# Vulnerabilities published in 2018


- [CVE-2018-20564](https://insights.sbomify.com/CVE-2018-20564/): Cross-site scripting in douco:douphp (medium 4.8)
- [CVE-2018-20563](https://insights.sbomify.com/CVE-2018-20563/): Cross-site scripting in douco:douphp (medium 4.8)
- [CVE-2018-20562](https://insights.sbomify.com/CVE-2018-20562/): Cross-site scripting in douco:douphp (medium 4.8)
- [CVE-2018-20561](https://insights.sbomify.com/CVE-2018-20561/): Cross-site scripting in douco:douphp (medium 4.8)
- [CVE-2018-20560](https://insights.sbomify.com/CVE-2018-20560/): Cross-site scripting in douco:douphp (medium 4.8)
- [CVE-2018-20559](https://insights.sbomify.com/CVE-2018-20559/): Cross-site scripting in douco:douphp (medium 4.8)
- [CVE-2018-20558](https://insights.sbomify.com/CVE-2018-20558/): Cross-site scripting in douco:douphp (medium 4.8)
- [CVE-2018-20557](https://insights.sbomify.com/CVE-2018-20557/): Cross-site scripting in douco:douphp (medium 4.8)
- [CVE-2018-20556](https://insights.sbomify.com/CVE-2018-20556/): SQL injection in booking calendar project:booking calendar (high 8.8)
- [CVE-2018-20555](https://insights.sbomify.com/CVE-2018-20555/): Information disclosure in designchemical:social network tabs (critical 9.8)
- [CVE-2018-20553](https://insights.sbomify.com/CVE-2018-20553/): Memory corruption in broadcom:tcpreplay (high 7.8)
- [CVE-2018-20552](https://insights.sbomify.com/CVE-2018-20552/): Memory corruption in broadcom:tcpreplay (high 7.8)
- [CVE-2018-20551](https://insights.sbomify.com/CVE-2018-20551/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-20549](https://insights.sbomify.com/CVE-2018-20549/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2018-20548](https://insights.sbomify.com/CVE-2018-20548/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2018-20547](https://insights.sbomify.com/CVE-2018-20547/): Memory corruption in canonical:ubuntu linux (high 8.1)
- [CVE-2018-20546](https://insights.sbomify.com/CVE-2018-20546/): Memory corruption in canonical:ubuntu linux (high 8.1)
- [CVE-2018-20545](https://insights.sbomify.com/CVE-2018-20545/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2018-20544](https://insights.sbomify.com/CVE-2018-20544/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-20543](https://insights.sbomify.com/CVE-2018-20543/): Denial of service in libxsmm project:libxsmm (medium 6.5)
- [CVE-2018-20542](https://insights.sbomify.com/CVE-2018-20542/): Memory corruption in libxsmm project:libxsmm (high 8.8)
- [CVE-2018-20541](https://insights.sbomify.com/CVE-2018-20541/): Memory corruption in libxsmm project:libxsmm (high 8.8)
- [CVE-2018-20540](https://insights.sbomify.com/CVE-2018-20540/): Denial of service in liblas:liblas (medium 6.5)
- [CVE-2018-20539](https://insights.sbomify.com/CVE-2018-20539/): Memory corruption in liblas:liblas (medium 6.5)
- [CVE-2018-20538](https://insights.sbomify.com/CVE-2018-20538/): Use after free in nasm:netwide assembler (medium 5.5)
- [CVE-2018-20537](https://insights.sbomify.com/CVE-2018-20537/): Null dereference in liblas:liblas (medium 6.5)
- [CVE-2018-20536](https://insights.sbomify.com/CVE-2018-20536/): Memory corruption in liblas:liblas (medium 6.5)
- [CVE-2018-20535](https://insights.sbomify.com/CVE-2018-20535/): Use after free in nasm:netwide assembler (medium 5.5)
- [CVE-2018-20534](https://insights.sbomify.com/CVE-2018-20534/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-20533](https://insights.sbomify.com/CVE-2018-20533/): Null dereference in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-20532](https://insights.sbomify.com/CVE-2018-20532/): Null dereference in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-20530](https://insights.sbomify.com/CVE-2018-20530/): Cross-site scripting in website seller script project:website seller script (medium 5.4)
- [CVE-2018-20528](https://insights.sbomify.com/CVE-2018-20528/): Server-side request forgery in jeecms:jeecms (medium 6.5)
