Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 76 of 163.
- CVE-2018-19334 Cross-site request forgery in google:monorail
- CVE-2018-19333 Memory corruption in google:gvisor
- CVE-2018-19332 Cross-site request forgery in s-cms:s-cms
- CVE-2018-19331 SQL injection in s-cms:s-cms
- CVE-2018-1933 Cross-site scripting in Planning Analytics
- CVE-2018-19329 Path traversal in greencms:greencms
- CVE-2018-19328 Path traversal in laobancms:laobancms
- CVE-2018-19327 Cross-site request forgery in jtbc:jtbc php
- CVE-2018-19326 Path traversal in zyxel:vmg1312-b10d firmware
- CVE-2018-19324 Cross-site scripting in kimsq:rb
- CVE-2018-19323 GIGABYTE Multiple Products Privilege Escalation
- CVE-2018-19322 GIGABYTE Multiple Products Code Execution
- CVE-2018-19321 GIGABYTE Multiple Products Privilege Escalation
- CVE-2018-19320 GIGABYTE Multiple Products Unspecified
- CVE-2018-1932 Missing authorization in API Connect
- CVE-2018-19319 Cross-site request forgery in srcms project:srcms
- CVE-2018-19318 Cross-site request forgery in srcms project:srcms
- CVE-2018-19312 Centreon SQL Injection
- CVE-2018-19311 Centreon XSS Vulnerability
- CVE-2018-19301 Cross-site scripting in tp4a:teleport
- CVE-2018-19300 Command injection in d-link:dap-1530 firmware
- CVE-2018-19296 Phar object injection in PHPMailer
- CVE-2018-19295 Sylabs Singularity Improper Input Validation
- CVE-2018-19291 Cross-site request forgery in dilicms:dilicms
- CVE-2018-19290 Command injection in budabot:budabot
- CVE-2018-1929 Missing authorization in Rational Engineering Lifecycle Manager
- CVE-2018-19289 Valine HTML Injection
- CVE-2018-19288 Cross-site scripting in zohocorp:manageengine opmanager
- CVE-2018-19287 Cross-site scripting in ninjaforma:ninja forms
- CVE-2018-19286 Cross-site scripting in mubu:curtain
- CVE-2018-19282 Denial of service in rockwellautomation:powerflex 525 ac drives firmware
- CVE-2018-19281 Centreon allows SNMP trap SQL Injection
- CVE-2018-19280 Centreon XSS Vulnerability
- CVE-2018-1928 Missing authorization in StoredIQ
- CVE-2018-19279 Information disclosure in primx:zonecentral
- CVE-2018-19278 Memory corruption in digium:asterisk
- CVE-2018-19277 XXE in PHPSpreadsheet due to encoding issue
- CVE-2018-19276 Deserialization in openmrs:openmrs
- CVE-2018-19275 Hardcoded credentials in mitel:cmg suite
- CVE-2018-19274 phpBB Remote Code Execution
- CVE-2018-19271 Centreon SQL Injection
- CVE-2018-1927 Cross-site request forgery in StoredIQ
- CVE-2018-1926 Cross-site request forgery in WebSphere Application Server
- CVE-2018-1925 Weak cryptography in MQ
- CVE-2018-19249 Auth bypass in stripe:stripe api
- CVE-2018-19248 Missing authorization in epson:epson workforce wf-2861 firmware
- CVE-2018-19246 LFI in PHP-Proxy 5.1.0
- CVE-2018-19244 XML external entity in charlesproxy:charles
- CVE-2018-19242 Memory corruption in trendnet:tew-632brp firmware
- CVE-2018-19241 Memory corruption in trendnet:tv-ip110wn firmware
- CVE-2018-19240 Memory corruption in trendnet:tv-ip110wn firmware
- CVE-2018-19239 Command injection in trendnet:tew-673gru firmware
- CVE-2018-19234 Security feature bypass in comparex:miss marple
- CVE-2018-19233 Hardcoded credentials in comparex:miss marple
- CVE-2018-19232 Denial of service in epson:epson workforce wf-2861 firmware
- CVE-2018-1923 Memory corruption in DB2 for Linux, UNIX and Windows
- CVE-2018-19229 Cross-site scripting in laobancms:laobancms
- CVE-2018-19228 Path traversal in laobancms:laobancms
- CVE-2018-19227 Cross-site scripting in laobancms:laobancms
- CVE-2018-19226 Information disclosure in laobancms:laobancms
- CVE-2018-19225 Cross-site request forgery in laobancms:laobancms
- CVE-2018-19224 Auth bypass in laobancms:laobancms
- CVE-2018-19223 Cross-site scripting in laobancms:laobancms
- CVE-2018-19222 Auth bypass in laobancms:laobancms
- CVE-2018-19221 SQL injection in laobancms:laobancms
- CVE-2018-19220 Code injection in laobancms:laobancms
- CVE-2018-1922 Memory corruption in DB2 for Linux, UNIX and Windows
- CVE-2018-19219 Memory corruption in sass-lang:libsass
- CVE-2018-19218 Memory corruption in sass-lang:libsass
- CVE-2018-19217 Null dereference in invisible-island:ncurses
- CVE-2018-19216 Use after free in debian:debian linux
- CVE-2018-19215 Memory corruption in nasm:netwide assembler
- CVE-2018-19214 Memory corruption in nasm:netwide assembler
- CVE-2018-19213 Denial of service in nasm:netwide assembler
- CVE-2018-19212 Denial of service in webmproject:libwebm
- CVE-2018-19211 Null dereference in invisible-island:ncurses
- CVE-2018-19210 Null dereference in canonical:ubuntu linux
- CVE-2018-1921 Cross-site scripting in Campaign
- CVE-2018-19209 Null dereference in nasm:netwide assembler
- CVE-2018-19208 Null dereference in libwpd project:libwpd
- CVE-2018-19207 Code injection in van-ons:wp-gdpr-compliance
- CVE-2018-19206 Cross-site scripting in debian:debian linux
- CVE-2018-19205 Information disclosure in roundcube:webmail
- CVE-2018-19204 Command injection in paessler:prtg network monitor
- CVE-2018-19203 Denial of service in paessler:prtg network monitor
- CVE-2018-19202 Cross-site scripting in mybb:mybb
- CVE-2018-19201 Cross-site scripting in mybb:mybb
- CVE-2018-19200 Null dereference in debian:debian linux
- CVE-2018-1920 XML external entity in Marketing Platform
- CVE-2018-19199 Integer overflow in debian:debian linux
- CVE-2018-19198 Memory corruption in debian:debian linux
- CVE-2018-19197 Path traversal in xiaocms:xiaocms
- CVE-2018-19196 File upload in xiaocms:xiaocms
- CVE-2018-19195 Cross-site scripting in xiaocms:xiaocms
- CVE-2018-19194 Information disclosure in xiaocms:xiaocms
- CVE-2018-19193 Cross-site scripting in xiaocms:xiaocms
- CVE-2018-19192 Cross-site request forgery in xiaocms:xiaocms
- CVE-2018-19191 Cross-site scripting in webmin:webmin
- CVE-2018-19190 Cross-site scripting in amazon:payfort-php-sdk
- CVE-2018-19189 Cross-site scripting in amazon:payfort-php-sdk