# Vulnerabilities published in 2018 - [CVE-2018-20816](https://insights.sbomify.com/CVE-2018-20816/): Cross-site scripting in salesagility:suitecrm (medium 6.1) - [CVE-2018-20815](https://insights.sbomify.com/CVE-2018-20815/): Memory corruption in qemu:qemu (critical 9.8) - [CVE-2018-20814](https://insights.sbomify.com/CVE-2018-20814/): Cross-site scripting in ivanti:connect secure (medium 6.1) - [CVE-2018-20813](https://insights.sbomify.com/CVE-2018-20813/): Other in ivanti:connect secure (critical 9.8) - [CVE-2018-20812](https://insights.sbomify.com/CVE-2018-20812/): Information disclosure in pulsesecure:pulse secure desktop client (high 7.5) - [CVE-2018-20811](https://insights.sbomify.com/CVE-2018-20811/): Information disclosure in ivanti:connect secure (medium 5.3) - [CVE-2018-20810](https://insights.sbomify.com/CVE-2018-20810/): Weak cryptography in ivanti:connect secure (critical 9.8) - [CVE-2018-20809](https://insights.sbomify.com/CVE-2018-20809/): Denial of service in ivanti:connect secure (high 7.5) - [CVE-2018-20808](https://insights.sbomify.com/CVE-2018-20808/): Cross-site scripting in ivanti:connect secure (medium 6.1) - [CVE-2018-20807](https://insights.sbomify.com/CVE-2018-20807/): Cross-site scripting in ivanti:connect secure (medium 6.1) - [CVE-2018-20806](https://insights.sbomify.com/CVE-2018-20806/): Cross-site scripting in phamm:phamm (medium 6.1) - [CVE-2018-20805](https://insights.sbomify.com/CVE-2018-20805/): Invariant with $elemMatch (medium 6.5) - [CVE-2018-20804](https://insights.sbomify.com/CVE-2018-20804/): Invariant failure in applyOps (medium 6.5) - [CVE-2018-20803](https://insights.sbomify.com/CVE-2018-20803/): Infinite loop in aggregation expression (medium 6.5) - [CVE-2018-20802](https://insights.sbomify.com/CVE-2018-20802/): Post-auth queries on compound index may crash mongod (medium 6.5) - [CVE-2018-20801](https://insights.sbomify.com/CVE-2018-20801/): Regular Expression Denial of Service in highcharts (high 7.5) - [CVE-2018-20800](https://insights.sbomify.com/CVE-2018-20800/): Other in otrs:otrs (medium 6.5) - [CVE-2018-20799](https://insights.sbomify.com/CVE-2018-20799/): Security feature bypass in netgate:pfsense (high 7.5) - [CVE-2018-20798](https://insights.sbomify.com/CVE-2018-20798/): Security feature bypass in netgate:pfsense (high 7.5) - [CVE-2018-20797](https://insights.sbomify.com/CVE-2018-20797/): Denial of service in podofo project:podofo (medium 6.5) - [CVE-2018-20796](https://insights.sbomify.com/CVE-2018-20796/): Denial of service in gnu:glibc (high 7.5) - [CVE-2018-20795](https://insights.sbomify.com/CVE-2018-20795/): Path traversal in tecrail:responsive filemanager (high 7.5) - [CVE-2018-20794](https://insights.sbomify.com/CVE-2018-20794/): Path traversal in tecrail:responsive filemanager (high 7.5) - [CVE-2018-20793](https://insights.sbomify.com/CVE-2018-20793/): Path traversal in tecrail:responsive filemanager (high 7.5) - [CVE-2018-20792](https://insights.sbomify.com/CVE-2018-20792/): Path traversal in tecrail:responsive filemanager (high 7.5) - [CVE-2018-20791](https://insights.sbomify.com/CVE-2018-20791/): Cross-site scripting in tecrail:responsive filemanager (medium 6.1) - [CVE-2018-20790](https://insights.sbomify.com/CVE-2018-20790/): Path traversal in tecrail:responsive filemanager (high 7.5) - [CVE-2018-20789](https://insights.sbomify.com/CVE-2018-20789/): Path traversal in tecrail:responsive filemanager (high 7.5) - [CVE-2018-20788](https://insights.sbomify.com/CVE-2018-20788/): Integer overflow in micode:xiaomi perseus-p-oss (medium 5.5) - [CVE-2018-20787](https://insights.sbomify.com/CVE-2018-20787/): Integer overflow in micode:xiaomi perseus-p-oss (medium 5.5) - [CVE-2018-20786](https://insights.sbomify.com/CVE-2018-20786/): Null dereference in leonerd:libvterm (high 7.5) - [CVE-2018-20785](https://insights.sbomify.com/CVE-2018-20785/): Security feature bypass in neatorobotics:botvac connected firmware (high 7.4) - [CVE-2018-20784](https://insights.sbomify.com/CVE-2018-20784/): Denial of service in canonical:ubuntu linux (critical 