- [CVE-2018-20526](https://insights.sbomify.com/CVE-2018-20526/): File upload in roxyfileman:roxy fileman (critical 9.8)
- [CVE-2018-20525](https://insights.sbomify.com/CVE-2018-20525/): Path traversal in roxyfileman:roxy fileman (critical 9.1)
- [CVE-2018-20524](https://insights.sbomify.com/CVE-2018-20524/): Cross-site scripting in urlchatbox:chat anywhere (medium 6.1)
- [CVE-2018-20523](https://insights.sbomify.com/CVE-2018-20523/): Information disclosure in mi:redmi 4a firmware (medium 5.3)
- [CVE-2018-20520](https://insights.sbomify.com/CVE-2018-20520/): Cross-site scripting in 1234n:minicms (medium 6.1)
- [CVE-2018-20519](https://insights.sbomify.com/CVE-2018-20519/): Missing authorization in 74cms:74cms (high 8.1)
- [CVE-2018-20512](https://insights.sbomify.com/CVE-2018-20512/): Auth bypass in cdatatec:epon cpe-wifi devices firmware (critical 9.8)
- [CVE-2018-20511](https://insights.sbomify.com/CVE-2018-20511/): Information disclosure in debian:debian linux (medium 5.5)
- [CVE-2018-20510](https://insights.sbomify.com/CVE-2018-20510/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2018-20509](https://insights.sbomify.com/CVE-2018-20509/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2018-20508](https://insights.sbomify.com/CVE-2018-20508/): SQL injection in crashfix project:crashfix (critical 9.8)
- [CVE-2018-20507](https://insights.sbomify.com/CVE-2018-20507/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2018-20506](https://insights.sbomify.com/CVE-2018-20506/): Integer overflow in apple:icloud (high 8.1)
- [CVE-2018-20505](https://insights.sbomify.com/CVE-2018-20505/): Denial of service in apple:icloud (high 7.5)
- [CVE-2018-20503](https://insights.sbomify.com/CVE-2018-20503/): Cross-site scripting in alliedtelesis:8100l\/8 firmware (medium 6.1)
- [CVE-2018-20502](https://insights.sbomify.com/CVE-2018-20502/): Denial of service in axiosys:bento4 (medium 6.5)
- [CVE-2018-20501](https://insights.sbomify.com/CVE-2018-20501/): Missing authorization in gitlab:gitlab (medium 6.3)
- [CVE-2018-20500](https://insights.sbomify.com/CVE-2018-20500/): Misconfiguration in gitlab:gitlab (high 7.5)
- [CVE-2018-20499](https://insights.sbomify.com/CVE-2018-20499/): Server-side request forgery in gitlab:gitlab (high 7.2)
- [CVE-2018-20498](https://insights.sbomify.com/CVE-2018-20498/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2018-20497](https://insights.sbomify.com/CVE-2018-20497/): Server-side request forgery in gitlab:gitlab (medium 5.0)
- [CVE-2018-20496](https://insights.sbomify.com/CVE-2018-20496/): Cross-site scripting in gitlab:gitlab (medium 5.4)
- [CVE-2018-20495](https://insights.sbomify.com/CVE-2018-20495/): Information disclosure in gitlab:gitlab (medium 5.3)
- [CVE-2018-20494](https://insights.sbomify.com/CVE-2018-20494/): Missing authorization in gitlab:gitlab (high 7.5)
- [CVE-2018-20493](https://insights.sbomify.com/CVE-2018-20493/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2018-20492](https://insights.sbomify.com/CVE-2018-20492/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2018-20491](https://insights.sbomify.com/CVE-2018-20491/): Cross-site scripting in gitlab:gitlab (medium 5.4)
- [CVE-2018-20490](https://insights.sbomify.com/CVE-2018-20490/): Cross-site scripting in gitlab:gitlab (medium 5.4)
- [CVE-2018-20489](https://insights.sbomify.com/CVE-2018-20489/): Auth bypass in gitlab:gitlab (medium 5.3)
- [CVE-2018-20488](https://insights.sbomify.com/CVE-2018-20488/): Information disclosure in gitlab:gitlab (medium 4.3)
- [CVE-2018-20487](https://insights.sbomify.com/CVE-2018-20487/): Command injection in inteno:iopsys (high 8.8)
- [CVE-2018-20486](https://insights.sbomify.com/CVE-2018-20486/): Cross-site scripting in metinfo:metinfo (medium 6.1)
- [CVE-2018-20485](https://insights.sbomify.com/CVE-2018-20485/): Cross-site scripting in zohocorp:manageengine adselfservice plus (medium 6.1)
