# Vulnerabilities published in 2018


- [CVE-2018-19583](https://insights.sbomify.com/CVE-2018-19583/): Information disclosure in gitlab:gitlab (medium 6.5)
- [CVE-2018-19582](https://insights.sbomify.com/CVE-2018-19582/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2018-19581](https://insights.sbomify.com/CVE-2018-19581/): Missing authorization in gitlab:gitlab (high 7.5)
- [CVE-2018-19580](https://insights.sbomify.com/CVE-2018-19580/): Business logic in gitlab:gitlab (medium 5.3)
- [CVE-2018-19579](https://insights.sbomify.com/CVE-2018-19579/): Cross-site scripting in gitlab:gitlab (medium 5.4)
- [CVE-2018-19578](https://insights.sbomify.com/CVE-2018-19578/): Missing authorization in gitlab:gitlab (medium 6.5)
- [CVE-2018-19577](https://insights.sbomify.com/CVE-2018-19577/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2018-19576](https://insights.sbomify.com/CVE-2018-19576/): Missing authorization in gitlab:gitlab (high 8.1)
- [CVE-2018-19575](https://insights.sbomify.com/CVE-2018-19575/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2018-19574](https://insights.sbomify.com/CVE-2018-19574/): Cross-site scripting in gitlab:gitlab (medium 5.4)
- [CVE-2018-19573](https://insights.sbomify.com/CVE-2018-19573/): Cross-site scripting in gitlab:gitlab (medium 5.4)
- [CVE-2018-19572](https://insights.sbomify.com/CVE-2018-19572/): Race condition in gitlab:gitlab (medium 5.9)
- [CVE-2018-19571](https://insights.sbomify.com/CVE-2018-19571/): Server-side request forgery in gitlab:gitlab (high 7.7)
- [CVE-2018-19570](https://insights.sbomify.com/CVE-2018-19570/): Cross-site scripting in gitlab:gitlab (medium 5.4)
- [CVE-2018-1957](https://insights.sbomify.com/CVE-2018-1957/): Information disclosure in WebSphere Application Server (medium 4.0)
- [CVE-2018-19569](https://insights.sbomify.com/CVE-2018-19569/): Missing authorization in gitlab:gitlab (high 8.8)
- [CVE-2018-19568](https://insights.sbomify.com/CVE-2018-19568/): Denial of service in dcraw project:dcraw (medium 5.5)
- [CVE-2018-19567](https://insights.sbomify.com/CVE-2018-19567/): Denial of service in dcraw project:dcraw (medium 5.5)
- [CVE-2018-19566](https://insights.sbomify.com/CVE-2018-19566/): Memory corruption in dcraw project:dcraw (high 7.1)
- [CVE-2018-19565](https://insights.sbomify.com/CVE-2018-19565/): Memory corruption in dcraw project:dcraw (high 7.1)
- [CVE-2018-19564](https://insights.sbomify.com/CVE-2018-19564/): Cross-site scripting in goldplugins:easy testimonials (medium 6.1)
- [CVE-2018-19562](https://insights.sbomify.com/CVE-2018-19562/): File upload in phpok:phpok (high 8.8)
- [CVE-2018-19561](https://insights.sbomify.com/CVE-2018-19561/): Cross-site request forgery in sikcms:sikcms (high 8.8)
- [CVE-2018-19560](https://insights.sbomify.com/CVE-2018-19560/): Cross-site request forgery in bagesoft:bagecms (high 8.8)
- [CVE-2018-1956](https://insights.sbomify.com/CVE-2018-1956/): Misconfiguration in Security Identity Manager (medium 5.9)
- [CVE-2018-19559](https://insights.sbomify.com/CVE-2018-19559/): SQL injection in cuppacms:cuppacms (critical 9.8)
- [CVE-2018-19558](https://insights.sbomify.com/CVE-2018-19558/): SQL injection in arcms project:arcms (critical 9.8)
- [CVE-2018-19557](https://insights.sbomify.com/CVE-2018-19557/): Missing authorization in arcms project:arcms (critical 9.8)
- [CVE-2018-19556](https://insights.sbomify.com/CVE-2018-19556/): Other in zblogcn:z-blogphp (medium 4.3)
- [CVE-2018-19555](https://insights.sbomify.com/CVE-2018-19555/): Cross-site request forgery in tp4a:teleport (high 8.8)
- [CVE-2018-19554](https://insights.sbomify.com/CVE-2018-19554/): Cross-site scripting in dotcms:dotcms (medium 5.4)
- [CVE-2018-19553](https://insights.sbomify.com/CVE-2018-19553/): SQL injection in interspire:email marketer (high 8.8)
- [CVE-2018-19552](https://insights.sbomify.com/CVE-2018-19552/): SQL injection in interspire:email marketer (high 8.8)
- [CVE-2018-19551](https://insights.sbomify.com/CVE-2018-19551/): SQL injection in interspire:email marketer (high 8.8)
