# Vulnerabilities published in 2018


- [CVE-2018-20925](https://insights.sbomify.com/CVE-2018-20925/): File upload in cpanel:cpanel (medium 6.7)
- [CVE-2018-20924](https://insights.sbomify.com/CVE-2018-20924/): Auth bypass in cpanel:cpanel (medium 5.5)
- [CVE-2018-20923](https://insights.sbomify.com/CVE-2018-20923/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20922](https://insights.sbomify.com/CVE-2018-20922/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20921](https://insights.sbomify.com/CVE-2018-20921/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20920](https://insights.sbomify.com/CVE-2018-20920/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20919](https://insights.sbomify.com/CVE-2018-20919/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20918](https://insights.sbomify.com/CVE-2018-20918/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20917](https://insights.sbomify.com/CVE-2018-20917/): Missing authorization in cpanel:cpanel (medium 5.5)
- [CVE-2018-20916](https://insights.sbomify.com/CVE-2018-20916/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2018-20915](https://insights.sbomify.com/CVE-2018-20915/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2018-20914](https://insights.sbomify.com/CVE-2018-20914/): Other in cpanel:cpanel (high 7.3)
- [CVE-2018-20913](https://insights.sbomify.com/CVE-2018-20913/): Information disclosure in cpanel:cpanel (medium 4.9)
- [CVE-2018-20912](https://insights.sbomify.com/CVE-2018-20912/): Code injection in cpanel:cpanel (medium 6.3)
- [CVE-2018-20911](https://insights.sbomify.com/CVE-2018-20911/): Code injection in cpanel:cpanel (high 7.2)
- [CVE-2018-20910](https://insights.sbomify.com/CVE-2018-20910/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20909](https://insights.sbomify.com/CVE-2018-20909/): Other in cpanel:cpanel (high 7.1)
- [CVE-2018-20908](https://insights.sbomify.com/CVE-2018-20908/): Path traversal in cpanel:cpanel (medium 5.5)
- [CVE-2018-20907](https://insights.sbomify.com/CVE-2018-20907/): Missing authorization in cpanel:cpanel (medium 4.3)
- [CVE-2018-20906](https://insights.sbomify.com/CVE-2018-20906/): Security feature bypass in cpanel:cpanel (medium 4.3)
- [CVE-2018-20905](https://insights.sbomify.com/CVE-2018-20905/): Security feature bypass in cpanel:cpanel (medium 5.4)
- [CVE-2018-20904](https://insights.sbomify.com/CVE-2018-20904/): Security feature bypass in cpanel:cpanel (medium 4.3)
- [CVE-2018-20903](https://insights.sbomify.com/CVE-2018-20903/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20902](https://insights.sbomify.com/CVE-2018-20902/): Information disclosure in cpanel:cpanel (medium 5.5)
- [CVE-2018-20901](https://insights.sbomify.com/CVE-2018-20901/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20900](https://insights.sbomify.com/CVE-2018-20900/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20899](https://insights.sbomify.com/CVE-2018-20899/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20898](https://insights.sbomify.com/CVE-2018-20898/): Other in cpanel:cpanel (medium 4.3)
- [CVE-2018-20897](https://insights.sbomify.com/CVE-2018-20897/): Path traversal in cpanel:cpanel (low 2.8)
- [CVE-2018-20896](https://insights.sbomify.com/CVE-2018-20896/): Code injection in cpanel:cpanel (low 3.9)
- [CVE-2018-20895](https://insights.sbomify.com/CVE-2018-20895/): Security feature bypass in cpanel:cpanel (high 7.2)
- [CVE-2018-20894](https://insights.sbomify.com/CVE-2018-20894/): Information disclosure in cpanel:cpanel (low 3.3)
- [CVE-2018-20893](https://insights.sbomify.com/CVE-2018-20893/): Other in cpanel:cpanel (low 2.3)
- [CVE-2018-20892](https://insights.sbomify.com/CVE-2018-20892/): Other in cpanel:cpanel (medium 4.3)
- [CVE-2018-20891](https://insights.sbomify.com/CVE-2018-20891/): Path traversal in cpanel:cpanel (medium 5.5)
