# Vulnerabilities published in 2018


- [CVE-2018-20443](https://insights.sbomify.com/CVE-2018-20443/): Information disclosure in technicolor:tc7200.d1i firmware (critical 9.8)
- [CVE-2018-20442](https://insights.sbomify.com/CVE-2018-20442/): Information disclosure in technicolor:tc7110.b firmware (critical 9.8)
- [CVE-2018-20441](https://insights.sbomify.com/CVE-2018-20441/): Information disclosure in technicolor:tc7200.th2v2 firmware (critical 9.8)
- [CVE-2018-20440](https://insights.sbomify.com/CVE-2018-20440/): Information disclosure in technicolor:cwa0101 firmware (critical 9.8)
- [CVE-2018-20439](https://insights.sbomify.com/CVE-2018-20439/): Information disclosure in technicolor:dpc3928sl firmware (critical 9.8)
- [CVE-2018-20438](https://insights.sbomify.com/CVE-2018-20438/): Information disclosure in technicolor:tc7110.ar firmware (critical 9.8)
- [CVE-2018-20437](https://insights.sbomify.com/CVE-2018-20437/): Path traversal in mrbird:febs-shiro (high 7.5)
- [CVE-2018-20436](https://insights.sbomify.com/CVE-2018-20436/): Server-side request forgery in telegram:telegram (high 8.1)
- [CVE-2018-20434](https://insights.sbomify.com/CVE-2018-20434/): LibreNMS arbitrary OS commands execution (critical 9.8)
- [CVE-2018-20433](https://insights.sbomify.com/CVE-2018-20433/): XML External Entity Reference in mchange:c3p0 (critical 9.8)
- [CVE-2018-20432](https://insights.sbomify.com/CVE-2018-20432/): Hardcoded credentials in dlink:covr-2600r firmware (critical 9.8)
- [CVE-2018-20431](https://insights.sbomify.com/CVE-2018-20431/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2018-20430](https://insights.sbomify.com/CVE-2018-20430/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2018-20429](https://insights.sbomify.com/CVE-2018-20429/): Null dereference in libming:libming (high 8.8)
- [CVE-2018-20428](https://insights.sbomify.com/CVE-2018-20428/): Null dereference in libming:libming (high 8.8)
- [CVE-2018-20427](https://insights.sbomify.com/CVE-2018-20427/): Null dereference in libming:libming (high 8.8)
- [CVE-2018-20426](https://insights.sbomify.com/CVE-2018-20426/): Null dereference in libming:libming (high 8.8)
- [CVE-2018-20425](https://insights.sbomify.com/CVE-2018-20425/): Null dereference in libming:libming (high 8.8)
- [CVE-2018-20424](https://insights.sbomify.com/CVE-2018-20424/): Missing authorization in comsenz:discuzx (medium 5.9)
- [CVE-2018-20423](https://insights.sbomify.com/CVE-2018-20423/): Security feature bypass in comsenz:discuzx (high 8.1)
- [CVE-2018-20422](https://insights.sbomify.com/CVE-2018-20422/): Auth bypass in comsenz:discuzx (high 8.1)
- [CVE-2018-20421](https://insights.sbomify.com/CVE-2018-20421/): Denial of service in ethereum:go ethereum (high 7.5)
- [CVE-2018-20420](https://insights.sbomify.com/CVE-2018-20420/): Path traversal in weberp:weberp (medium 4.9)
- [CVE-2018-20419](https://insights.sbomify.com/CVE-2018-20419/): Cross-site request forgery in douco:douphp (high 8.8)
- [CVE-2018-20418](https://insights.sbomify.com/CVE-2018-20418/): Craft CMS Cross-site Scripting (XSS) Vulnerability (medium 4.8)
- [CVE-2018-20410](https://insights.sbomify.com/CVE-2018-20410/): Memory corruption in wellintech:kingscada (high 7.5)
