# Vulnerabilities published in 2018 - [CVE-2018-19853](https://insights.sbomify.com/CVE-2018-19853/): Privilege escalation in hitshop project:hitshop (high 8.8) - [CVE-2018-1985](https://insights.sbomify.com/CVE-2018-1985/): Memory corruption in Security Rapport for MacOS (medium 4.4) - [CVE-2018-19849](https://insights.sbomify.com/CVE-2018-19849/): Cross-site scripting in yzmcms:yzmcms (medium 4.8) - [CVE-2018-19845](https://insights.sbomify.com/CVE-2018-19845/): Cross-site scripting in get-simple:getsimple cms (medium 5.4) - [CVE-2018-19844](https://insights.sbomify.com/CVE-2018-19844/): Cross-site scripting in frogcms project:frogcms (medium 4.8) - [CVE-2018-19843](https://insights.sbomify.com/CVE-2018-19843/): Memory corruption in radare:radare2 (medium 5.5) - [CVE-2018-19842](https://insights.sbomify.com/CVE-2018-19842/): Memory corruption in radare:radare2 (medium 5.5) - [CVE-2018-19841](https://insights.sbomify.com/CVE-2018-19841/): Memory corruption in canonical:ubuntu linux (medium 5.5) - [CVE-2018-19840](https://insights.sbomify.com/CVE-2018-19840/): Denial of service in canonical:ubuntu linux (medium 5.5) - [CVE-2018-1984](https://insights.sbomify.com/CVE-2018-1984/): Cross-site scripting in Rational Team Concert (medium 5.4) - [CVE-2018-19839](https://insights.sbomify.com/CVE-2018-19839/): Memory corruption in sass-lang:libsass (medium 6.5) - [CVE-2018-19838](https://insights.sbomify.com/CVE-2018-19838/): Denial of service in sass-lang:libsass (medium 6.5) - [CVE-2018-19837](https://insights.sbomify.com/CVE-2018-19837/): Denial of service in sass-lang:libsass (medium 6.5) - [CVE-2018-19836](https://insights.sbomify.com/CVE-2018-19836/): Cross-site scripting in metinfo:metinfo (medium 6.1) - [CVE-2018-19835](https://insights.sbomify.com/CVE-2018-19835/): Cross-site scripting in metinfo:metinfo (medium 6.1) - [CVE-2018-19834](https://insights.sbomify.com/CVE-2018-19834/): Missing authorization in bombba project:bombba (high 7.5) - [CVE-2018-19833](https://insights.sbomify.com/CVE-2018-19833/): Missing authorization in ddq project:ddq (high 7.5) - [CVE-2018-19832](https://insights.sbomify.com/CVE-2018-19832/): Missing authorization in newinteltechmedia project:newinteltechmedia (high 7.5) - [CVE-2018-19831](https://insights.sbomify.com/CVE-2018-19831/): Missing authorization in cryptbond network project:cryptbond network (high 7.5) - [CVE-2018-19830](https://insights.sbomify.com/CVE-2018-19830/): Missing authorization in business alliance financial circle project:business alliance financial circle (high 7.5) - [CVE-2018-1983](https://insights.sbomify.com/CVE-2018-1983/): Cross-site scripting in Rational Team Concert (medium 5.4) - [CVE-2018-19829](https://insights.sbomify.com/CVE-2018-19829/): Cross-site request forgery in artica:integria ims (medium 6.5) - [CVE-2018-19828](https://insights.sbomify.com/CVE-2018-19828/): Cross-site scripting in artica:integria ims (medium 6.1) - [CVE-2018-19827](https://insights.sbomify.com/CVE-2018-19827/): Use after free in sass-lang:libsass (high 8.8) - [CVE-2018-19826](https://insights.sbomify.com/CVE-2018-19826/): Denial of service in sass-lang:libsass (medium 6.5) - [CVE-2018-19824](https://insights.sbomify.com/CVE-2018-19824/): Use after free in canonical:ubuntu linux (high 7.8) - [CVE-2018-19822](https://insights.sbomify.com/CVE-2018-19822/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19821](https://insights.sbomify.com/CVE-2018-19821/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19820](https://insights.sbomify.com/CVE-2018-19820/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-1982](https://insights.sbomify.com/CVE-2018-1982/): Cross-site scripting in Rational Team Concert (medium 