# Vulnerabilities published in 2018 - [CVE-2018-20682](https://insights.sbomify.com/CVE-2018-20682/): Fork CMS XSS Vulnerability (medium 5.4) - [CVE-2018-20681](https://insights.sbomify.com/CVE-2018-20681/): Security feature bypass in mate-desktop:mate-screensaver (medium 6.1) - [CVE-2018-20680](https://insights.sbomify.com/CVE-2018-20680/): Cross-site scripting in frog cms project:frog cms (medium 4.8) - [CVE-2018-20679](https://insights.sbomify.com/CVE-2018-20679/): Memory corruption in busybox:busybox (high 7.5) - [CVE-2018-20678](https://insights.sbomify.com/CVE-2018-20678/): LibreNMS SQL Injection (high 8.8) - [CVE-2018-20677](https://insights.sbomify.com/CVE-2018-20677/): bootstrap Cross-site Scripting vulnerability (medium 6.1) - [CVE-2018-20676](https://insights.sbomify.com/CVE-2018-20676/): XSS vulnerability that affects bootstrap (medium 6.1) - [CVE-2018-20675](https://insights.sbomify.com/CVE-2018-20675/): Auth bypass in dlink:dir-822-us firmware (critical 9.8) - [CVE-2018-20674](https://insights.sbomify.com/CVE-2018-20674/): Command injection in dlink:dir-822-us firmware (high 8.8) - [CVE-2018-20673](https://insights.sbomify.com/CVE-2018-20673/): Integer overflow in gnu:binutils (medium 5.5) - [CVE-2018-20671](https://insights.sbomify.com/CVE-2018-20671/): Integer overflow in gnu:binutils (medium 5.5) - [CVE-2018-20669](https://insights.sbomify.com/CVE-2018-20669/): Memory corruption in canonical:ubuntu linux (high 7.8) - [CVE-2018-20664](https://insights.sbomify.com/CVE-2018-20664/): XML external entity in zohocorp:manageengine adselfservice plus (critical 9.8) - [CVE-2018-20663](https://insights.sbomify.com/CVE-2018-20663/): The Reporting Addon for CUBA Platform has Persistent XSS (medium 5.4) - [CVE-2018-20662](https://insights.sbomify.com/CVE-2018-20662/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2018-20659](https://insights.sbomify.com/CVE-2018-20659/): Denial of service in axiosys:bento4 (medium 6.5) - [CVE-2018-20658](https://insights.sbomify.com/CVE-2018-20658/): Denial of service in coreftp:core ftp (high 7.5) - [CVE-2018-20657](https://insights.sbomify.com/CVE-2018-20657/): Denial of service in f5:traffix signaling delivery controller (high 7.5) - [CVE-2018-20655](https://insights.sbomify.com/CVE-2018-20655/): Memory corruption in WhatsApp Business for iOS (critical 9.8) - [CVE-2018-20652](https://insights.sbomify.com/CVE-2018-20652/): Denial of service in tinyexr project:tinyexr (medium 6.5) - [CVE-2018-20651](https://insights.sbomify.com/CVE-2018-20651/): Null dereference in gnu:binutils (medium 5.5) - [CVE-2018-20650](https://insights.sbomify.com/CVE-2018-20650/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2018-20648](https://insights.sbomify.com/CVE-2018-20648/): Cross-site request forgery in car rental script project:car rental script (high 8.8) - [CVE-2018-20647](https://insights.sbomify.com/CVE-2018-20647/): Path traversal in car rental script project:car rental script (medium 6.5) - [CVE-2018-20646](https://insights.sbomify.com/CVE-2018-20646/): Path traversal in basic b2b script project:basic b2b script (medium 6.5) - [CVE-2018-20645](https://insights.sbomify.com/CVE-2018-20645/): Cross-site scripting in basic b2b script project:basic b2b script (medium 5.4) - [CVE-2018-20644](https://insights.sbomify.com/CVE-2018-20644/): Cross-site request forgery in basic b2b script project:basic b2b script (high 8.8) - [CVE-2018-20643](https://insights.sbomify.com/CVE-2018-20643/): Path traversal in entrepreneur job portal script project:entrepreneur job portal script (medium 6.5) - [CVE-2018-20642](https://insights.sbomify.com/CVE-2018-20642/): Cross-site scripting in entrepreneur job portal script project:entrepreneur job portal script (medium 6.5) - [CVE-2018-20641](https://insights.sbomify.com/CVE-2018-20641/): Cross-site request forgery in entrepreneur job portal script project:entrepreneur job portal script (high 8.8) - [CVE-2018-20640](https://insights.sbomify.com/CVE-2018-20640/): Cross-site scripting in entrepreneur job portal script project:entrepreneur job portal script (medium 5.4) - [CVE-2018-20639](https://insights.sbomify.com/CVE-2018-20639/): Cross-site scripting in entrepreneur job portal script project:entrepreneur job portal script (medium 6.1) - [CVE-2018-20638](https://insights.sbomify.com/CVE-2018-20638/): Path traversal in chartered accountant \: auditor website