# Vulnerabilities published in 2018 - [CVE-2018-19725](https://insights.sbomify.com/CVE-2018-19725/): Privilege escalation in Adobe Acrobat and Reader (critical 9.8) - [CVE-2018-19724](https://insights.sbomify.com/CVE-2018-19724/): Cross-site scripting in Adobe Experience Manager Forms (medium 6.1) - [CVE-2018-19723](https://insights.sbomify.com/CVE-2018-19723/): Memory corruption in adobe:acrobat dc (high 7.5) - [CVE-2018-19722](https://insights.sbomify.com/CVE-2018-19722/): Memory corruption in adobe:acrobat dc (high 7.5) - [CVE-2018-19721](https://insights.sbomify.com/CVE-2018-19721/): Memory corruption in adobe:acrobat dc (medium 6.5) - [CVE-2018-19720](https://insights.sbomify.com/CVE-2018-19720/): Memory corruption in adobe:acrobat dc (high 8.8) - [CVE-2018-19719](https://insights.sbomify.com/CVE-2018-19719/): Memory corruption in adobe:acrobat dc (medium 6.5) - [CVE-2018-19718](https://insights.sbomify.com/CVE-2018-19718/): Information disclosure in adobe:connect (medium 5.3) - [CVE-2018-19717](https://insights.sbomify.com/CVE-2018-19717/): Memory corruption in adobe:acrobat dc (medium 5.5) - [CVE-2018-19716](https://insights.sbomify.com/CVE-2018-19716/): Memory corruption in adobe:acrobat dc (critical 9.8) - [CVE-2018-19715](https://insights.sbomify.com/CVE-2018-19715/): Use after free in adobe:acrobat dc (critical 9.8) - [CVE-2018-19714](https://insights.sbomify.com/CVE-2018-19714/): Memory corruption in adobe:acrobat dc (medium 6.5) - [CVE-2018-19713](https://insights.sbomify.com/CVE-2018-19713/): Use after free in adobe:acrobat dc (high 8.8) - [CVE-2018-19712](https://insights.sbomify.com/CVE-2018-19712/): Memory corruption in adobe:acrobat dc (medium 6.5) - [CVE-2018-19711](https://insights.sbomify.com/CVE-2018-19711/): Memory corruption in adobe:acrobat dc (medium 6.5) - [CVE-2018-19710](https://insights.sbomify.com/CVE-2018-19710/): Memory corruption in adobe:acrobat dc (medium 5.5) - [CVE-2018-19709](https://insights.sbomify.com/CVE-2018-19709/): Memory corruption in adobe:acrobat dc (medium 5.5) - [CVE-2018-19708](https://insights.sbomify.com/CVE-2018-19708/): Use after free in adobe:acrobat dc (critical 9.8) - [CVE-2018-19707](https://insights.sbomify.com/CVE-2018-19707/): Use after free in adobe:acrobat dc (critical 9.8) - [CVE-2018-19706](https://insights.sbomify.com/CVE-2018-19706/): Memory corruption in adobe:acrobat dc (high 7.5) - [CVE-2018-19705](https://insights.sbomify.com/CVE-2018-19705/): Memory corruption in adobe:acrobat dc (medium 5.5) - [CVE-2018-19704](https://insights.sbomify.com/CVE-2018-19704/): Memory corruption in adobe:acrobat dc (medium 5.5) - [CVE-2018-19703](https://insights.sbomify.com/CVE-2018-19703/): Memory corruption in adobe:acrobat dc (medium 5.5) - [CVE-2018-19702](https://insights.sbomify.com/CVE-2018-19702/): Memory corruption in adobe:acrobat dc (critical 9.8) - [CVE-2018-19701](https://insights.sbomify.com/CVE-2018-19701/): Memory corruption in adobe:acrobat dc (high 7.5) - [CVE-2018-19700](https://insights.sbomify.com/CVE-2018-19700/): Use after free in adobe:acrobat dc (critical 9.8) - [CVE-2018-1970](https://insights.sbomify.com/CVE-2018-1970/): XML external entity in Security Identity Manager (high 7.1) - [CVE-2018-19699](https://insights.sbomify.com/CVE-2018-19699/): Memory corruption in adobe:acrobat dc (high 7.5) - [CVE-2018-19698](https://insights.sbomify.com/CVE-2018-19698/): Use after free in adobe:acrobat dc (critical 9.8) - [CVE-2018-19694](https://insights.sbomify.com/CVE-2018-19694/): Cross-site scripting in hms-networks:netbiter ec150 firmware (medium 6.1) - [CVE-2018-19693](https://insights.sbomify.com/CVE-2018-19693/): Cross-site scripting in tp5cms project:tp5cms (medium 6.1) - [CVE-2018-19692](https://insights.sbomify.com/CVE-2018-19692/): File upload in tp5cms project:tp5cms (critical 9.8) - [CVE-2018-1969](https://insights.sbomify.com/CVE-2018-1969/): File upload in Security Identity Manager (critical 9.0) - [CVE-2018-1968](https://insights.sbomify.com/CVE-2018-1968/): Information disclosure in Security Identity Manager (medium 5.3) - [CVE-2018-1967](https://insights.sbomify.com/CVE-2018-1967/): Cross-site