- [CVE-2018-19550](https://insights.sbomify.com/CVE-2018-19550/): File upload in interspire:email marketer (high 8.8)
- [CVE-2018-19549](https://insights.sbomify.com/CVE-2018-19549/): SQL injection in interspire:email marketer (high 8.8)
- [CVE-2018-19548](https://insights.sbomify.com/CVE-2018-19548/): Auth bypass in rudrasoftech:edusec (critical 9.8)
- [CVE-2018-19547](https://insights.sbomify.com/CVE-2018-19547/): Cross-site scripting in jtbc:jtbc php (medium 6.1)
- [CVE-2018-19546](https://insights.sbomify.com/CVE-2018-19546/): Cross-site request forgery in jtbc:jtbc php (high 8.8)
- [CVE-2018-19545](https://insights.sbomify.com/CVE-2018-19545/): Cross-site request forgery in jeecms:jeecms (high 8.8)
- [CVE-2018-19544](https://insights.sbomify.com/CVE-2018-19544/): Cross-site request forgery in jeecms:jeecms (medium 6.5)
- [CVE-2018-19543](https://insights.sbomify.com/CVE-2018-19543/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2018-19542](https://insights.sbomify.com/CVE-2018-19542/): Null dereference in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-19541](https://insights.sbomify.com/CVE-2018-19541/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2018-19540](https://insights.sbomify.com/CVE-2018-19540/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2018-19539](https://insights.sbomify.com/CVE-2018-19539/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2018-19537](https://insights.sbomify.com/CVE-2018-19537/): Command injection in tp-link:archer c5 firmware (high 7.2)
- [CVE-2018-19535](https://insights.sbomify.com/CVE-2018-19535/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-19532](https://insights.sbomify.com/CVE-2018-19532/): Null dereference in podofo project:podofo (high 8.8)
- [CVE-2018-19531](https://insights.sbomify.com/CVE-2018-19531/): Deserialization in httl project:httl (critical 9.8)
- [CVE-2018-19530](https://insights.sbomify.com/CVE-2018-19530/): Deserialization in httl project:httl (critical 9.8)
- [CVE-2018-19528](https://insights.sbomify.com/CVE-2018-19528/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2018-19527](https://insights.sbomify.com/CVE-2018-19527/): Cross-site scripting in i4:ai si assistant (medium 6.1)
- [CVE-2018-19525](https://insights.sbomify.com/CVE-2018-19525/): Cross-site request forgery in systrome:cumilon isg-600c firmware (medium 6.1)
- [CVE-2018-19524](https://insights.sbomify.com/CVE-2018-19524/): Memory corruption in skyworthdigital:dt721-cb firmware (critical 9.8)
- [CVE-2018-19523](https://insights.sbomify.com/CVE-2018-19523/): Memory corruption in driveagent:driveagent (medium 5.5)
- [CVE-2018-19522](https://insights.sbomify.com/CVE-2018-19522/): Privilege escalation in driveragent:driveragent (medium 5.5)
- [CVE-2018-19520](https://insights.sbomify.com/CVE-2018-19520/): Code injection in php:php (high 8.8)
- [CVE-2018-1952](https://insights.sbomify.com/CVE-2018-1952/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2018-19519](https://insights.sbomify.com/CVE-2018-19519/): Memory corruption in tcpdump:tcpdump (medium 5.5)
- [CVE-2018-19518](https://insights.sbomify.com/CVE-2018-19518/): Command injection in canonical:ubuntu linux (high 7.5)
- [CVE-2018-19517](https://insights.sbomify.com/CVE-2018-19517/): Memory corruption in sysstat project:sysstat (medium 5.5)
- [CVE-2018-19516](https://insights.sbomify.com/CVE-2018-19516/): Other in kde:kde applications (medium 5.3)
- [CVE-2018-19515](https://insights.sbomify.com/CVE-2018-19515/): Missing authorization in ens:webgalamb (critical 9.8)
- [CVE-2018-19514](https://insights.sbomify.com/CVE-2018-19514/): Code injection in ens:webgalamb (critical 9.8)
- [CVE-2018-19513](https://insights.sbomify.com/CVE-2018-19513/): Information disclosure in ens:webgalamb (high 7.5)
- [CVE-2018-19512](https://insights.sbomify.com/CVE-2018-19512/): Path traversal in ens:webgalamb (high 7.2)
- [CVE-2018-19511](https://insights.sbomify.com/CVE-2018-19511/): Cross-site request forgery in ens:webgalamb (medium 6.5)
