# Vulnerabilities published in 2018 - [CVE-2018-9183](https://insights.sbomify.com/CVE-2018-9183/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9182](https://insights.sbomify.com/CVE-2018-9182/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9177](https://insights.sbomify.com/CVE-2018-9177/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9175](https://insights.sbomify.com/CVE-2018-9175/): Code injection in n/a (critical 9.8) - [CVE-2018-9174](https://insights.sbomify.com/CVE-2018-9174/): Code injection in n/a (critical 9.8) - [CVE-2018-9173](https://insights.sbomify.com/CVE-2018-9173/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9172](https://insights.sbomify.com/CVE-2018-9172/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9169](https://insights.sbomify.com/CVE-2018-9169/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-9165](https://insights.sbomify.com/CVE-2018-9165/): Null dereference in n/a (medium 6.5) - [CVE-2018-9163](https://insights.sbomify.com/CVE-2018-9163/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9162](https://insights.sbomify.com/CVE-2018-9162/): Missing authorization in n/a (critical 9.8) - [CVE-2018-9161](https://insights.sbomify.com/CVE-2018-9161/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2018-9160](https://insights.sbomify.com/CVE-2018-9160/): SiCKRAGE Discloses Plaintext Credentials (critical 9.8) - [CVE-2018-9159](https://insights.sbomify.com/CVE-2018-9159/): Moderate severity vulnerability that affects com.sparkjava:spark-core (medium 5.3) - [CVE-2018-9158](https://insights.sbomify.com/CVE-2018-9158/): Denial of service in n/a (high 7.5) - [CVE-2018-9157](https://insights.sbomify.com/CVE-2018-9157/): File upload in n/a (high 7.5) - [CVE-2018-9156](https://insights.sbomify.com/CVE-2018-9156/): File upload in n/a (high 7.5) - [CVE-2018-9155](https://insights.sbomify.com/CVE-2018-9155/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9154](https://insights.sbomify.com/CVE-2018-9154/): Denial of service in n/a (high 7.5) - [CVE-2018-9153](https://insights.sbomify.com/CVE-2018-9153/): File upload in n/a (high 7.2) - [CVE-2018-9151](https://insights.sbomify.com/CVE-2018-9151/): Null dereference in n/a (medium 5.5) - [CVE-2018-9149](https://insights.sbomify.com/CVE-2018-9149/): Hardcoded credentials in n/a (medium 6.8) - [CVE-2018-9148](https://insights.sbomify.com/CVE-2018-9148/): Auth bypass in n/a (critical 9.8) - [CVE-2018-9147](https://insights.sbomify.com/CVE-2018-9147/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9145](https://insights.sbomify.com/CVE-2018-9145/): Denial of service in n/a (medium 6.5) - [CVE-2018-9144](https://insights.sbomify.com/CVE-2018-9144/): Information disclosure in n/a (high 8.1) - [CVE-2018-9143](https://insights.sbomify.com/CVE-2018-9143/): Memory corruption in n/a (critical 9.8) - [CVE-2018-9142](https://insights.sbomify.com/CVE-2018-9142/): Security feature bypass in n/a (high 7.0) - [CVE-2018-9141](https://insights.sbomify.com/CVE-2018-9141/): Memory corruption in n/a (high 7.8) - [CVE-2018-9140](https://insights.sbomify.com/CVE-2018-9140/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9139](https://insights.sbomify.com/CVE-2018-9139/): Memory corruption in n/a (critical 9.8) - [CVE-2018-9138](https://insights.sbomify.com/CVE-2018-9138/): Denial of service in n/a (medium 5.5) - [CVE-2018-9137](https://insights.sbomify.com/CVE-2018-9137/): Open-AudIT before 2.2 has CSV Injection. (medium 6.8) - [CVE-2018-9136](https://insights.sbomify.com/CVE-2018-9136/): Denial of service in n/a (medium 5.5) - [CVE-2018-9135](https://insights.sbomify.com/CVE-2018-9135/): Memory