- [CVE-2018-20484](https://insights.sbomify.com/CVE-2018-20484/): Cross-site scripting in zohocorp:manageengine adselfservice plus (medium 6.1)
- [CVE-2018-20483](https://insights.sbomify.com/CVE-2018-20483/): Information disclosure in gnu:wget (high 7.8)
- [CVE-2018-20482](https://insights.sbomify.com/CVE-2018-20482/): Denial of service in debian:debian linux (medium 4.7)
- [CVE-2018-20481](https://insights.sbomify.com/CVE-2018-20481/): Null dereference in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-20480](https://insights.sbomify.com/CVE-2018-20480/): SQL injection in s-cms:s-cms (critical 9.8)
- [CVE-2018-20479](https://insights.sbomify.com/CVE-2018-20479/): SQL injection in s-cms:s-cms (critical 9.8)
- [CVE-2018-20478](https://insights.sbomify.com/CVE-2018-20478/): Path traversal in s-cms:s-cms (high 7.5)
- [CVE-2018-20477](https://insights.sbomify.com/CVE-2018-20477/): SQL injection in s-cms:s-cms (critical 9.8)
- [CVE-2018-20476](https://insights.sbomify.com/CVE-2018-20476/): Cross-site scripting in s-cms:s-cms (medium 6.1)
- [CVE-2018-20472](https://insights.sbomify.com/CVE-2018-20472/): Cross-site scripting in sahipro:sahi pro (medium 5.4)
- [CVE-2018-20470](https://insights.sbomify.com/CVE-2018-20470/): Path traversal in sahipro:sahi pro (high 7.5)
- [CVE-2018-20469](https://insights.sbomify.com/CVE-2018-20469/): SQL injection in sahipro:sahi pro (critical 9.8)
- [CVE-2018-20468](https://insights.sbomify.com/CVE-2018-20468/): Code injection in sahipro:sahi pro (high 8.8)
- [CVE-2018-20467](https://insights.sbomify.com/CVE-2018-20467/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-20465](https://insights.sbomify.com/CVE-2018-20465/): Craft CMS Vulnerable to Server-Side Template Injection (high 7.2)
- [CVE-2018-20464](https://insights.sbomify.com/CVE-2018-20464/): Cross-site scripting in cmsmadesimple:cms made simple (medium 6.1)
- [CVE-2018-20463](https://insights.sbomify.com/CVE-2018-20463/): Path traversal in jsmol2wp project:jsmol2wp (high 7.5)
- [CVE-2018-20462](https://insights.sbomify.com/CVE-2018-20462/): Cross-site scripting in jsmol2wp project:jsmol2wp (medium 6.1)
- [CVE-2018-20461](https://insights.sbomify.com/CVE-2018-20461/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-20460](https://insights.sbomify.com/CVE-2018-20460/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-20459](https://insights.sbomify.com/CVE-2018-20459/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-20458](https://insights.sbomify.com/CVE-2018-20458/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-20457](https://insights.sbomify.com/CVE-2018-20457/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-20456](https://insights.sbomify.com/CVE-2018-20456/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-20455](https://insights.sbomify.com/CVE-2018-20455/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2018-20454](https://insights.sbomify.com/CVE-2018-20454/): Cross-site scripting in 74cms:74cms (medium 6.1)
- [CVE-2018-20453](https://insights.sbomify.com/CVE-2018-20453/): Memory corruption in libdoc project:libdoc (medium 6.5)
- [CVE-2018-20452](https://insights.sbomify.com/CVE-2018-20452/): Memory corruption in libxls project:libxls (high 8.8)
- [CVE-2018-20451](https://insights.sbomify.com/CVE-2018-20451/): Memory corruption in libdoc project:libdoc (medium 6.5)
- [CVE-2018-20450](https://insights.sbomify.com/CVE-2018-20450/): Memory corruption in libxls project:libxls (medium 6.5)
- [CVE-2018-20449](https://insights.sbomify.com/CVE-2018-20449/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2018-20448](https://insights.sbomify.com/CVE-2018-20448/): Cross-site scripting in frog cms project:frog cms (medium 5.4)
- [CVE-2018-20445](https://insights.sbomify.com/CVE-2018-20445/): Information disclosure in dlink:dcm-604 firmware (critical 9.8)
- [CVE-2018-20444](https://insights.sbomify.com/CVE-2018-20444/): Information disclosure in technicolor:cga0111 firmware (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/66/