9.8) - [CVE-2018-20783](https://insights.sbomify.com/CVE-2018-20783/): Memory corruption in opensuse:leap (high 7.5) - [CVE-2018-20782](https://insights.sbomify.com/CVE-2018-20782/): Other in globee:woocommerce (high 7.5) - [CVE-2018-20781](https://insights.sbomify.com/CVE-2018-20781/): Information disclosure in canonical:ubuntu linux (high 7.8) - [CVE-2018-20780](https://insights.sbomify.com/CVE-2018-20780/): Cross-site request forgery in traq:traq (high 8.8) - [CVE-2018-20779](https://insights.sbomify.com/CVE-2018-20779/): SQL injection in traq:traq (critical 9.8) - [CVE-2018-20778](https://insights.sbomify.com/CVE-2018-20778/): Cross-site scripting in frog cms project:frog cms (medium 6.1) - [CVE-2018-20777](https://insights.sbomify.com/CVE-2018-20777/): Cross-site scripting in frog cms project:frog cms (medium 5.4) - [CVE-2018-20776](https://insights.sbomify.com/CVE-2018-20776/): Information disclosure in frog cms project:frog cms (high 7.5) - [CVE-2018-20775](https://insights.sbomify.com/CVE-2018-20775/): Code injection in frog cms project:frog cms (high 7.2) - [CVE-2018-20774](https://insights.sbomify.com/CVE-2018-20774/): Cross-site scripting in frog cms project:frog cms (medium 5.4) - [CVE-2018-20773](https://insights.sbomify.com/CVE-2018-20773/): Code injection in frog cms project:frog cms (high 7.2) - [CVE-2018-20772](https://insights.sbomify.com/CVE-2018-20772/): Code injection in frog cms project:frog cms (high 7.2) - [CVE-2018-20771](https://insights.sbomify.com/CVE-2018-20771/): Command injection in xerox:workcentre 3655 firmware (critical 9.8) - [CVE-2018-20770](https://insights.sbomify.com/CVE-2018-20770/): SQL injection in xerox:workcentre 3655 firmware (critical 9.8) - [CVE-2018-20769](https://insights.sbomify.com/CVE-2018-20769/): Path traversal in xerox:workcentre 3655 firmware (high 7.5) - [CVE-2018-20768](https://insights.sbomify.com/CVE-2018-20768/): Code injection in xerox:workcentre 3655 firmware (critical 9.8) - [CVE-2018-20767](https://insights.sbomify.com/CVE-2018-20767/): Command injection in xerox:workcentre 3655 firmware (high 8.8) - [CVE-2018-20764](https://insights.sbomify.com/CVE-2018-20764/): Memory corruption in helpsystems:boks (critical 9.8) - [CVE-2018-20763](https://insights.sbomify.com/CVE-2018-20763/): Memory corruption in canonical:ubuntu linux (high 7.8) - [CVE-2018-20762](https://insights.sbomify.com/CVE-2018-20762/): Memory corruption in canonical:ubuntu linux (high 7.8) - [CVE-2018-20761](https://insights.sbomify.com/CVE-2018-20761/): Memory corruption in canonical:ubuntu linux (high 7.8) - [CVE-2018-20760](https://insights.sbomify.com/CVE-2018-20760/): Memory corruption in canonical:ubuntu linux (high 7.8) - [CVE-2018-20758](https://insights.sbomify.com/CVE-2018-20758/): MODX vulnerability allows for XSS via user settings parameters (medium 5.4) - [CVE-2018-20757](https://insights.sbomify.com/CVE-2018-20757/): MODX Revolution allows XSS through extended user fields (medium 6.1) - [CVE-2018-20756](https://insights.sbomify.com/CVE-2018-20756/): MODX Revolution allows XSS via document resources (medium 6.1) - [CVE-2018-20755](https://insights.sbomify.com/CVE-2018-20755/): MODX Revolution vulnerable to XSS attack through its User Photo field (medium 6.1) - [CVE-2018-20753](https://insights.sbomify.com/CVE-2018-20753/): Kaseya VSA Remote Code Execution (critical 9.8, exploited in the wild) - [CVE-2018-20752](https://insights.sbomify.com/CVE-2018-20752/): Code injection in recon-ng project:recon-ng (critical 9.8) - [CVE-2018-20751](https://insights.sbomify.com/CVE-2018-20751/): Null dereference in podofo project:podofo (high 8.8) - [CVE-2018-20750](https://insights.sbomify.com/CVE-2018-20750/): Memory corruption in canonical:ubuntu linux (critical 9.8) - [CVE-2018-20749](https://insights.sbomify.com/CVE-2018-20749/): Memory corruption in canonical:ubuntu linux (critical 9.8) - [CVE-2018-20748](https://insights.sbomify.com/CVE-2018-20748/): Memory corruption in canonical:ubuntu linux (critical 9.8) - [CVE-2018-20745](https://insights.sbomify.com/CVE-2018-20745/): Yii Incorrectly