Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 75 of 163.
- CVE-2018-19469 Cross-site scripting in articlecms project:articlecms
- CVE-2018-19468 SQL injection in hucart:hucart
- CVE-2018-19466 Information disclosure in portainer:portainer
- CVE-2018-19465 Cross-site scripting in maccms:maccms
- CVE-2018-19464 Cross-site scripting in dismall:discuz\!
- CVE-2018-19463 File upload in zblogcn:z-blogphp
- CVE-2018-19462 SQL injection in phome:empirecms
- CVE-2018-19461 Cross-site scripting in phome:empirecms
- CVE-2018-1946 Weak cryptography in Security Identity Governance and Intelligence
- CVE-2018-19459 Memory corruption in armcode:adult filter
- CVE-2018-19458 Unauthenticated File Read in PHP Proxy
- CVE-2018-19457 File upload in logicspice:faq script
- CVE-2018-19456 Information disclosure in opensuse:leap
- CVE-2018-19453 File upload in kentico:xperience
- CVE-2018-19452 Use after free in foxitsoftware:foxit pdf sdk activex
- CVE-2018-19451 Command injection in foxitsoftware:foxit pdf sdk activex
- CVE-2018-19450 Command injection in foxitsoftware:foxit pdf sdk activex
- CVE-2018-1945 Other in Security Identity Governance and Intelligence
- CVE-2018-19449 Memory corruption in foxitsoftware:foxit pdf sdk activex
- CVE-2018-19448 Memory corruption in foxitsoftware:foxit pdf sdk activex
- CVE-2018-19447 Memory corruption in foxitsoftware:foxit pdf sdk activex
- CVE-2018-19446 Memory corruption in foxitsoftware:foxit pdf sdk activex
- CVE-2018-19445 Command injection in foxitsoftware:foxit pdf sdk activex
- CVE-2018-19444 Use after free in foxitsoftware:foxit pdf sdk activex
- CVE-2018-19443 Session Fixation in Tryton
- CVE-2018-19442 Memory corruption in neatorobotics:botvac connected firmware
- CVE-2018-19441 Weak cryptography in neatorobotics:botvac connected firmware
- CVE-2018-19440 Information disclosure in trustedfirmware:trusted firmware-a
- CVE-2018-1944 Hardcoded credentials in Security Identity Governance and Intelligence
- CVE-2018-19439 Cross-site scripting in oracle:secure global desktop
- CVE-2018-19437 Auth bypass in ucms project:ucms
- CVE-2018-19436 SQL injection in weberp:weberp
- CVE-2018-19435 SQL injection in weberp:weberp
- CVE-2018-19434 SQL injection in weberp:weberp
- CVE-2018-19433 Cross-site scripting in showdoc:showdoc
- CVE-2018-19432 Null dereference in debian:debian linux
- CVE-2018-1943 Other in Cloud Private
- CVE-2018-19424 File upload in clippercms:clippercms
- CVE-2018-19423 File upload in codiad:codiad
- CVE-2018-19422 Subrion CMS RCE Vulnerability
- CVE-2018-19421 File upload in get-simple:getsimple cms
- CVE-2018-19420 File upload in get-simple:getsimple cms
- CVE-2018-19418 Command injection in foxitsoftware:pdf activex
- CVE-2018-19417 Memory corruption in contiki-ng:contiki-ng
- CVE-2018-19416 Memory corruption in sysstat project:sysstat
- CVE-2018-19415 SQL injection in plikli:plikli cms
- CVE-2018-19414 Cross-site scripting in plikli:plikli cms
- CVE-2018-19413 Exposure of Sensitive Information to an Unauthorized Actor in SonarSource SonarQube API
- CVE-2018-19411 Privilege escalation in paessler:prtg network monitor
- CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion
- CVE-2018-1941 Privilege escalation in Campaign
- CVE-2018-19409 Security feature bypass in artifex:ghostscript
- CVE-2018-19407 Null dereference in canonical:ubuntu linux
- CVE-2018-19406 Null dereference in linux:linux kernel
- CVE-2018-19404 Code injection in yxcms:yxcms
- CVE-2018-19396 Deserialization in php:php
- CVE-2018-19395 Null dereference in php:php
- CVE-2018-19394 Cross-site scripting in cobham:satcom sailor 800 firmware
- CVE-2018-19393 Misconfiguration in cobham:satcom sailor 800 firmware
- CVE-2018-19392 Auth bypass in cobham:satcom sailor 250 firmware
- CVE-2018-19391 Cross-site scripting in cobham:satcom sailor 250 firmware
- CVE-2018-19390 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-1939 Open redirect in Cloud Private
- CVE-2018-19389 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-19388 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-19386 Cross-site scripting in solarwinds:database performance analyzer
- CVE-2018-1938 Information disclosure in Cloud Private
- CVE-2018-19376 Cross-site request forgery in greencms:greencms
- CVE-2018-19374 Privilege escalation in zohocorp:manageengine admanager plus
- CVE-2018-19371 XML external entity in sdl:web content manager
- CVE-2018-19370 Race condition in yoast:yoast seo
- CVE-2018-1937 Information disclosure in Cloud Private
- CVE-2018-19367 Auth bypass in portainer:portainer
- CVE-2018-19365 Path traversal in wowza:streaming engine
- CVE-2018-19364 Use after free in canonical:ubuntu linux
- CVE-2018-19362 com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
- CVE-2018-19361 Deserialization of Untrusted Data in jackson-databind
- CVE-2018-19360 Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
- CVE-2018-1936 Memory corruption in DB2
- CVE-2018-19359 Missing authorization in gitlab:gitlab
- CVE-2018-19358 Information disclosure in gnome:gnome-keyring
- CVE-2018-19357 Memory corruption in xmplay:xmplay
- CVE-2018-19355 File upload in mypresta:customer files upload
- CVE-2018-19353 Memory corruption in ansilove:libansilove
- CVE-2018-19352 Jupyter Notebook XSS via directory name
- CVE-2018-19351 Jupyter Notebook XSS via untrusted notebooks
- CVE-2018-19350 Cross-site scripting in seacms:seacms
- CVE-2018-1935 Information disclosure in Connections
- CVE-2018-19349 SQL injection in seacms:seacms
- CVE-2018-19348 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-19347 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-19346 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-19345 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-19344 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-19343 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-19342 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-19341 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-19340 Cross-site scripting in guriddo:form php
- CVE-2018-1934 Cross-site request forgery in Cognos Business Intelligence
- CVE-2018-19335 Cross-site request forgery in google:monorail