# Vulnerabilities published in 2018 - [CVE-2018-19469](https://insights.sbomify.com/CVE-2018-19469/): Cross-site scripting in articlecms project:articlecms (medium 6.1) - [CVE-2018-19468](https://insights.sbomify.com/CVE-2018-19468/): SQL injection in hucart:hucart (critical 9.8) - [CVE-2018-19466](https://insights.sbomify.com/CVE-2018-19466/): Information disclosure in portainer:portainer (critical 9.8) - [CVE-2018-19465](https://insights.sbomify.com/CVE-2018-19465/): Cross-site scripting in maccms:maccms (medium 6.1) - [CVE-2018-19464](https://insights.sbomify.com/CVE-2018-19464/): Cross-site scripting in dismall:discuz\! (medium 4.8) - [CVE-2018-19463](https://insights.sbomify.com/CVE-2018-19463/): File upload in zblogcn:z-blogphp (high 8.8) - [CVE-2018-19462](https://insights.sbomify.com/CVE-2018-19462/): SQL injection in phome:empirecms (high 7.2) - [CVE-2018-19461](https://insights.sbomify.com/CVE-2018-19461/): Cross-site scripting in phome:empirecms (medium 4.8) - [CVE-2018-1946](https://insights.sbomify.com/CVE-2018-1946/): Weak cryptography in Security Identity Governance and Intelligence (medium 5.9) - [CVE-2018-19459](https://insights.sbomify.com/CVE-2018-19459/): Memory corruption in armcode:adult filter (high 7.8) - [CVE-2018-19458](https://insights.sbomify.com/CVE-2018-19458/): Unauthenticated File Read in PHP Proxy (high 7.5) - [CVE-2018-19457](https://insights.sbomify.com/CVE-2018-19457/): File upload in logicspice:faq script (high 7.2) - [CVE-2018-19456](https://insights.sbomify.com/CVE-2018-19456/): Information disclosure in opensuse:leap (high 7.5) - [CVE-2018-19453](https://insights.sbomify.com/CVE-2018-19453/): File upload in kentico:xperience (high 8.8) - [CVE-2018-19452](https://insights.sbomify.com/CVE-2018-19452/): Use after free in foxitsoftware:foxit pdf sdk activex (high 7.8) - [CVE-2018-19451](https://insights.sbomify.com/CVE-2018-19451/): Command injection in foxitsoftware:foxit pdf sdk activex (high 7.8) - [CVE-2018-19450](https://insights.sbomify.com/CVE-2018-19450/): Command injection in foxitsoftware:foxit pdf sdk activex (high 7.8) - [CVE-2018-1945](https://insights.sbomify.com/CVE-2018-1945/): Other in Security Identity Governance and Intelligence (medium 6.1) - [CVE-2018-19449](https://insights.sbomify.com/CVE-2018-19449/): Memory corruption in foxitsoftware:foxit pdf sdk activex (high 7.8) - [CVE-2018-19448](https://insights.sbomify.com/CVE-2018-19448/): Memory corruption in foxitsoftware:foxit pdf sdk activex (high 7.8) - [CVE-2018-19447](https://insights.sbomify.com/CVE-2018-19447/): Memory corruption in foxitsoftware:foxit pdf sdk activex (high 7.8) - [CVE-2018-19446](https://insights.sbomify.com/CVE-2018-19446/): Memory corruption in foxitsoftware:foxit pdf sdk activex (high 7.8) - [CVE-2018-19445](https://insights.sbomify.com/CVE-2018-19445/): Command injection in foxitsoftware:foxit pdf sdk activex (high 7.8) - [CVE-2018-19444](https://insights.sbomify.com/CVE-2018-19444/): Use after free in foxitsoftware:foxit pdf sdk activex (high 7.8) - [CVE-2018-19443](https://insights.sbomify.com/CVE-2018-19443/): Session Fixation in Tryton (medium 5.9) - [CVE-2018-19442](https://insights.sbomify.com/CVE-2018-19442/): Memory corruption in neatorobotics:botvac connected firmware (critical 9.8) - [CVE-2018-19441](https://insights.sbomify.com/CVE-2018-19441/): Weak cryptography in neatorobotics:botvac connected firmware (medium 4.7) - [CVE-2018-19440](https://insights.sbomify.com/CVE-2018-19440/): Information disclosure in trustedfirmware:trusted firmware-a (medium 5.3) - [CVE-2018-1944](https://insights.sbomify.com/CVE-2018-1944/): Hardcoded credentials in Security Identity Governance and Intelligence (medium 5.1) - [CVE-2018-19439](https://insights.sbomify.com/CVE-2018-19439/): Cross-site scripting in oracle:secure global desktop (medium 6.1) - [CVE-2018-19437](https://insights.sbomify.com/CVE-2018-19437/): Auth bypass in ucms project:ucms (high 8.8) - [CVE-2018-19436](https://insights.sbomify.com/CVE-2018-19436/): SQL injection in weberp:weberp (high 7.2) - [CVE-2018-19435](https://insights.sbomify.com/CVE-2018-19435/): SQL injection