Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 70 of 163.
- CVE-2018-20025 Weak cryptography in CODESYS V3 products
- CVE-2018-20024 Null dereference in LibVNC
- CVE-2018-20023 Information disclosure in LibVNC
- CVE-2018-20022 Information disclosure in LibVNC
- CVE-2018-20021 Denial of service in LibVNC
- CVE-2018-20020 Memory corruption in LibVNC
- CVE-2018-20019 Memory corruption in LibVNC
- CVE-2018-20018 SQL injection in s-cms:s-cms
- CVE-2018-20017 Cross-site scripting in sem-cms:semcms
- CVE-2018-20015 Cross-site request forgery in yzmcms:yzmcms
- CVE-2018-20014 Null dereference in urbackup:urbackup
- CVE-2018-20013 Denial of service in urbackup:urbackup
- CVE-2018-20012 Cross-site scripting in phpcmf:phpcmf
- CVE-2018-20011 Cross-site scripting in domainmod:domainmod
- CVE-2018-20010 Cross-site scripting in domainmod:domainmod
- CVE-2018-2001 Cross-site request forgery in Cram Social Program Management
- CVE-2018-20009 Cross-site scripting in domainmod:domainmod
- CVE-2018-20008 Information disclosure in iball:ib-wrb302n firmware
- CVE-2018-20007 Misconfiguration in yeelight:smart ai speaker firmware
- CVE-2018-20006 Cross-site scripting in phpok:phpok
- CVE-2018-20005 Use after free in fedoraproject:fedora
- CVE-2018-20004 Memory corruption in debian:debian linux
- CVE-2018-20002 Denial of service in f5:traffix signaling delivery controller
- CVE-2018-20001 Denial of service in libav:libav
- CVE-2018-20000 Improper Restriction of XML External Entity Reference in bedework:bw-webdav
- CVE-2018-2000 Cross-site request forgery in Business Automation Workflow
- CVE-2018-19999 Auth bypass in solarwinds:serv-u ftp server
- CVE-2018-19998 Dolibarr SQL injection vulnerability in user/card.php
- CVE-2018-19995 Dolibarr stored cross-site scripting (XSS) vulnerability
- CVE-2018-19994 Dolibarr error-based SQL injection vulnerability in product/card.php
- CVE-2018-19993 Dolibarr reflected cross-site scripting (XSS) vulnerability
- CVE-2018-19992 Dolibarr stored cross-site scripting (XSS) vulnerability
- CVE-2018-19991 Security feature bypass in verynginx project:verynginx
- CVE-2018-1999047 Incorrect Authorization in Jenkins
- CVE-2018-1999046 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
- CVE-2018-1999045 Improper Authentication in Jenkins
- CVE-2018-1999044 Infinite Loop in Jenkins Core
- CVE-2018-1999043 Missing Release of Resource after Effective Lifetime in Jenkins
- CVE-2018-1999042 Deserialization of Untrusted Data in Jenkins
- CVE-2018-1999041 Exposure of sensitive information vulnerability
- CVE-2018-1999040 Exposure of Sensitive Information in Jenkins Kubernetes Plugin
- CVE-2018-1999039 Server-Side Request Forgery (SSRF) in Jenkins Confluence Publisher Plugin
- CVE-2018-1999038 Jenkins Publisher Over CIFS Plugin confused deputy vulnerability
- CVE-2018-1999037 Jenkins Resource Disposer Plugin allows attacker to stop tracking specified resource
- CVE-2018-1999036 Jenkins SSH Agent Plugin exposes SSH private key password to users with permission to read the build log
- CVE-2018-1999035 Jenkins Inedo BuildMaster Plugin globally and unconditionally disabled SSL/TLS certificate validation
- CVE-2018-1999034 Jenkins Inedo ProGet Plugin globally and unconditionally disabled SSL/TLS certificate validation
- CVE-2018-1999033 Exposure of sensitive information in Anchore Container Image Scanner Jenkins Plugin
- CVE-2018-1999032 Jenkins Agiletestware Pangolin Connector for TestRail Plugin CSRF vulnerability and missing permission checks