Implements CORS (medium 5.9) - [CVE-2018-20744](https://insights.sbomify.com/CVE-2018-20744/): github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error (medium 5.9) - [CVE-2018-20743](https://insights.sbomify.com/CVE-2018-20743/): Denial of service in debian:debian linux (high 7.5) - [CVE-2018-20742](https://insights.sbomify.com/CVE-2018-20742/): Memory corruption in ucbrise:opaque (high 7.5) - [CVE-2018-20737](https://insights.sbomify.com/CVE-2018-20737/): Cross-site scripting in wso2:api manager (medium 5.4) - [CVE-2018-20736](https://insights.sbomify.com/CVE-2018-20736/): Cross-site scripting in wso2:api manager (medium 5.4) - [CVE-2018-20735](https://insights.sbomify.com/CVE-2018-20735/): Privilege escalation in bmc:patrol agent (high 7.8) - [CVE-2018-20733](https://insights.sbomify.com/CVE-2018-20733/): XML external entity in sas:web infrastructure platform (high 7.5) - [CVE-2018-20732](https://insights.sbomify.com/CVE-2018-20732/): Deserialization in sas:web infrastructure platform (critical 9.8) - [CVE-2018-20731](https://insights.sbomify.com/CVE-2018-20731/): Cross-site scripting in nedi:nedi (medium 6.1) - [CVE-2018-20730](https://insights.sbomify.com/CVE-2018-20730/): SQL injection in nedi:nedi (high 7.5) - [CVE-2018-20729](https://insights.sbomify.com/CVE-2018-20729/): Cross-site scripting in nedi:nedi (medium 6.1) - [CVE-2018-20728](https://insights.sbomify.com/CVE-2018-20728/): Cross-site request forgery in nedi:nedi (high 8.8) - [CVE-2018-20727](https://insights.sbomify.com/CVE-2018-20727/): Command injection in nedi:nedi (high 8.8) - [CVE-2018-20726](https://insights.sbomify.com/CVE-2018-20726/): Cross-site scripting in cacti:cacti (medium 5.4) - [CVE-2018-20725](https://insights.sbomify.com/CVE-2018-20725/): Cross-site scripting in cacti:cacti (medium 4.8) - [CVE-2018-20724](https://insights.sbomify.com/CVE-2018-20724/): Cross-site scripting in cacti:cacti (medium 4.8) - [CVE-2018-20723](https://insights.sbomify.com/CVE-2018-20723/): Cross-site scripting in cacti:cacti (medium 4.8) - [CVE-2018-20721](https://insights.sbomify.com/CVE-2018-20721/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2018-20720](https://insights.sbomify.com/CVE-2018-20720/): Denial of service in hitachienergy:relion 630 firmware (high 7.5) - [CVE-2018-20719](https://insights.sbomify.com/CVE-2018-20719/): SQL injection in tiki:tikiwiki cms\/groupware (high 8.8) - [CVE-2018-20718](https://insights.sbomify.com/CVE-2018-20718/): Deserialization in pydio:pydio (critical 9.8) - [CVE-2018-20717](https://insights.sbomify.com/CVE-2018-20717/): PrestaShop PHP Object Injection (high 8.8) - [CVE-2018-20716](https://insights.sbomify.com/CVE-2018-20716/): SQL injection in cubecart:cubecart (critical 9.8) - [CVE-2018-20715](https://insights.sbomify.com/CVE-2018-20715/): SQL injection in oxid-esales:eshop (critical 9.8) - [CVE-2018-20714](https://insights.sbomify.com/CVE-2018-20714/): Path traversal in woocommerce:woocommerce (high 8.1) - [CVE-2018-20713](https://insights.sbomify.com/CVE-2018-20713/): Shopware SQL Injection (high 8.8) - [CVE-2018-20712](https://insights.sbomify.com/CVE-2018-20712/): Memory corruption in gnu:binutils (medium 6.5) - [CVE-2018-20703](https://insights.sbomify.com/CVE-2018-20703/): Cross-site scripting in cubecart:cubecart (medium 5.4) - [CVE-2018-20699](https://insights.sbomify.com/CVE-2018-20699/): Denial of service in docker:engine (medium 4.9) - [CVE-2018-20698](https://insights.sbomify.com/CVE-2018-20698/): Open redirect in search-guard:search guard (medium 6.1) - [CVE-2018-20687](https://insights.sbomify.com/CVE-2018-20687/): XML external entity in raritan:commandcenter secure gateway (critical 9.8) - [CVE-2018-20685](https://insights.sbomify.com/CVE-2018-20685/): Security feature bypass in canonical:ubuntu linux (medium 5.3) - [CVE-2018-20684](https://insights.sbomify.com/CVE-2018-20684/): Path traversal in winscp:winscp (high 7.5) - [CVE-2018-20683](https://insights.sbomify.com/CVE-2018-20683/): Other in gitolite:gitolite (high 8.1) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/64/