- [CVE-2018-19510](https://insights.sbomify.com/CVE-2018-19510/): SQL injection in ens:webgalamb (critical 9.8)
- [CVE-2018-1951](https://insights.sbomify.com/CVE-2018-1951/): Cross-site scripting in Rational Publishing Engine (medium 5.4)
- [CVE-2018-19509](https://insights.sbomify.com/CVE-2018-19509/): Cross-site scripting in ens:webgalamb (medium 6.1)
- [CVE-2018-19508](https://insights.sbomify.com/CVE-2018-19508/): Cross-site scripting in cmsimple:cmsimple (medium 4.8)
- [CVE-2018-19507](https://insights.sbomify.com/CVE-2018-19507/): Cross-site scripting in cmsimple:cmsimple (medium 4.8)
- [CVE-2018-19506](https://insights.sbomify.com/CVE-2018-19506/): Cross-site scripting in zurmo:zurmo (medium 4.8)
- [CVE-2018-19505](https://insights.sbomify.com/CVE-2018-19505/): Auth bypass in bmc:remedy action request system server (medium 6.5)
- [CVE-2018-19504](https://insights.sbomify.com/CVE-2018-19504/): Null dereference in audiocoding:freeware advanced audio decoder 2 (high 7.8)
- [CVE-2018-19503](https://insights.sbomify.com/CVE-2018-19503/): Memory corruption in audiocoding:freeware advanced audio decoder 2 (high 7.8)
- [CVE-2018-19502](https://insights.sbomify.com/CVE-2018-19502/): Memory corruption in audiocoding:freeware advanced audio decoder 2 (high 7.8)
- [CVE-2018-1950](https://insights.sbomify.com/CVE-2018-1950/): Information disclosure in Security Identity Governance and Intelligence (medium 4.3)
- [CVE-2018-19499](https://insights.sbomify.com/CVE-2018-19499/): Deserialization in vanillaforums:vanilla (high 7.2)
- [CVE-2018-19498](https://insights.sbomify.com/CVE-2018-19498/): Cross-site scripting in simplenia:pages (medium 6.1)
- [CVE-2018-19497](https://insights.sbomify.com/CVE-2018-19497/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2018-19496](https://insights.sbomify.com/CVE-2018-19496/): Missing authorization in gitlab:gitlab (medium 6.5)
- [CVE-2018-19495](https://insights.sbomify.com/CVE-2018-19495/): Server-side request forgery in gitlab:gitlab (medium 6.5)
- [CVE-2018-19494](https://insights.sbomify.com/CVE-2018-19494/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2018-19493](https://insights.sbomify.com/CVE-2018-19493/): Cross-site scripting in gitlab:gitlab (medium 6.1)
- [CVE-2018-19492](https://insights.sbomify.com/CVE-2018-19492/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2018-19491](https://insights.sbomify.com/CVE-2018-19491/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2018-19490](https://insights.sbomify.com/CVE-2018-19490/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2018-1949](https://insights.sbomify.com/CVE-2018-1949/): Information disclosure in Security Identity Governance and Intelligence (medium 4.3)
- [CVE-2018-19489](https://insights.sbomify.com/CVE-2018-19489/): Race condition in canonical:ubuntu linux (medium 4.7)
- [CVE-2018-19488](https://insights.sbomify.com/CVE-2018-19488/): Auth bypass in wp-jobhunt project:wp-jobhunt (critical 9.8)
- [CVE-2018-19487](https://insights.sbomify.com/CVE-2018-19487/): Information disclosure in wp-jobhunt project:wp-jobhunt (high 7.5)
- [CVE-2018-19486](https://insights.sbomify.com/CVE-2018-19486/): Command injection in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-1948](https://insights.sbomify.com/CVE-2018-1948/): Misconfiguration in Security Identity Governance and Intelligence (medium 4.3)
- [CVE-2018-19478](https://insights.sbomify.com/CVE-2018-19478/): Denial of service in artifex:ghostscript (medium 5.5)
- [CVE-2018-19477](https://insights.sbomify.com/CVE-2018-19477/): Security feature bypass in artifex:ghostscript (high 7.8)
- [CVE-2018-19476](https://insights.sbomify.com/CVE-2018-19476/): Security feature bypass in artifex:ghostscript (high 7.8)
- [CVE-2018-19475](https://insights.sbomify.com/CVE-2018-19475/): Memory corruption in artifex:ghostscript (high 7.8)
- [CVE-2018-1947](https://insights.sbomify.com/CVE-2018-1947/): Cross-site scripting in Security Identity Governance and Intelligence (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/74/