- CVE-2018-1999031 Jenkins meliora-testlab Plugin allows attackers with file system access to Jenkins master to obtain API key
- CVE-2018-1999030 Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin CSRF vulnerability and missing permission checks
- CVE-2018-1999029 Stored Cross-Site Scripting Vulnerability in Jenkins Shelve Project Plugin
- CVE-2018-1999028 Jenkins Accurev Plugin CSRF vulnerability and missing permission checks
- CVE-2018-1999027 Jenkins SaltStack Plugin allows attackers to capture credentials with a known credentials ID stored in Jenkins
- CVE-2018-1999026 Jenkins TraceTronic ECU-TEST Plugin server-side request forgery vulnerability
- CVE-2018-1999025 Jenkins TraceTronic ECU-TEST Plugin Man in the middle vulnerability
- CVE-2018-1999024 Macro in MathJax running untrusted Javascript within a web browser
- CVE-2018-1999023 Code injection in wesnoth:the battle for wesnoth
- CVE-2018-1999022 Code injection in civicrm:civicrm
- CVE-2018-1999021 Gleez Cms Cross-site Scripting in Profile Page
- CVE-2018-1999020 Path traversal in opennetworking:onos
- CVE-2018-1999019 Deserialization in chamilo:chamilo lms
- CVE-2018-1999018 Command injection in pydio:pydio
- CVE-2018-1999017 Server-side request forgery in pydio:pydio
- CVE-2018-1999016 Cross-site scripting in pydio:pydio
- CVE-2018-1999015 Memory corruption in ffmpeg:ffmpeg
- CVE-2018-1999014 Memory corruption in ffmpeg:ffmpeg
- CVE-2018-1999013 Use after free in ffmpeg:ffmpeg
- CVE-2018-1999012 Denial of service in ffmpeg:ffmpeg
- CVE-2018-1999011 Memory corruption in ffmpeg:ffmpeg
- CVE-2018-1999010 Memory corruption in debian:debian linux
- CVE-2018-1999009 October CMS Local File Inclusion
- CVE-2018-1999008 Cross-site scripting in octobercms:october
- CVE-2018-1999007 Cross-site scripting vulnerability exists in Jenkins and Stapler Plugin
- CVE-2018-1999006 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
- CVE-2018-1999005 Improper Neutralization of Input During Web Page Generation in Jenkins
- CVE-2018-1999004 Incorrect Authorization in Jenkins
- CVE-2018-1999003 Incorrect Authorization in Jenkins
- CVE-2018-1999002 Improper Input Validation in Jenkins
- CVE-2018-1999001 Improper Input Validation in Jenkins
- CVE-2018-19990 Command injection in d-link:dir-822 firmware
- CVE-2018-1999 Information disclosure in Business Automation Workflow
- CVE-2018-19989 Command injection in d-link:dir-822 firmware
- CVE-2018-19988 Command injection in d-link:dir-868l firmware
- CVE-2018-19987 Command injection in d-link:dir-818lw firmware
- CVE-2018-19986 Command injection in d-link:dir-818lw firmware
- CVE-2018-19985 Memory corruption in debian:debian linux
- CVE-2018-19983 Denial of service in silabs:z-wave s0 firmware
- CVE-2018-19982 Security feature bypass in powermanager:kt mc01507l z-wave s0 firmware
- CVE-2018-19981 Information disclosure in amazon:aws software development kit
- CVE-2018-19980 Denial of service in anker:nebula capsule projector
- CVE-2018-1998 Command injection in MQ
- CVE-2018-19978 Memory corruption in auerswald:comfortel 1200 ip firmware
- CVE-2018-19977 Command injection in auerswald:comfortel 1200 ip firmware
- CVE-2018-19976 Information disclosure in virustotal:yara
- CVE-2018-19975 Memory corruption in virustotal:yara
- CVE-2018-19974 Information disclosure in virustotal:yara
- CVE-2018-19971 Missing authorization in jfrog:artifactory
- CVE-2018-19970 phpMyAdmin Cross-site Scripting (XSS) vulnerability
- CVE-2018-1997 Denial of service in Business Automation Workflow