Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 74 of 163.
- CVE-2018-19583 Information disclosure in gitlab:gitlab
- CVE-2018-19582 Missing authorization in gitlab:gitlab
- CVE-2018-19581 Missing authorization in gitlab:gitlab
- CVE-2018-19580 Business logic in gitlab:gitlab
- CVE-2018-19579 Cross-site scripting in gitlab:gitlab
- CVE-2018-19578 Missing authorization in gitlab:gitlab
- CVE-2018-19577 Missing authorization in gitlab:gitlab
- CVE-2018-19576 Missing authorization in gitlab:gitlab
- CVE-2018-19575 Missing authorization in gitlab:gitlab
- CVE-2018-19574 Cross-site scripting in gitlab:gitlab
- CVE-2018-19573 Cross-site scripting in gitlab:gitlab
- CVE-2018-19572 Race condition in gitlab:gitlab
- CVE-2018-19571 Server-side request forgery in gitlab:gitlab
- CVE-2018-19570 Cross-site scripting in gitlab:gitlab
- CVE-2018-1957 Information disclosure in WebSphere Application Server
- CVE-2018-19569 Missing authorization in gitlab:gitlab
- CVE-2018-19568 Denial of service in dcraw project:dcraw
- CVE-2018-19567 Denial of service in dcraw project:dcraw
- CVE-2018-19566 Memory corruption in dcraw project:dcraw
- CVE-2018-19565 Memory corruption in dcraw project:dcraw
- CVE-2018-19564 Cross-site scripting in goldplugins:easy testimonials
- CVE-2018-19562 File upload in phpok:phpok
- CVE-2018-19561 Cross-site request forgery in sikcms:sikcms
- CVE-2018-19560 Cross-site request forgery in bagesoft:bagecms
- CVE-2018-1956 Misconfiguration in Security Identity Manager
- CVE-2018-19559 SQL injection in cuppacms:cuppacms
- CVE-2018-19558 SQL injection in arcms project:arcms
- CVE-2018-19557 Missing authorization in arcms project:arcms
- CVE-2018-19556 Other in zblogcn:z-blogphp
- CVE-2018-19555 Cross-site request forgery in tp4a:teleport
- CVE-2018-19554 Cross-site scripting in dotcms:dotcms
- CVE-2018-19553 SQL injection in interspire:email marketer
- CVE-2018-19552 SQL injection in interspire:email marketer
- CVE-2018-19551 SQL injection in interspire:email marketer
- CVE-2018-19550 File upload in interspire:email marketer
- CVE-2018-19549 SQL injection in interspire:email marketer
- CVE-2018-19548 Auth bypass in rudrasoftech:edusec
- CVE-2018-19547 Cross-site scripting in jtbc:jtbc php
- CVE-2018-19546 Cross-site request forgery in jtbc:jtbc php
- CVE-2018-19545 Cross-site request forgery in jeecms:jeecms
- CVE-2018-19544 Cross-site request forgery in jeecms:jeecms
- CVE-2018-19543 Memory corruption in canonical:ubuntu linux
- CVE-2018-19542 Null dereference in canonical:ubuntu linux
- CVE-2018-19541 Memory corruption in canonical:ubuntu linux
- CVE-2018-19540 Memory corruption in debian:debian linux
- CVE-2018-19539 Denial of service in debian:debian linux
- CVE-2018-19537 Command injection in tp-link:archer c5 firmware
- CVE-2018-19535 Memory corruption in canonical:ubuntu linux
- CVE-2018-19532 Null dereference in podofo project:podofo
- CVE-2018-19531 Deserialization in httl project:httl
- CVE-2018-19530 Deserialization in httl project:httl
- CVE-2018-19528 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2018-19527 Cross-site scripting in i4:ai si assistant
- CVE-2018-19525 Cross-site request forgery in systrome:cumilon isg-600c firmware
- CVE-2018-19524 Memory corruption in skyworthdigital:dt721-cb firmware
- CVE-2018-19523 Memory corruption in driveagent:driveagent
- CVE-2018-19522 Privilege escalation in driveragent:driveragent
- CVE-2018-19520 Code injection in php:php
- CVE-2018-1952 Cross-site scripting in Rational Collaborative Lifecycle Management
- CVE-2018-19519 Memory corruption in tcpdump:tcpdump
- CVE-2018-19518 Command injection in canonical:ubuntu linux
- CVE-2018-19517 Memory corruption in sysstat project:sysstat
- CVE-2018-19516 Other in kde:kde applications
- CVE-2018-19515 Missing authorization in ens:webgalamb
- CVE-2018-19514 Code injection in ens:webgalamb
- CVE-2018-19513 Information disclosure in ens:webgalamb
- CVE-2018-19512 Path traversal in ens:webgalamb
- CVE-2018-19511 Cross-site request forgery in ens:webgalamb
- CVE-2018-19510 SQL injection in ens:webgalamb
- CVE-2018-1951 Cross-site scripting in Rational Publishing Engine
- CVE-2018-19509 Cross-site scripting in ens:webgalamb
- CVE-2018-19508 Cross-site scripting in cmsimple:cmsimple
- CVE-2018-19507 Cross-site scripting in cmsimple:cmsimple
- CVE-2018-19506 Cross-site scripting in zurmo:zurmo
- CVE-2018-19505 Auth bypass in bmc:remedy action request system server
- CVE-2018-19504 Null dereference in audiocoding:freeware advanced audio decoder 2
- CVE-2018-19503 Memory corruption in audiocoding:freeware advanced audio decoder 2
- CVE-2018-19502 Memory corruption in audiocoding:freeware advanced audio decoder 2
- CVE-2018-1950 Information disclosure in Security Identity Governance and Intelligence
- CVE-2018-19499 Deserialization in vanillaforums:vanilla
- CVE-2018-19498 Cross-site scripting in simplenia:pages
- CVE-2018-19497 Memory corruption in debian:debian linux
- CVE-2018-19496 Missing authorization in gitlab:gitlab
- CVE-2018-19495 Server-side request forgery in gitlab:gitlab
- CVE-2018-19494 Missing authorization in gitlab:gitlab
- CVE-2018-19493 Cross-site scripting in gitlab:gitlab
- CVE-2018-19492 Memory corruption in debian:debian linux
- CVE-2018-19491 Memory corruption in debian:debian linux
- CVE-2018-19490 Memory corruption in debian:debian linux
- CVE-2018-1949 Information disclosure in Security Identity Governance and Intelligence
- CVE-2018-19489 Race condition in canonical:ubuntu linux
- CVE-2018-19488 Auth bypass in wp-jobhunt project:wp-jobhunt
- CVE-2018-19487 Information disclosure in wp-jobhunt project:wp-jobhunt
- CVE-2018-19486 Command injection in canonical:ubuntu linux
- CVE-2018-1948 Misconfiguration in Security Identity Governance and Intelligence
- CVE-2018-19478 Denial of service in artifex:ghostscript
- CVE-2018-19477 Security feature bypass in artifex:ghostscript
- CVE-2018-19476 Security feature bypass in artifex:ghostscript
- CVE-2018-19475 Memory corruption in artifex:ghostscript
- CVE-2018-1947 Cross-site scripting in Security Identity Governance and Intelligence