project (medium 6.5) - [CVE-2018-20637](https://insights.sbomify.com/CVE-2018-20637/): Cross-site scripting in chartered accountant \: auditor website project (medium 6.5) - [CVE-2018-20636](https://insights.sbomify.com/CVE-2018-20636/): Cross-site scripting in chartered accountant \: auditor website project (medium 5.4) - [CVE-2018-20635](https://insights.sbomify.com/CVE-2018-20635/): Path traversal in advance b2b script project:advance b2b script (medium 4.3) - [CVE-2018-20634](https://insights.sbomify.com/CVE-2018-20634/): Cross-site scripting in advance b2b script project:advance b2b script (medium 6.5) - [CVE-2018-20633](https://insights.sbomify.com/CVE-2018-20633/): Cross-site request forgery in advance b2b script project:advance b2b script (high 8.8) - [CVE-2018-20632](https://insights.sbomify.com/CVE-2018-20632/): Cross-site scripting in advance b2b script project:advance b2b script (medium 5.4) - [CVE-2018-20631](https://insights.sbomify.com/CVE-2018-20631/): Information disclosure in website seller script project:website seller script (medium 5.3) - [CVE-2018-20630](https://insights.sbomify.com/CVE-2018-20630/): Path traversal in advance crowdfunding script project:advance crowdfunding script (medium 5.3) - [CVE-2018-20629](https://insights.sbomify.com/CVE-2018-20629/): Path traversal in charity donation script project:charity donation script (medium 5.3) - [CVE-2018-20628](https://insights.sbomify.com/CVE-2018-20628/): Path traversal in charity foundation script project:charity foundation script (high 7.5) - [CVE-2018-20627](https://insights.sbomify.com/CVE-2018-20627/): Cross-site scripting in consumer reviews script project:consumer reviews script (medium 5.4) - [CVE-2018-20626](https://insights.sbomify.com/CVE-2018-20626/): Path traversal in consumer reviews script project:consumer reviews script (medium 6.5) - [CVE-2018-20623](https://insights.sbomify.com/CVE-2018-20623/): Use after free in gnu:binutils (medium 5.5) - [CVE-2018-20622](https://insights.sbomify.com/CVE-2018-20622/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2018-20621](https://insights.sbomify.com/CVE-2018-20621/): Privilege escalation in microvirt:memu (high 7.8) - [CVE-2018-20618](https://insights.sbomify.com/CVE-2018-20618/): Memory corruption in ok-file-formats project:ok-file-formats (high 8.8) - [CVE-2018-20617](https://insights.sbomify.com/CVE-2018-20617/): Memory corruption in ok-file-formats project:ok-file-formats (high 8.8) - [CVE-2018-20616](https://insights.sbomify.com/CVE-2018-20616/): Memory corruption in ok-file-formats project:ok-file-formats (high 8.8) - [CVE-2018-20615](https://insights.sbomify.com/CVE-2018-20615/): Memory corruption in canonical:ubuntu linux (high 7.5) - [CVE-2018-20614](https://insights.sbomify.com/CVE-2018-20614/): Missing authorization in cim project:cim (high 7.5) - [CVE-2018-20613](https://insights.sbomify.com/CVE-2018-20613/): Cross-site request forgery in temmoku project:temmoku (high 8.8) - [CVE-2018-20612](https://insights.sbomify.com/CVE-2018-20612/): Cross-site request forgery in asthis:universal website asthis (high 8.8) - [CVE-2018-20611](https://insights.sbomify.com/CVE-2018-20611/): Cross-site scripting in txjia:imcat (medium 6.1) - [CVE-2018-20610](https://insights.sbomify.com/CVE-2018-20610/): Path traversal in txjia:imcat (medium 4.9) - [CVE-2018-20609](https://insights.sbomify.com/CVE-2018-20609/): Information disclosure in txjia:imcat (medium 5.3) - [CVE-2018-20608](https://insights.sbomify.com/CVE-2018-20608/): Information disclosure in txjia:imcat (high 7.5) - [CVE-2018-20607](https://insights.sbomify.com/CVE-2018-20607/): Information disclosure in txjia:imcat (medium 5.3) - [CVE-2018-20606](https://insights.sbomify.com/CVE-2018-20606/): Information disclosure in txjia:imcat (high 7.5) - [CVE-2018-20605](https://insights.sbomify.com/CVE-2018-20605/): Code injection in txjia:imcat (critical 9.8) - [CVE-2018-20604](https://insights.sbomify.com/CVE-2018-20604/): Path traversal in lfdycms:lei feng tv cms (medium 4.9) - [CVE-2018-20603](https://insights.sbomify.com/CVE-2018-20603/): Cross-site request forgery in lfdycms:lei feng tv cms (high 8.8) - [CVE-2018-20602](https://insights.sbomify.com/CVE-2018-20602/): Information disclosure in lfdycms:lei feng tv cms (high 7.5) - [CVE-2018-20601](https://insights.sbomify.com/CVE-2018-20601/): Cross-site scripting in ucms project:ucms (medium 