corruption in n/a (high 8.8) - [CVE-2018-9134](https://insights.sbomify.com/CVE-2018-9134/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-9133](https://insights.sbomify.com/CVE-2018-9133/): Denial of service in n/a (medium 6.5) - [CVE-2018-9132](https://insights.sbomify.com/CVE-2018-9132/): Null dereference in n/a (medium 6.5) - [CVE-2018-9130](https://insights.sbomify.com/CVE-2018-9130/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9129](https://insights.sbomify.com/CVE-2018-9129/): Weak cryptography in n/a (medium 5.9) - [CVE-2018-9128](https://insights.sbomify.com/CVE-2018-9128/): Memory corruption in n/a (high 7.8) - [CVE-2018-9127](https://insights.sbomify.com/CVE-2018-9127/): Security feature bypass in n/a (critical 9.8) - [CVE-2018-9126](https://insights.sbomify.com/CVE-2018-9126/): Path traversal in n/a (critical 9.8) - [CVE-2018-9123](https://insights.sbomify.com/CVE-2018-9123/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9122](https://insights.sbomify.com/CVE-2018-9122/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9121](https://insights.sbomify.com/CVE-2018-9121/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9120](https://insights.sbomify.com/CVE-2018-9120/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9119](https://insights.sbomify.com/CVE-2018-9119/): Missing authorization in n/a (medium 6.1) - [CVE-2018-9118](https://insights.sbomify.com/CVE-2018-9118/): Path traversal in n/a (high 7.5) - [CVE-2018-9117](https://insights.sbomify.com/CVE-2018-9117/): Path traversal in n/a (medium 5.3) - [CVE-2018-9116](https://insights.sbomify.com/CVE-2018-9116/): XML external entity in n/a (critical 9.1) - [CVE-2018-9115](https://insights.sbomify.com/CVE-2018-9115/): Denial of service in n/a (medium 5.3) - [CVE-2018-9113](https://insights.sbomify.com/CVE-2018-9113/): Code injection in n/a (high 7.8) - [CVE-2018-9112](https://insights.sbomify.com/CVE-2018-9112/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2018-9111](https://insights.sbomify.com/CVE-2018-9111/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-9110](https://insights.sbomify.com/CVE-2018-9110/): Directory Traversal in Studio 42 elFinder (critical 9.1) - [CVE-2018-9109](https://insights.sbomify.com/CVE-2018-9109/): elFinder Path Traversal vulnerability (critical 9.1) - [CVE-2018-9108](https://insights.sbomify.com/CVE-2018-9108/): QuickAppsCMS Cross-Site Request Forgery (CSRF) (high 8.8) - [CVE-2018-9107](https://insights.sbomify.com/CVE-2018-9107/): Other in n/a (high 8.8) - [CVE-2018-9106](https://insights.sbomify.com/CVE-2018-9106/): Code injection in n/a (high 8.8) - [CVE-2018-9105](https://insights.sbomify.com/CVE-2018-9105/): Privilege escalation in n/a (high 8.8) - [CVE-2018-9104](https://insights.sbomify.com/CVE-2018-9104/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9103](https://insights.sbomify.com/CVE-2018-9103/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9102](https://insights.sbomify.com/CVE-2018-9102/): SQL injection in n/a (medium 6.5) - [CVE-2018-9101](https://insights.sbomify.com/CVE-2018-9101/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9092](https://insights.sbomify.com/CVE-2018-9092/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-9091](https://insights.sbomify.com/CVE-2018-9091/): Auth bypass in n/a (critical 9.8) - [CVE-2018-9090](https://insights.sbomify.com/CVE-2018-9090/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-9086](https://insights.sbomify.com/CVE-2018-9086/): Legacy Server BMC Remote Command Injection (high 7.2) - [CVE-2018-9085](https://insights.sbomify.com/CVE-2018-9085/): Missing