- [CVE-2018-20409](https://insights.sbomify.com/CVE-2018-20409/): Memory corruption in axiosys:bento4 (medium 6.5)
- [CVE-2018-20408](https://insights.sbomify.com/CVE-2018-20408/): Denial of service in axiosys:bento4 (medium 6.5)
- [CVE-2018-20407](https://insights.sbomify.com/CVE-2018-20407/): Denial of service in axiosys:bento4 (medium 6.5)
- [CVE-2018-20406](https://insights.sbomify.com/CVE-2018-20406/): Integer overflow in debian:debian linux (high 7.5)
- [CVE-2018-20405](https://insights.sbomify.com/CVE-2018-20405/): Information disclosure in bigtreecms:bigtree (low 2.7)
- [CVE-2018-20404](https://insights.sbomify.com/CVE-2018-20404/): Denial of service in viatech:epia-e900 firmware (high 7.5)
- [CVE-2018-20402](https://insights.sbomify.com/CVE-2018-20402/): Hardcoded credentials in safe:fme server (high 8.8)
- [CVE-2018-20401](https://insights.sbomify.com/CVE-2018-20401/): Information disclosure in zoomtel:5352 firmware (critical 9.8)
- [CVE-2018-20400](https://insights.sbomify.com/CVE-2018-20400/): Information disclosure in ubeeinteractive:dvw2108 firmware (critical 9.8)
- [CVE-2018-20399](https://insights.sbomify.com/CVE-2018-20399/): Information disclosure in motorola:sbg901 firmware (critical 9.8)
- [CVE-2018-20398](https://insights.sbomify.com/CVE-2018-20398/): Information disclosure in skyworthdigital:cm5100-440 firmware (critical 9.8)
- [CVE-2018-20397](https://insights.sbomify.com/CVE-2018-20397/): Information disclosure in mplustec:cbc383z firmware (critical 9.8)
- [CVE-2018-20396](https://insights.sbomify.com/CVE-2018-20396/): Information disclosure in telaum:ming2120j firmware (critical 9.8)
- [CVE-2018-20395](https://insights.sbomify.com/CVE-2018-20395/): Information disclosure in net-wave:ming6200 firmware (critical 9.8)
- [CVE-2018-20394](https://insights.sbomify.com/CVE-2018-20394/): Information disclosure in technicolor:dwg849 firmware (critical 9.8)
- [CVE-2018-20393](https://insights.sbomify.com/CVE-2018-20393/): Information disclosure in technicolor:cga0101 firmware (critical 9.8)
- [CVE-2018-20392](https://insights.sbomify.com/CVE-2018-20392/): Information disclosure in cisco:dpc2100 firmware (critical 9.8)
- [CVE-2018-20391](https://insights.sbomify.com/CVE-2018-20391/): Information disclosure in teknotel:cbw700n firmware (critical 9.8)
- [CVE-2018-20390](https://insights.sbomify.com/CVE-2018-20390/): Information disclosure in kaonmedia:cg2001-an22a firmware (critical 9.8)
- [CVE-2018-20389](https://insights.sbomify.com/CVE-2018-20389/): Information disclosure in d-link:dcm-604 firmware (critical 9.8)
- [CVE-2018-20388](https://insights.sbomify.com/CVE-2018-20388/): Information disclosure in comtrend:cm-6200un firmware (critical 9.8)
- [CVE-2018-20387](https://insights.sbomify.com/CVE-2018-20387/): Information disclosure in bnmux:bcw700j firmware (critical 9.8)
- [CVE-2018-20386](https://insights.sbomify.com/CVE-2018-20386/): Information disclosure in commscope:arris sbg6580-2 firmware (critical 9.8)
- [CVE-2018-20385](https://insights.sbomify.com/CVE-2018-20385/): Information disclosure in castlenet:cbv38z4ec firmware (critical 9.8)