scripting in Security Identity Manager (medium 6.1) - [CVE-2018-19666](https://insights.sbomify.com/CVE-2018-19666/): Path traversal in ossec:ossec (high 7.8) - [CVE-2018-19665](https://insights.sbomify.com/CVE-2018-19665/): Memory corruption in opensuse:leap (medium 5.7) - [CVE-2018-19664](https://insights.sbomify.com/CVE-2018-19664/): Memory corruption in libjpeg-turbo:libjpeg-turbo (medium 6.5) - [CVE-2018-19662](https://insights.sbomify.com/CVE-2018-19662/): Memory corruption in debian:debian linux (high 8.1) - [CVE-2018-19661](https://insights.sbomify.com/CVE-2018-19661/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2018-19660](https://insights.sbomify.com/CVE-2018-19660/): Command injection in moxa:nport w2x50a firmware (high 8.8) - [CVE-2018-19659](https://insights.sbomify.com/CVE-2018-19659/): Command injection in moxa:nport w2x50a firmware (high 8.8) - [CVE-2018-19658](https://insights.sbomify.com/CVE-2018-19658/): Cross-site scripting in evernote:yinxiang biji (medium 5.4) - [CVE-2018-19655](https://insights.sbomify.com/CVE-2018-19655/): Memory corruption in dcraw project:dcraw (high 8.8) - [CVE-2018-19654](https://insights.sbomify.com/CVE-2018-19654/): Business logic in sales \& company management system project:sales \& company management system (high 7.5) - [CVE-2018-19653](https://insights.sbomify.com/CVE-2018-19653/): HashiCorp Consul can use cleartext agent-to-agent RPC communication (medium 5.9) - [CVE-2018-19651](https://insights.sbomify.com/CVE-2018-19651/): Server-side request forgery in interspire:email marketer (medium 6.5) - [CVE-2018-19650](https://insights.sbomify.com/CVE-2018-19650/): Memory corruption in antiy:anti virus lab atool (high 7.8) - [CVE-2018-19649](https://insights.sbomify.com/CVE-2018-19649/): Cross-site scripting in infovista:vistaportal (medium 6.1) - [CVE-2018-19648](https://insights.sbomify.com/CVE-2018-19648/): Privilege escalation in adtran:pmaa (high 8.8) - [CVE-2018-19646](https://insights.sbomify.com/CVE-2018-19646/): Command injection in imperva:securesphere (critical 9.8) - [CVE-2018-19645](https://insights.sbomify.com/CVE-2018-19645/): Solutions Business Manager (SBM) Authentication Bypass Issue in Version prior to 11.5 (critical 9.8) - [CVE-2018-19644](https://insights.sbomify.com/CVE-2018-19644/): Solutions Business Manager (SBM) reflected cross site script issue in version prior to 11.5 (medium 5.0) - [CVE-2018-19643](https://insights.sbomify.com/CVE-2018-19643/): Solutions Business Manager (SBM) Information Leakage issue in version prior to 11.5 (medium 4.7) - [CVE-2018-19642](https://insights.sbomify.com/CVE-2018-19642/): Solutions Business Manager (SBM) Denial of Service issue in version prior to 11.5 (medium 5.1) - [CVE-2018-19641](https://insights.sbomify.com/CVE-2018-19641/): Solutions Business Manager (SBM) Unauthenticated remote code execution issue in version prior to 11.5 (medium 6.1) - [CVE-2018-19640](https://insights.sbomify.com/CVE-2018-19640/): Code execution if run with command line switch -v (medium 4.4) - [CVE-2018-19639](https://insights.sbomify.com/CVE-2018-19639/): Code execution if run with command line switch -v (medium 6.7) - [CVE-2018-19638](https://insights.sbomify.com/CVE-2018-19638/): User can overwrite arbitrary log files in support tar (low 2.2) - [CVE-2018-19637](https://insights.sbomify.com/CVE-2018-19637/): Static temporary filename allows overwriting of files (low 2.8) - [CVE-2018-19636](https://insights.sbomify.com/CVE-2018-19636/): Local root exploit via inclusion of attacker controlled shell script (high 7.3) - [CVE-2018-19635](https://insights.sbomify.com/CVE-2018-19635/): Privilege escalation in CA Service Desk Manager (critical 9.8) - [CVE-2018-19634](https://insights.sbomify.com/CVE-2018-19634/): Missing authorization in CA Service Desk Manager (high 7.5) - [CVE-2018-19630](https://insights.sbomify.com/CVE-2018-19630/): Cross-site scripting in openwrt:lede (medium 6.1) - [CVE-2018-19629](https://insights.sbomify.com/CVE-2018-19629/): Denial of service in hyland:perceptive content server (high 7.5) - [CVE-2018-19628](https://insights.sbomify.com/CVE-2018-19628/): Denial of service in