5.4) - [CVE-2018-19819](https://insights.sbomify.com/CVE-2018-19819/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19818](https://insights.sbomify.com/CVE-2018-19818/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19817](https://insights.sbomify.com/CVE-2018-19817/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19816](https://insights.sbomify.com/CVE-2018-19816/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19815](https://insights.sbomify.com/CVE-2018-19815/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19814](https://insights.sbomify.com/CVE-2018-19814/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19813](https://insights.sbomify.com/CVE-2018-19813/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19812](https://insights.sbomify.com/CVE-2018-19812/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19811](https://insights.sbomify.com/CVE-2018-19811/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19810](https://insights.sbomify.com/CVE-2018-19810/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19809](https://insights.sbomify.com/CVE-2018-19809/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19802](https://insights.sbomify.com/CVE-2018-19802/): Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function (high 7.5) - [CVE-2018-19801](https://insights.sbomify.com/CVE-2018-19801/): Aubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank (high 7.5) - [CVE-2018-19800](https://insights.sbomify.com/CVE-2018-19800/): aubio Buffer Overflow vulnerability (critical 9.8) - [CVE-2018-1980](https://insights.sbomify.com/CVE-2018-1980/): Memory corruption in DB2 for Linux, UNIX and Windows (high 8.4) - [CVE-2018-19799](https://insights.sbomify.com/CVE-2018-19799/): Dolibarr ERP and CRM contain XSS Vulnerability (medium 6.1) - [CVE-2018-19798](https://insights.sbomify.com/CVE-2018-19798/): File upload in fleetco:fleet maintenance management (high 8.8) - [CVE-2018-19797](https://insights.sbomify.com/CVE-2018-19797/): Null dereference in sass-lang:libsass (medium 6.5) - [CVE-2018-19796](https://insights.sbomify.com/CVE-2018-19796/): Open redirect in ninjaforms:ninja forms (medium 6.1) - [CVE-2018-19795](https://insights.sbomify.com/CVE-2018-19795/): Weak cryptography in chipsbank:umptool (medium 6.8) - [CVE-2018-19794](https://insights.sbomify.com/CVE-2018-19794/): Cross-site scripting in internet2:grouper (medium 6.1) - [CVE-2018-19793](https://insights.sbomify.com/CVE-2018-19793/): Command injection in jiacrontab project:jiacrontab (high 7.2) - [CVE-2018-19792](https://insights.sbomify.com/CVE-2018-19792/): Memory corruption in litespeedtech:openlitespeed (medium 6.7) - [CVE-2018-19791](https://insights.sbomify.com/CVE-2018-19791/): Denial of service in litespeedtech:openlitespeed (medium 6.5) - [CVE-2018-19790](https://insights.sbomify.com/CVE-2018-19790/): Symfony Open Redirect (medium 6.1) - [CVE-2018-19789](https://insights.sbomify.com/CVE-2018-19789/): Symfony Path Disclosure (medium 5.3) - [CVE-2018-19788](https://insights.sbomify.com/CVE-2018-19788/): Privilege escalation in canonical:ubuntu linux (high 8.8) - [CVE-2018-19787](https://insights.sbomify.com/CVE-2018-19787/): Improper Neutralization of Input During Web Page Generation in LXML (medium 6.1) - [CVE-2018-19786](https://insights.sbomify.com/CVE-2018-19786/): Information disclosure in hashicorp:vault (high 8.1) - [CVE-2018-19785](https://insights.sbomify.com/CVE-2018-19785/): XSS in PHP-Proxy-App through v3.0 (medium 6.1) - [CVE-2018-19784](https://insights.sbomify.com/CVE-2018-19784/): Weak Cryptography in PHP-Proxy (high 7.5) - [CVE-2018-19783](https://insights.sbomify.com/CVE-2018-19783/): Auth bypass in kentix:multisensor-lan firmware (critical 9.8) - [CVE-2018-19782](https://insights.sbomify.com/CVE-2018-19782/): Cross-site scripting in freshrss:freshrss (medium 6.1) - [CVE-2018-1978](https://insights.sbomify.com/CVE-2018-1978/): Memory corruption in DB2 for Linux, UNIX and Windows (high 8.4) - [CVE-2018-19777](https://insights.sbomify.com/CVE-2018-19777/): Denial of service in artifex:mupdf (medium 