- [CVE-2018-20890](https://insights.sbomify.com/CVE-2018-20890/): Missing authorization in cpanel:cpanel (medium 4.3)
- [CVE-2018-20889](https://insights.sbomify.com/CVE-2018-20889/): Information disclosure in cpanel:cpanel (medium 4.4)
- [CVE-2018-20888](https://insights.sbomify.com/CVE-2018-20888/): Auth bypass in cpanel:cpanel (medium 5.5)
- [CVE-2018-20887](https://insights.sbomify.com/CVE-2018-20887/): SQL injection in cpanel:cpanel (critical 9.8)
- [CVE-2018-20886](https://insights.sbomify.com/CVE-2018-20886/): Information disclosure in cpanel:cpanel (medium 5.3)
- [CVE-2018-20885](https://insights.sbomify.com/CVE-2018-20885/): Code injection in cpanel:cpanel (medium 5.3)
- [CVE-2018-20884](https://insights.sbomify.com/CVE-2018-20884/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2018-20883](https://insights.sbomify.com/CVE-2018-20883/): Security feature bypass in cpanel:cpanel (medium 6.5)
- [CVE-2018-20882](https://insights.sbomify.com/CVE-2018-20882/): Other in cpanel:cpanel (medium 6.8)
- [CVE-2018-20881](https://insights.sbomify.com/CVE-2018-20881/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2018-20880](https://insights.sbomify.com/CVE-2018-20880/): Business logic in cpanel:cpanel (low 3.3)
- [CVE-2018-20879](https://insights.sbomify.com/CVE-2018-20879/): Code injection in cpanel:cpanel (medium 6.3)
- [CVE-2018-20878](https://insights.sbomify.com/CVE-2018-20878/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2018-20877](https://insights.sbomify.com/CVE-2018-20877/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2018-20876](https://insights.sbomify.com/CVE-2018-20876/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2018-20875](https://insights.sbomify.com/CVE-2018-20875/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2018-20874](https://insights.sbomify.com/CVE-2018-20874/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2018-20873](https://insights.sbomify.com/CVE-2018-20873/): Security feature bypass in cpanel:cpanel (low 3.3)
- [CVE-2018-20872](https://insights.sbomify.com/CVE-2018-20872/): Cross-site request forgery in i-lan:draytekl firmware (medium 6.5)
- [CVE-2018-20871](https://insights.sbomify.com/CVE-2018-20871/): Misconfiguration in univa:grid engine (critical 9.8)
- [CVE-2018-20870](https://insights.sbomify.com/CVE-2018-20870/): Information disclosure in cpanel:cpanel (medium 5.5)
- [CVE-2018-20869](https://insights.sbomify.com/CVE-2018-20869/): Code injection in cpanel:cpanel (high 7.8)
- [CVE-2018-20868](https://insights.sbomify.com/CVE-2018-20868/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20867](https://insights.sbomify.com/CVE-2018-20867/): Open redirect in cpanel:cpanel (medium 6.1)
- [CVE-2018-20866](https://insights.sbomify.com/CVE-2018-20866/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20865](https://insights.sbomify.com/CVE-2018-20865/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2018-20864](https://insights.sbomify.com/CVE-2018-20864/): Business logic in cpanel:cpanel (medium 6.5)
- [CVE-2018-20863](https://insights.sbomify.com/CVE-2018-20863/): Code injection in cpanel:cpanel (critical 9.8)
- [CVE-2018-20862](https://insights.sbomify.com/CVE-2018-20862/): Other in cpanel:cpanel (high 7.8)
- [CVE-2018-20861](https://insights.sbomify.com/CVE-2018-20861/): Denial of service in openmpt:libopenmpt (medium 6.5)
- [CVE-2018-20860](https://insights.sbomify.com/CVE-2018-20860/): Denial of service in openmpt:libopenmpt (medium 6.5)
- [CVE-2018-20859](https://insights.sbomify.com/CVE-2018-20859/): Cross-site scripting in edx:edx-platform (medium 6.1)
- [CVE-2018-20858](https://insights.sbomify.com/CVE-2018-20858/): Cross-site scripting in recommender-xblock (medium 6.1)