in weberp:weberp (high 7.2) - [CVE-2018-19434](https://insights.sbomify.com/CVE-2018-19434/): SQL injection in weberp:weberp (high 7.2) - [CVE-2018-19433](https://insights.sbomify.com/CVE-2018-19433/): Cross-site scripting in showdoc:showdoc (medium 6.1) - [CVE-2018-19432](https://insights.sbomify.com/CVE-2018-19432/): Null dereference in debian:debian linux (medium 6.5) - [CVE-2018-1943](https://insights.sbomify.com/CVE-2018-1943/): Other in Cloud Private (medium 5.4) - [CVE-2018-19424](https://insights.sbomify.com/CVE-2018-19424/): File upload in clippercms:clippercms (high 7.2) - [CVE-2018-19423](https://insights.sbomify.com/CVE-2018-19423/): File upload in codiad:codiad (high 7.2) - [CVE-2018-19422](https://insights.sbomify.com/CVE-2018-19422/): Subrion CMS RCE Vulnerability (high 7.2) - [CVE-2018-19421](https://insights.sbomify.com/CVE-2018-19421/): File upload in get-simple:getsimple cms (low 3.8) - [CVE-2018-19420](https://insights.sbomify.com/CVE-2018-19420/): File upload in get-simple:getsimple cms (low 3.8) - [CVE-2018-19418](https://insights.sbomify.com/CVE-2018-19418/): Command injection in foxitsoftware:pdf activex (high 7.8) - [CVE-2018-19417](https://insights.sbomify.com/CVE-2018-19417/): Memory corruption in contiki-ng:contiki-ng (critical 10.0) - [CVE-2018-19416](https://insights.sbomify.com/CVE-2018-19416/): Memory corruption in sysstat project:sysstat (high 7.8) - [CVE-2018-19415](https://insights.sbomify.com/CVE-2018-19415/): SQL injection in plikli:plikli cms (critical 9.8) - [CVE-2018-19414](https://insights.sbomify.com/CVE-2018-19414/): Cross-site scripting in plikli:plikli cms (medium 6.1) - [CVE-2018-19413](https://insights.sbomify.com/CVE-2018-19413/): Exposure of Sensitive Information to an Unauthorized Actor in SonarSource SonarQube API (medium 4.3) - [CVE-2018-19411](https://insights.sbomify.com/CVE-2018-19411/): Privilege escalation in paessler:prtg network monitor (high 8.8) - [CVE-2018-19410](https://insights.sbomify.com/CVE-2018-19410/): Paessler PRTG Network Monitor Local File Inclusion (critical 9.8, exploited in the wild) - [CVE-2018-1941](https://insights.sbomify.com/CVE-2018-1941/): Privilege escalation in Campaign (high 8.4) - [CVE-2018-19409](https://insights.sbomify.com/CVE-2018-19409/): Security feature bypass in artifex:ghostscript (critical 9.8) - [CVE-2018-19407](https://insights.sbomify.com/CVE-2018-19407/): Null dereference in canonical:ubuntu linux (medium 5.5) - [CVE-2018-19406](https://insights.sbomify.com/CVE-2018-19406/): Null dereference in linux:linux kernel (medium 5.5) - [CVE-2018-19404](https://insights.sbomify.com/CVE-2018-19404/): Code injection in yxcms:yxcms (high 7.2) - [CVE-2018-19396](https://insights.sbomify.com/CVE-2018-19396/): Deserialization in php:php (high 7.5) - [CVE-2018-19395](https://insights.sbomify.com/CVE-2018-19395/): Null dereference in php:php (high 7.5) - [CVE-2018-19394](https://insights.sbomify.com/CVE-2018-19394/): Cross-site scripting in cobham:satcom sailor 800 firmware (medium 4.8) - [CVE-2018-19393](https://insights.sbomify.com/CVE-2018-19393/): Misconfiguration in cobham:satcom sailor 800 firmware (high 7.5) - [CVE-2018-19392](https://insights.sbomify.com/CVE-2018-19392/): Auth bypass in cobham:satcom sailor 250 firmware (critical 9.8) - [CVE-2018-19391](https://insights.sbomify.com/CVE-2018-19391/): Cross-site scripting in cobham:satcom sailor 250 firmware (medium 6.1) - [CVE-2018-19390](https://insights.sbomify.com/CVE-2018-19390/): Memory corruption in foxitsoftware:foxit reader (medium 5.5) - [CVE-2018-1939](https://insights.sbomify.com/CVE-2018-1939/): Open redirect in Cloud Private (medium 6.8) - [CVE-2018-19389](https://insights.sbomify.com/CVE-2018-19389/): Memory corruption in foxitsoftware:foxit reader (medium 5.5) - [CVE-2018-19388](https://insights.sbomify.com/CVE-2018-19388/): Memory corruption in foxitsoftware:foxit reader (medium 5.5) - [CVE-2018-19386](https://insights.sbomify.com/CVE-2018-19386/): Cross-site scripting in solarwinds:database performance analyzer (medium 6.1) - [CVE-2018-1938](https://insights.sbomify.com/CVE-2018-1938/): Information disclosure in