4.8) - [CVE-2018-20600](https://insights.sbomify.com/CVE-2018-20600/): Cross-site scripting in ucms project:ucms (medium 6.1) - [CVE-2018-20599](https://insights.sbomify.com/CVE-2018-20599/): Code injection in ucms project:ucms (high 8.8) - [CVE-2018-20598](https://insights.sbomify.com/CVE-2018-20598/): UCMS 1.4.7 has ?do=user_addpost CSRF. (high 8.8) - [CVE-2018-20597](https://insights.sbomify.com/CVE-2018-20597/): Cross-site scripting in ucms project:ucms (medium 4.8) - [CVE-2018-20596](https://insights.sbomify.com/CVE-2018-20596/): Jspxcms v9.0.0 allows SSRF. (critical 9.8) - [CVE-2018-20595](https://insights.sbomify.com/CVE-2018-20595/): Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons (high 8.8) - [CVE-2018-20594](https://insights.sbomify.com/CVE-2018-20594/): Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons (medium 6.1) - [CVE-2018-20593](https://insights.sbomify.com/CVE-2018-20593/): Memory corruption in fedoraproject:fedora (medium 5.5) - [CVE-2018-20592](https://insights.sbomify.com/CVE-2018-20592/): Use after free in fedoraproject:fedora (medium 5.5) - [CVE-2018-20591](https://insights.sbomify.com/CVE-2018-20591/): Memory corruption in libming:libming (medium 6.5) - [CVE-2018-20590](https://insights.sbomify.com/CVE-2018-20590/): Cross-site scripting in generic content management system project:generic content management system (medium 4.8) - [CVE-2018-20589](https://insights.sbomify.com/CVE-2018-20589/): Cross-site scripting in generic content management system project:generic content management system (medium 4.8) - [CVE-2018-20588](https://insights.sbomify.com/CVE-2018-20588/): Memory corruption in otfcc project:otfcc (medium 6.5) - [CVE-2018-20587](https://insights.sbomify.com/CVE-2018-20587/): Security feature bypass in bitcoin:bitcoin core (medium 5.5) - [CVE-2018-20586](https://insights.sbomify.com/CVE-2018-20586/): Other in bitcoin:bitcoin core (medium 5.3) - [CVE-2018-20584](https://insights.sbomify.com/CVE-2018-20584/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2018-20583](https://insights.sbomify.com/CVE-2018-20583/): PHP League CommonMark vulnerable to Cross-Site Scripting (XSS) (medium 6.1) - [CVE-2018-20582](https://insights.sbomify.com/CVE-2018-20582/): Cross-site request forgery in gree:gree\+ (high 8.8) - [CVE-2018-20580](https://insights.sbomify.com/CVE-2018-20580/): Code injection in smartbear:readyapi (high 8.8) - [CVE-2018-20579](https://insights.sbomify.com/CVE-2018-20579/): Memory corruption in contiki-ng project:contiki-ng (high 7.1) - [CVE-2018-20578](https://insights.sbomify.com/CVE-2018-20578/): Denial of service in nuttx:nuttx (high 7.5) - [CVE-2018-20577](https://insights.sbomify.com/CVE-2018-20577/): Cross-site request forgery in orange:arv7519rw22 livebox 2.1 firmware (critical 9.1) - [CVE-2018-20576](https://insights.sbomify.com/CVE-2018-20576/): Cross-site request forgery in orange:arv7519rw22 livebox 2.1 firmware (medium 5.4) - [CVE-2018-20575](https://insights.sbomify.com/CVE-2018-20575/): Other in orange:arv7519rw22 livebox 2.1 firmware (high 7.5) - [CVE-2018-20574](https://insights.sbomify.com/CVE-2018-20574/): Denial of service in yaml-cpp project:yaml-cpp (medium 6.5) - [CVE-2018-20573](https://insights.sbomify.com/CVE-2018-20573/): Denial of service in yaml-cpp project:yaml-cpp (medium 6.5) - [CVE-2018-20572](https://insights.sbomify.com/CVE-2018-20572/): SQL injection in wuzhicms:wuzhicms (critical 9.8) - [CVE-2018-20571](https://insights.sbomify.com/CVE-2018-20571/): Path traversal in damicms:damicms (high 7.5) - [CVE-2018-20570](https://insights.sbomify.com/CVE-2018-20570/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2018-20569](https://insights.sbomify.com/CVE-2018-20569/): SQL injection in generic content management system project:generic content management system (critical 9.8) - [CVE-2018-20568](https://insights.sbomify.com/CVE-2018-20568/): SQL injection in generic content management system project:generic content management system (critical 9.8) - [CVE-2018-20567](https://insights.sbomify.com/CVE-2018-20567/): Misconfiguration in douco:douphp (medium 5.3) - [CVE-2018-20566](https://insights.sbomify.com/CVE-2018-20566/): Information disclosure in douco:douphp (medium 5.3) - [CVE-2018-20565](https://insights.sbomify.com/CVE-2018-20565/): Cross-site scripting in douco:douphp (medium 4.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/65/