- [CVE-2018-20384](https://insights.sbomify.com/CVE-2018-20384/): Information disclosure in inovobb:ib-8120-w21 firmware (critical 9.8)
- [CVE-2018-20383](https://insights.sbomify.com/CVE-2018-20383/): Information disclosure in arris:dg950s firmware (critical 9.8)
- [CVE-2018-20382](https://insights.sbomify.com/CVE-2018-20382/): Information disclosure in jezetek-intl:bcm93383wrg firmware (critical 9.8)
- [CVE-2018-20381](https://insights.sbomify.com/CVE-2018-20381/): Information disclosure in technicolor:dpc2320 firmware (critical 9.8)
- [CVE-2018-20380](https://insights.sbomify.com/CVE-2018-20380/): Information disclosure in ubeeinteractive:ambit ddw2600 firmware (critical 9.8)
- [CVE-2018-20379](https://insights.sbomify.com/CVE-2018-20379/): Cross-site scripting in technicolor:dpc3928sl firmware (medium 4.7)
- [CVE-2018-20378](https://insights.sbomify.com/CVE-2018-20378/): Memory corruption in opensynergy:blue sdk (high 7.5)
- [CVE-2018-20377](https://insights.sbomify.com/CVE-2018-20377/): Information disclosure in orange:arv7519rw22 livebox 2.1 firmware (critical 9.8)
- [CVE-2018-20376](https://insights.sbomify.com/CVE-2018-20376/): Memory corruption in tinycc:tinycc (medium 5.5)
- [CVE-2018-20375](https://insights.sbomify.com/CVE-2018-20375/): Memory corruption in tinycc:tinycc (medium 5.5)
- [CVE-2018-20374](https://insights.sbomify.com/CVE-2018-20374/): Memory corruption in tinycc:tinycc (medium 5.5)
- [CVE-2018-20373](https://insights.sbomify.com/CVE-2018-20373/): Cross-site scripting in tendacn:adsl firmware (medium 5.4)
- [CVE-2018-20372](https://insights.sbomify.com/CVE-2018-20372/): Cross-site scripting in tp-link:td-w8961nd firmware (medium 5.4)
- [CVE-2018-20371](https://insights.sbomify.com/CVE-2018-20371/): Information disclosure in photorange photo vault project:photorange photo vault (critical 9.8)
- [CVE-2018-20370](https://insights.sbomify.com/CVE-2018-20370/): Cross-site scripting in the-sz:netchat (medium 5.4)
- [CVE-2018-20369](https://insights.sbomify.com/CVE-2018-20369/): Cross-site scripting in barracuda:message archiver (medium 6.1)
- [CVE-2018-20368](https://insights.sbomify.com/CVE-2018-20368/): Cross-site scripting in averta:master slider (medium 5.4)
- [CVE-2018-20367](https://insights.sbomify.com/CVE-2018-20367/): Cross-site scripting in wstmart:wstmart (medium 6.1)
- [CVE-2018-20365](https://insights.sbomify.com/CVE-2018-20365/): Memory corruption in libraw:libraw (medium 6.5)
- [CVE-2018-20364](https://insights.sbomify.com/CVE-2018-20364/): Null dereference in libraw:libraw (medium 6.5)
- [CVE-2018-20363](https://insights.sbomify.com/CVE-2018-20363/): Null dereference in libraw:libraw (medium 6.5)
- [CVE-2018-20362](https://insights.sbomify.com/CVE-2018-20362/): Null dereference in audiocoding:freeware advanced audio decoder 2 (medium 5.5)
- [CVE-2018-20361](https://insights.sbomify.com/CVE-2018-20361/): Memory corruption in audiocoding:freeware advanced audio decoder 2 (medium 5.5)
- [CVE-2018-20360](https://insights.sbomify.com/CVE-2018-20360/): Memory corruption in audiocoding:freeware advanced audio decoder 2 (medium 5.5)
- [CVE-2018-20359](https://insights.sbomify.com/CVE-2018-20359/): Memory corruption in audiocoding:freeware advanced audio decoder 2 (medium 5.5)