Cloud Private (medium 4.4) - [CVE-2018-19376](https://insights.sbomify.com/CVE-2018-19376/): Cross-site request forgery in greencms:greencms (medium 6.5) - [CVE-2018-19374](https://insights.sbomify.com/CVE-2018-19374/): Privilege escalation in zohocorp:manageengine admanager plus (high 7.0) - [CVE-2018-19371](https://insights.sbomify.com/CVE-2018-19371/): XML external entity in sdl:web content manager (medium 6.5) - [CVE-2018-19370](https://insights.sbomify.com/CVE-2018-19370/): Race condition in yoast:yoast seo (medium 6.6) - [CVE-2018-1937](https://insights.sbomify.com/CVE-2018-1937/): Information disclosure in Cloud Private (medium 4.4) - [CVE-2018-19367](https://insights.sbomify.com/CVE-2018-19367/): Auth bypass in portainer:portainer (critical 9.8) - [CVE-2018-19365](https://insights.sbomify.com/CVE-2018-19365/): Path traversal in wowza:streaming engine (critical 9.1) - [CVE-2018-19364](https://insights.sbomify.com/CVE-2018-19364/): Use after free in canonical:ubuntu linux (medium 5.5) - [CVE-2018-19362](https://insights.sbomify.com/CVE-2018-19362/): com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data (critical 9.8) - [CVE-2018-19361](https://insights.sbomify.com/CVE-2018-19361/): Deserialization of Untrusted Data in jackson-databind (critical 9.8) - [CVE-2018-19360](https://insights.sbomify.com/CVE-2018-19360/): Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization (critical 9.8) - [CVE-2018-1936](https://insights.sbomify.com/CVE-2018-1936/): Memory corruption in DB2 (high 8.4) - [CVE-2018-19359](https://insights.sbomify.com/CVE-2018-19359/): Missing authorization in gitlab:gitlab (high 8.8) - [CVE-2018-19358](https://insights.sbomify.com/CVE-2018-19358/): Information disclosure in gnome:gnome-keyring (high 7.8) - [CVE-2018-19357](https://insights.sbomify.com/CVE-2018-19357/): Memory corruption in xmplay:xmplay (high 7.8) - [CVE-2018-19355](https://insights.sbomify.com/CVE-2018-19355/): File upload in mypresta:customer files upload (critical 9.8) - [CVE-2018-19353](https://insights.sbomify.com/CVE-2018-19353/): Memory corruption in ansilove:libansilove (medium 6.5) - [CVE-2018-19352](https://insights.sbomify.com/CVE-2018-19352/): Jupyter Notebook XSS via directory name (medium 6.1) - [CVE-2018-19351](https://insights.sbomify.com/CVE-2018-19351/): Jupyter Notebook XSS via untrusted notebooks (medium 6.1) - [CVE-2018-19350](https://insights.sbomify.com/CVE-2018-19350/): Cross-site scripting in seacms:seacms (medium 5.4) - [CVE-2018-1935](https://insights.sbomify.com/CVE-2018-1935/): Information disclosure in Connections (medium 4.3) - [CVE-2018-19349](https://insights.sbomify.com/CVE-2018-19349/): SQL injection in seacms:seacms (high 7.2) - [CVE-2018-19348](https://insights.sbomify.com/CVE-2018-19348/): Memory corruption in foxitsoftware:foxit reader (high 7.1) - [CVE-2018-19347](https://insights.sbomify.com/CVE-2018-19347/): Memory corruption in foxitsoftware:foxit reader (high 7.1) - [CVE-2018-19346](https://insights.sbomify.com/CVE-2018-19346/): Memory corruption in foxitsoftware:foxit reader (high 7.1) - [CVE-2018-19345](https://insights.sbomify.com/CVE-2018-19345/): Memory corruption in foxitsoftware:foxit reader (high 7.1) - [CVE-2018-19344](https://insights.sbomify.com/CVE-2018-19344/): Memory corruption in foxitsoftware:foxit reader (high 7.1) - [CVE-2018-19343](https://insights.sbomify.com/CVE-2018-19343/): Memory corruption in foxitsoftware:foxit reader (high 7.1) - [CVE-2018-19342](https://insights.sbomify.com/CVE-2018-19342/): Memory corruption in foxitsoftware:foxit reader (high 7.1) - [CVE-2018-19341](https://insights.sbomify.com/CVE-2018-19341/): Memory corruption in foxitsoftware:foxit reader (high 7.1) - [CVE-2018-19340](https://insights.sbomify.com/CVE-2018-19340/): Cross-site scripting in guriddo:form php (medium 6.1) - [CVE-2018-1934](https://insights.sbomify.com/CVE-2018-1934/): Cross-site request forgery in Cognos Business Intelligence (medium 4.3) - [CVE-2018-19335](https://insights.sbomify.com/CVE-2018-19335/): Cross-site request forgery in google:monorail (medium 5.3) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/75/