- [CVE-2018-20857](https://insights.sbomify.com/CVE-2018-20857/): samlr XML nodes comment attack (high 7.5)
- [CVE-2018-20856](https://insights.sbomify.com/CVE-2018-20856/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2018-20855](https://insights.sbomify.com/CVE-2018-20855/): Information disclosure in linux:linux kernel (low 3.3)
- [CVE-2018-20854](https://insights.sbomify.com/CVE-2018-20854/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2018-20853](https://insights.sbomify.com/CVE-2018-20853/): Other in mailpoet:mailpoet newsletters (medium 5.3)
- [CVE-2018-20852](https://insights.sbomify.com/CVE-2018-20852/): Information disclosure in python:python (medium 4.3)
- [CVE-2018-20851](https://insights.sbomify.com/CVE-2018-20851/): Privilege escalation in helpy.io:helpy (high 8.8)
- [CVE-2018-20850](https://insights.sbomify.com/CVE-2018-20850/): Cross-site scripting in stormshield:stormshield network security (high 8.2)
- [CVE-2018-20849](https://insights.sbomify.com/CVE-2018-20849/): Cross-site scripting in arastta:ecommerce (medium 6.1)
- [CVE-2018-20848](https://insights.sbomify.com/CVE-2018-20848/): Cross-site request forgery in peel:peel shopping (high 8.8)
- [CVE-2018-20847](https://insights.sbomify.com/CVE-2018-20847/): Integer overflow in debian:debian linux (high 8.8)
- [CVE-2018-20846](https://insights.sbomify.com/CVE-2018-20846/): Memory corruption in uclouvain:openjpeg (medium 6.5)
- [CVE-2018-20845](https://insights.sbomify.com/CVE-2018-20845/): Denial of service in uclouvain:openjpeg (medium 6.5)
- [CVE-2018-20843](https://insights.sbomify.com/CVE-2018-20843/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2018-20841](https://insights.sbomify.com/CVE-2018-20841/): Command injection in hootoo:tripmate titan ht-tm05 firmware (critical 9.8)
- [CVE-2018-20840](https://insights.sbomify.com/CVE-2018-20840/): Denial of service in google:api c\+\+ client (high 8.6)
- [CVE-2018-20839](https://insights.sbomify.com/CVE-2018-20839/): Information disclosure in netapp:cn1610 firmware (medium 4.3)
- [CVE-2018-20838](https://insights.sbomify.com/CVE-2018-20838/): Cross-site scripting in magazine3:amp for wp (medium 5.4)
- [CVE-2018-20837](https://insights.sbomify.com/CVE-2018-20837/): Cross-site scripting in typesettercms:typesetter (medium 4.8)
- [CVE-2018-20836](https://insights.sbomify.com/CVE-2018-20836/): Use after free in canonical:ubuntu linux (high 8.1)
- [CVE-2018-20835](https://insights.sbomify.com/CVE-2018-20835/): Improper Input Validation in tar-fs (high 7.5)
- [CVE-2018-20834](https://insights.sbomify.com/CVE-2018-20834/): Arbitrary File Overwrite in tar (high 7.5)
- [CVE-2018-20827](https://insights.sbomify.com/CVE-2018-20827/): Cross-site scripting in Jira (medium 5.4)
- [CVE-2018-20826](https://insights.sbomify.com/CVE-2018-20826/): Missing authorization in Jira (medium 4.3)
- [CVE-2018-20824](https://insights.sbomify.com/CVE-2018-20824/): Cross-site scripting in Jira (medium 6.1)
- [CVE-2018-20823](https://insights.sbomify.com/CVE-2018-20823/): Denial of service in mi:mi 5s firmware (high 7.5)
- [CVE-2018-20822](https://insights.sbomify.com/CVE-2018-20822/): Denial of service in sass-lang:libsass (medium 6.5)
- [CVE-2018-20821](https://insights.sbomify.com/CVE-2018-20821/): Denial of service in sass-lang:libsass (medium 6.5)
- [CVE-2018-20820](https://insights.sbomify.com/CVE-2018-20820/): Integer overflow in dropbox:lepton (medium 5.5)
- [CVE-2018-20819](https://insights.sbomify.com/CVE-2018-20819/): Memory corruption in dropbox:lepton (high 7.8)
- [CVE-2018-20818](https://insights.sbomify.com/CVE-2018-20818/): Memory corruption in openplcproject:openplc v2 firmware (critical 9.8)
- [CVE-2018-20817](https://insights.sbomify.com/CVE-2018-20817/): Memory corruption in activision:call of duty\ (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/63/