5.5) - [CVE-2018-19775](https://insights.sbomify.com/CVE-2018-19775/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19774](https://insights.sbomify.com/CVE-2018-19774/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19773](https://insights.sbomify.com/CVE-2018-19773/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19772](https://insights.sbomify.com/CVE-2018-19772/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19771](https://insights.sbomify.com/CVE-2018-19771/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19770](https://insights.sbomify.com/CVE-2018-19770/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-1977](https://insights.sbomify.com/CVE-2018-1977/): Denial of service in DB2 for Linux, UNIX and Windows (medium 5.3) - [CVE-2018-19769](https://insights.sbomify.com/CVE-2018-19769/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19768](https://insights.sbomify.com/CVE-2018-19768/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19767](https://insights.sbomify.com/CVE-2018-19767/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19766](https://insights.sbomify.com/CVE-2018-19766/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19765](https://insights.sbomify.com/CVE-2018-19765/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19763](https://insights.sbomify.com/CVE-2018-19763/): Memory corruption in saitoha:libsixel (medium 5.5) - [CVE-2018-19762](https://insights.sbomify.com/CVE-2018-19762/): Memory corruption in saitoha:libsixel (high 7.8) - [CVE-2018-19761](https://insights.sbomify.com/CVE-2018-19761/): Memory corruption in saitoha:libsixel (medium 5.5) - [CVE-2018-19760](https://insights.sbomify.com/CVE-2018-19760/): Denial of service in libconfuse project:libconfuse (high 8.8) - [CVE-2018-1976](https://insights.sbomify.com/CVE-2018-1976/): Information disclosure in API Connect (medium 4.9) - [CVE-2018-19759](https://insights.sbomify.com/CVE-2018-19759/): Memory corruption in saitoha:libsixel (medium 5.5) - [CVE-2018-19758](https://insights.sbomify.com/CVE-2018-19758/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2018-19757](https://insights.sbomify.com/CVE-2018-19757/): Null dereference in saitoha:libsixel (medium 6.5) - [CVE-2018-19756](https://insights.sbomify.com/CVE-2018-19756/): Memory corruption in saitoha:libsixel (medium 5.5) - [CVE-2018-19755](https://insights.sbomify.com/CVE-2018-19755/): Memory corruption in nasm:netwide assembler (medium 5.5) - [CVE-2018-19754](https://insights.sbomify.com/CVE-2018-19754/): Missing authorization in oracle:tarantella enterprise (high 8.8) - [CVE-2018-19753](https://insights.sbomify.com/CVE-2018-19753/): Path traversal in oracle:tarantella enterprise (high 7.5) - [CVE-2018-19752](https://insights.sbomify.com/CVE-2018-19752/): Cross-site scripting in domainmod:domainmod (medium 4.8) - [CVE-2018-19751](https://insights.sbomify.com/CVE-2018-19751/): Cross-site scripting in domainmod:domainmod (medium 4.8) - [CVE-2018-19750](https://insights.sbomify.com/CVE-2018-19750/): Cross-site scripting in domainmod:domainmod (medium 5.4) - [CVE-2018-1975](https://insights.sbomify.com/CVE-2018-1975/): Cross-site scripting in Rational DOORS Web Access (medium 5.4) - [CVE-2018-19749](https://insights.sbomify.com/CVE-2018-19749/): Cross-site scripting in domainmod:domainmod (medium 4.8) - [CVE-2018-19748](https://insights.sbomify.com/CVE-2018-19748/): Path traversal in sdcms:sdcms (high 7.5) - [CVE-2018-1974](https://insights.sbomify.com/CVE-2018-1974/): Privilege escalation in MQ (high 7.5) - [CVE-2018-1973](https://insights.sbomify.com/CVE-2018-1973/): Privilege escalation in API Connect (high 7.2) - [CVE-2018-19728](https://insights.sbomify.com/CVE-2018-19728/): Memory corruption in Adobe Acrobat and Reader (medium 6.5) - [CVE-2018-19727](https://insights.sbomify.com/CVE-2018-19727/): Cross-site scripting in Adobe Experience Manager (medium 6.1) - [CVE-2018-19726](https://insights.sbomify.com/CVE-2018-19726/): Cross-site scripting in Adobe Experience Manager (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/72/