Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 71 of 163.
- CVE-2018-19969 phpMyAdmin CSRF Vulnerability
- CVE-2018-19968 phpMyAdmin Local file inclusion through transformation feature
- CVE-2018-19967 Denial of service in debian:debian linux
- CVE-2018-19966 Memory corruption in debian:debian linux
- CVE-2018-19965 Denial of service in citrix:xenserver
- CVE-2018-19964 Denial of service in xen:xen
- CVE-2018-19963 Denial of service in xen:xen
- CVE-2018-19962 Privilege escalation in citrix:xenserver
- CVE-2018-19961 Privilege escalation in citrix:xenserver
- CVE-2018-19960 Other in onionshare:onionshare
- CVE-2018-1996 Weak cryptography in WebSphere Application Server
- CVE-2018-19957 Insufficient HTTP Security Headers in QTS, QuTS hero, and QuTScloud
- CVE-2018-19956 Cross-site scripting in Photo Station
- CVE-2018-19955 Cross-site scripting in Photo Station
- CVE-2018-19954 Cross-site scripting in Photo Station
- CVE-2018-19953 QNAP NAS File Station Cross-Site Scripting
- CVE-2018-19952 SQL injection in Music Station
- CVE-2018-19951 Cross-site scripting in Music Station
- CVE-2018-19950 Command injection in Music Station
- CVE-2018-19949 QNAP NAS File Station Command Injection
- CVE-2018-19948 Cross-site request forgery in Helpdesk
- CVE-2018-19947 Information disclosure in Helpdesk
- CVE-2018-19946 Security feature bypass in Helpdesk
- CVE-2018-19945 Improper Limitation of a Pathname to a Restricted Directory in QTS
- CVE-2018-19944 Cleartext Transmission of Sensitive Information in SNMP
- CVE-2018-19943 QNAP NAS File Station Cross-Site Scripting
- CVE-2018-19942 Cross-site Scripting Vulnerability in File Station
- CVE-2018-19941 Cleartext Storage of Sensitive Information in Cookies
- CVE-2018-1994 SQL injection in InfoSphere Information Server
- CVE-2018-19939 Null dereference in mi:mi a2 lite firmware
- CVE-2018-19937 Auth bypass in videolan:vlc for mobile
- CVE-2018-19936 Path traversal in printeron:printeron
- CVE-2018-19935 Null dereference in debian:debian linux
- CVE-2018-19934 Cross-site scripting in solarwinds:serv-u ftp server
- CVE-2018-19933 Bolt Cross-site Scripting (XSS) via text input click preview button
- CVE-2018-19932 Integer overflow in gnu:binutils
- CVE-2018-19931 Memory corruption in canonical:ubuntu linux
- CVE-2018-1993 Information disclosure in Spectrum Scale
- CVE-2018-19927 Cross-site scripting in zenitel:ip-stationweb firmware
- CVE-2018-19926 Cross-site scripting in zenitel:ip-stationweb firmware
- CVE-2018-19925 SQL injection in sales \& company management system project:sales \& company management system
- CVE-2018-19924 Cross-site scripting in sales \& company management system project:sales \& company management system
- CVE-2018-19923 Cross-site request forgery in sales \& company management system project:sales \& company management system
- CVE-2018-19922 Cross-site scripting in actiontec:c1000a firmware
- CVE-2018-19921 Cross-site scripting in zohocorp:manageengine opmanager
- CVE-2018-1992 Memory corruption in Power 9 Systems
- CVE-2018-19919 Cross-site scripting in pixelimity:pixelimity
- CVE-2018-19918 Cross-site scripting in cuppacms:cuppacms
- CVE-2018-19917 Microweber XSS Vulnerability
- CVE-2018-19915 Cross-site scripting in domainmod:domainmod
- CVE-2018-19914 Cross-site scripting in domainmod:domainmod
- CVE-2018-19913 Cross-site scripting in domainmod:domainmod
- CVE-2018-19911 Command injection in freeswitch:freeswitch
- CVE-2018-1991 Information disclosure in API Connect
- CVE-2018-19908 Command injection in misp-project:misp
- CVE-2018-19907 OS Command Injection in craftercms:crafter-studio
- CVE-2018-19906 Cross-site scripting in razorcms:razorcms
- CVE-2018-19905 Cross-site scripting in razorcms:razorcms
- CVE-2018-19904 Cross-site scripting in xsltcms.org project:xsltcms.org
- CVE-2018-19903 Cross-site scripting in xsltcms.org project:xsltcms.org
- CVE-2018-19902 Cross-site scripting in no-cms project:no-cms
- CVE-2018-19901 Cross-site scripting in no-cms project:no-cms
- CVE-2018-1990 Information disclosure in Cloud App Management
- CVE-2018-19898 SQL injection in thinkcmf:thinkcmf
- CVE-2018-19897 SQL injection in thinkcmf:thinkcmf
- CVE-2018-19896 SQL injection in thinkcmf:thinkcmf
- CVE-2018-19895 SQL injection in thinkcmf:thinkcmf
- CVE-2018-19894 SQL injection in thinkcmf:thinkcmf
- CVE-2018-19893 SQL injection in pbootcms:pbootcms
- CVE-2018-19892 Cross-site scripting in domainmod:domainmod
- CVE-2018-19891 Memory corruption in audiocoding:freeware advanced audio coder
- CVE-2018-19890 Memory corruption in audiocoding:freeware advanced audio coder
- CVE-2018-19889 Memory corruption in audiocoding:freeware advanced audio coder
- CVE-2018-19888 Memory corruption in audiocoding:freeware advanced audio coder
- CVE-2018-19887 Memory corruption in audiocoding:freeware advanced audio coder
- CVE-2018-19886 Memory corruption in audiocoding:freeware advanced audio coder
- CVE-2018-19882 Null dereference in artifex:mupdf
- CVE-2018-19881 Denial of service in artifex:mupdf
- CVE-2018-19879 Auth bypass in teltonika:rut950 firmware
- CVE-2018-19878 Denial of service in teltonika:rut950 firmware
- CVE-2018-19877 Cross-site scripting in adiscon:loganalyzer
- CVE-2018-19876 Memory corruption in cairographics:cairo
- CVE-2018-19873 Memory corruption in canonical:ubuntu linux
- CVE-2018-19872 Denial of service in fedoraproject:fedora
- CVE-2018-19871 Denial of service in opensuse:leap
- CVE-2018-19870 Null dereference in debian:debian linux
- CVE-2018-1987 Information disclosure in Spectrum Protect for Enterprise Resource Planning
- CVE-2018-19869 Denial of service in opensuse:leap
- CVE-2018-19865 Information disclosure in opensuse:leap
- CVE-2018-19864 Memory corruption in nuuo:nvrmini2 firmware
- CVE-2018-19863 Information disclosure in agilebits:1password
- CVE-2018-19862 Memory corruption in minishare project:minishare
- CVE-2018-19861 Memory corruption in minishare project:minishare
- CVE-2018-19860 Memory corruption in broadcom:bcm4335c0 firmware
- CVE-2018-19859 OpenRefine Directory Traversal
- CVE-2018-19858 XML external entity in princexml:princexml
- CVE-2018-19857 Memory corruption in debian:debian linux
- CVE-2018-19856 Path traversal in gitlab:gitlab
- CVE-2018-19855 Code injection in uipath:orchestrator
- CVE-2018-19854 Information disclosure in canonical:ubuntu linux