debian:debian linux (high 7.5) - [CVE-2018-19627](https://insights.sbomify.com/CVE-2018-19627/): Memory corruption in debian:debian linux (high 7.5) - [CVE-2018-19626](https://insights.sbomify.com/CVE-2018-19626/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2018-19625](https://insights.sbomify.com/CVE-2018-19625/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2018-19624](https://insights.sbomify.com/CVE-2018-19624/): Null dereference in debian:debian linux (medium 5.5) - [CVE-2018-19623](https://insights.sbomify.com/CVE-2018-19623/): Memory corruption in debian:debian linux (high 7.5) - [CVE-2018-19622](https://insights.sbomify.com/CVE-2018-19622/): Denial of service in debian:debian linux (high 7.5) - [CVE-2018-19621](https://insights.sbomify.com/CVE-2018-19621/): Showdoc CSRF Vulnerability (medium 6.5) - [CVE-2018-19620](https://insights.sbomify.com/CVE-2018-19620/): Showdoc Unauthenticated Access (medium 4.3) - [CVE-2018-1962](https://insights.sbomify.com/CVE-2018-1962/): Auth bypass in Security Identity Manager (medium 4.0) - [CVE-2018-19616](https://insights.sbomify.com/CVE-2018-19616/): Auth bypass in rockwellautomation:powermonitor 1000 firmware (high 8.1) - [CVE-2018-19615](https://insights.sbomify.com/CVE-2018-19615/): Cross-site scripting in rockwellautomation:powermonitor 1000 firmware (medium 6.1) - [CVE-2018-19614](https://insights.sbomify.com/CVE-2018-19614/): Cross-site scripting in westermo:dr-250 firmware (medium 6.1) - [CVE-2018-19613](https://insights.sbomify.com/CVE-2018-19613/): Cross-site request forgery in westermo:dr-250 firmware (medium 6.5) - [CVE-2018-19612](https://insights.sbomify.com/CVE-2018-19612/): File upload in westermo:dr-250 firmware (high 8.8) - [CVE-2018-1961](https://insights.sbomify.com/CVE-2018-1961/): Information disclosure in Emptoris Contract Management (medium 5.3) - [CVE-2018-19609](https://insights.sbomify.com/CVE-2018-19609/): Showdoc Forced Browsing (medium 6.5) - [CVE-2018-19608](https://insights.sbomify.com/CVE-2018-19608/): Weak cryptography in arm:mbed tls (medium 4.7) - [CVE-2018-19607](https://insights.sbomify.com/CVE-2018-19607/): Null dereference in exiv2:exiv2 (medium 6.5) - [CVE-2018-19601](https://insights.sbomify.com/CVE-2018-19601/): Server-side request forgery in rhymix:rhymix (critical 9.1) - [CVE-2018-19600](https://insights.sbomify.com/CVE-2018-19600/): Cross-site scripting in rhymix:rhymix (medium 4.8) - [CVE-2018-19599](https://insights.sbomify.com/CVE-2018-19599/): Cross-site scripting in monstra:monstra cms (medium 5.4) - [CVE-2018-19598](https://insights.sbomify.com/CVE-2018-19598/): Cross-site scripting in statamic:statamic (medium 4.8) - [CVE-2018-19597](https://insights.sbomify.com/CVE-2018-19597/): Cross-site scripting in cmsmadesimple:cms made simple (medium 4.8) - [CVE-2018-19596](https://insights.sbomify.com/CVE-2018-19596/): Cross-site scripting in zurmo:zurmo (medium 4.8) - [CVE-2018-19595](https://insights.sbomify.com/CVE-2018-19595/): Code injection in pbootcms:pbootcms (critical 9.8) - [CVE-2018-19592](https://insights.sbomify.com/CVE-2018-19592/): Misconfiguration in corsair:link (high 7.8) - [CVE-2018-19591](https://insights.sbomify.com/CVE-2018-19591/): Denial of service in fedoraproject:fedora (high 7.5) - [CVE-2018-1959](https://insights.sbomify.com/CVE-2018-1959/): Hardcoded credentials in Security Identity Manager (medium 5.1) - [CVE-2018-19589](https://insights.sbomify.com/CVE-2018-19589/): Missing authorization in utimaco:securityserver cse firmware (medium 6.5) - [CVE-2018-19588](https://insights.sbomify.com/CVE-2018-19588/): Missing authorization in alarm:adc-v522ir firmware (high 7.2) - [CVE-2018-19587](https://insights.sbomify.com/CVE-2018-19587/): Memory corruption in cesanta:mongoose (medium 6.5) - [CVE-2018-19586](https://insights.sbomify.com/CVE-2018-19586/): Path traversal in silverpeas:silverpeas (critical 9.9) - [CVE-2018-19585](https://insights.sbomify.com/CVE-2018-19585/): Other in gitlab:gitlab (high 7.5) - [CVE-2018-19584](https://insights.sbomify.com/CVE-2018-19584/): Missing authorization in gitlab:gitlab (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/73/