoftware:reader
- CVE-2018-21235 Auth bypass in foxitsoftware:e-mail advertising system
- CVE-2018-21234 Deserialization of Untrusted Data in Jodd
- CVE-2018-21233 Out-of-bounds read in TensorFlow possibly causing disclosure of the contents of process memory.
- CVE-2018-21232 Denial of service in re2c:re2c
- CVE-2018-21231 Misconfiguration in netgear:d1500 firmware
- CVE-2018-21230 Misconfiguration in netgear:d1500 firmware
- CVE-2018-21229 Misconfiguration in netgear:r7500 firmware
- CVE-2018-21228 Command injection in netgear:d7800 firmware
- CVE-2018-21227 Command injection in netgear:d7800 firmware
- CVE-2018-21226 Auth bypass in netgear:jnr1010 firmware