System x Flash Memory Write Protection Lock Bit (medium 4.9) - [CVE-2018-9084](https://insights.sbomify.com/CVE-2018-9084/): System Management Module Vulnerabilities (medium 6.5) - [CVE-2018-9083](https://insights.sbomify.com/CVE-2018-9083/): System Management Module Vulnerabilities (high 8.1) - [CVE-2018-9082](https://insights.sbomify.com/CVE-2018-9082/): Iomega and LenovoEMC NAS Web UI Vulnerabilities (high 8.8) - [CVE-2018-9081](https://insights.sbomify.com/CVE-2018-9081/): Iomega and LenovoEMC NAS Web UI Vulnerabilities (medium 4.7) - [CVE-2018-9080](https://insights.sbomify.com/CVE-2018-9080/): Iomega and LenovoEMC NAS Web UI Vulnerabilities (medium 5.9) - [CVE-2018-9079](https://insights.sbomify.com/CVE-2018-9079/): Iomega and LenovoEMC NAS Web UI Vulnerabilities (critical 9.8) - [CVE-2018-9078](https://insights.sbomify.com/CVE-2018-9078/): Iomega and LenovoEMC NAS Web UI Vulnerabilities (high 8.8) - [CVE-2018-9077](https://insights.sbomify.com/CVE-2018-9077/): Iomega and LenovoEMC NAS Web UI Vulnerabilities (high 8.1) - [CVE-2018-9076](https://insights.sbomify.com/CVE-2018-9076/): Iomega and LenovoEMC NAS Web UI Vulnerabilities (high 8.1) - [CVE-2018-9075](https://insights.sbomify.com/CVE-2018-9075/): Iomega and LenovoEMC NAS Web UI Vulnerabilities (high 8.1) - [CVE-2018-9074](https://insights.sbomify.com/CVE-2018-9074/): Iomega and LenovoEMC NAS Web UI Vulnerabilities (medium 6.5) - [CVE-2018-9073](https://insights.sbomify.com/CVE-2018-9073/): CMM Security Vulnerability (medium 5.9) - [CVE-2018-9072](https://insights.sbomify.com/CVE-2018-9072/): LXCI for VMware (medium 6.5) - [CVE-2018-9071](https://insights.sbomify.com/CVE-2018-9071/): CMM Security Vulnerability (medium 5.3) - [CVE-2018-9070](https://insights.sbomify.com/CVE-2018-9070/): Security feature bypass in Lenovo Smart Assistant (medium 6.4) - [CVE-2018-9069](https://insights.sbomify.com/CVE-2018-9069/): BIOS Write Protection Race Condition (medium 5.9) - [CVE-2018-9068](https://insights.sbomify.com/CVE-2018-9068/): Hardcoded credentials in System x IMM2 (high 7.5) - [CVE-2018-9067](https://insights.sbomify.com/CVE-2018-9067/): Information disclosure in Lenovo Help Android application (high 7.5) - [CVE-2018-9066](https://insights.sbomify.com/CVE-2018-9066/): Command injection in Lenovo xClarity Administrator (high 8.8) - [CVE-2018-9065](https://insights.sbomify.com/CVE-2018-9065/): Information disclosure in Lenovo xClarity Administrator (high 7.5) - [CVE-2018-9064](https://insights.sbomify.com/CVE-2018-9064/): Information disclosure in Lenovo xClarity Administrator (high 8.8) - [CVE-2018-9063](https://insights.sbomify.com/CVE-2018-9063/): Memory corruption in Lenovo System Update (high 7.8) - [CVE-2018-9062](https://insights.sbomify.com/CVE-2018-9062/): BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack (medium 6.8) - [CVE-2018-9059](https://insights.sbomify.com/CVE-2018-9059/): Memory corruption in n/a (critical 9.8) - [CVE-2018-9058](https://insights.sbomify.com/CVE-2018-9058/): Denial of service in n/a (medium 5.5) - [CVE-2018-9057](https://insights.sbomify.com/CVE-2018-9057/): HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG (critical 9.8) - [CVE-2018-9056](https://insights.sbomify.com/CVE-2018-9056/): Information disclosure in n/a (medium 5.6) - [CVE-2018-9055](https://insights.sbomify.com/CVE-2018-9055/): Denial of service in n/a (medium 5.5) - [CVE-2018-9054](https://insights.sbomify.com/CVE-2018-9054/): Denial of service in n/a (high 7.8) - [CVE-2018-9053](https://insights.sbomify.com/CVE-2018-9053/): Denial of service in n/a (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/6/