- [CVE-2018-20358](https://insights.sbomify.com/CVE-2018-20358/): Memory corruption in audiocoding:freeware advanced audio decoder 2 (medium 5.5)
- [CVE-2018-20357](https://insights.sbomify.com/CVE-2018-20357/): Null dereference in audiocoding:freeware advanced audio decoder 2 (medium 5.5)
- [CVE-2018-20356](https://insights.sbomify.com/CVE-2018-20356/): Use after free in cesanta:mongoose (critical 9.8)
- [CVE-2018-20355](https://insights.sbomify.com/CVE-2018-20355/): Use after free in cesanta:mongoose (critical 9.8)
- [CVE-2018-20354](https://insights.sbomify.com/CVE-2018-20354/): Use after free in cesanta:mongoose (critical 9.8)
- [CVE-2018-20353](https://insights.sbomify.com/CVE-2018-20353/): Use after free in cesanta:mongoose (critical 9.8)
- [CVE-2018-20352](https://insights.sbomify.com/CVE-2018-20352/): Use after free in cesanta:mongoose embedded web server library (high 8.8)
- [CVE-2018-20351](https://insights.sbomify.com/CVE-2018-20351/): Cross-site scripting in evernote:evernote (medium 6.1)
- [CVE-2018-20349](https://insights.sbomify.com/CVE-2018-20349/): Null dereference in igraph:igraph (medium 6.5)
- [CVE-2018-20348](https://insights.sbomify.com/CVE-2018-20348/): Denial of service in libpff project:libpff (medium 5.5)
- [CVE-2018-20346](https://insights.sbomify.com/CVE-2018-20346/): Integer overflow in debian:debian linux (high 8.1)
- [CVE-2018-20345](https://insights.sbomify.com/CVE-2018-20345/): Missing authorization in stackstorm:stackstorm (medium 5.3)
- [CVE-2018-20343](https://insights.sbomify.com/CVE-2018-20343/): Memory corruption in advsys:build engine (high 7.8)
- [CVE-2018-20342](https://insights.sbomify.com/CVE-2018-20342/): Auth bypass in floureon:sp012 (medium 6.8)
- [CVE-2018-20341](https://insights.sbomify.com/CVE-2018-20341/): Privilege escalation in winmagic:securedoc disk encryption (high 7.8)
- [CVE-2018-20340](https://insights.sbomify.com/CVE-2018-20340/): Memory corruption in debian:debian linux (medium 6.8)
- [CVE-2018-20339](https://insights.sbomify.com/CVE-2018-20339/): Cross-site scripting in zohocorp:manageengine opmanager (medium 6.1)
- [CVE-2018-20338](https://insights.sbomify.com/CVE-2018-20338/): SQL injection in zohocorp:manageengine opmanager (critical 9.8)
- [CVE-2018-20337](https://insights.sbomify.com/CVE-2018-20337/): Memory corruption in libraw:libraw (high 8.8)
- [CVE-2018-20336](https://insights.sbomify.com/CVE-2018-20336/): Memory corruption in asus:asuswrt-merlin (high 7.5)
- [CVE-2018-20335](https://insights.sbomify.com/CVE-2018-20335/): Denial of service in asus:asuswrt (high 7.5)
- [CVE-2018-20334](https://insights.sbomify.com/CVE-2018-20334/): Command injection in asus:asuswrt (critical 9.8)
- [CVE-2018-20333](https://insights.sbomify.com/CVE-2018-20333/): Information disclosure in asus:asuswrt (high 7.5)
- [CVE-2018-20332](https://insights.sbomify.com/CVE-2018-20332/): Path traversal in openwebif project:openwebif (high 7.5)
- [CVE-2018-20331](https://insights.sbomify.com/CVE-2018-20331/): Memory corruption in antiy:anti virus lab atool (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/67/