# Vulnerabilities published in 2018


- [CVE-2018-19188](https://insights.sbomify.com/CVE-2018-19188/): Cross-site scripting in amazon:payfort-php-sdk (medium 6.1)
- [CVE-2018-19187](https://insights.sbomify.com/CVE-2018-19187/): Cross-site scripting in amazon:payfort-php-sdk (medium 6.1)
- [CVE-2018-19186](https://insights.sbomify.com/CVE-2018-19186/): Cross-site scripting in amazon:payfort-php-sdk (medium 6.1)
- [CVE-2018-19185](https://insights.sbomify.com/CVE-2018-19185/): Memory corruption in mz-automation:libiec61850 (critical 9.8)
- [CVE-2018-19184](https://insights.sbomify.com/CVE-2018-19184/): Go Ethereum Denial of Service (high 7.5)
- [CVE-2018-19183](https://insights.sbomify.com/CVE-2018-19183/): Denial of Service in ethereumjs-vm (high 7.5)
- [CVE-2018-19182](https://insights.sbomify.com/CVE-2018-19182/): Cross-site request forgery in engelsystem:engelsystem (high 8.8)
- [CVE-2018-19181](https://insights.sbomify.com/CVE-2018-19181/): Path traversal in yunucms:yunucms (high 7.5)
- [CVE-2018-19180](https://insights.sbomify.com/CVE-2018-19180/): Code injection in yunucms:yunucms (critical 9.8)
- [CVE-2018-1918](https://insights.sbomify.com/CVE-2018-1918/): Cross-site scripting in Jazz Reporting Service (medium 5.4)
- [CVE-2018-19178](https://insights.sbomify.com/CVE-2018-19178/): Cross-site scripting in jeesns:jeesns (medium 5.4)
- [CVE-2018-19170](https://insights.sbomify.com/CVE-2018-19170/): Cross-site scripting in jpress:jpress (medium 4.8)
- [CVE-2018-1917](https://insights.sbomify.com/CVE-2018-1917/): Information disclosure in InfoSphere Information Server (low 3.5)
- [CVE-2018-19168](https://insights.sbomify.com/CVE-2018-19168/): Command injection in fruitywifi project:fruitywifi (critical 9.8)
- [CVE-2018-19167](https://insights.sbomify.com/CVE-2018-19167/): Denial of service in cloakcoin:cloakcoin (high 7.5)
- [CVE-2018-19166](https://insights.sbomify.com/CVE-2018-19166/): Denial of service in peercoin:peercoin (high 7.5)
- [CVE-2018-19165](https://insights.sbomify.com/CVE-2018-19165/): Denial of service in nebl:neblio (high 7.5)
- [CVE-2018-19164](https://insights.sbomify.com/CVE-2018-19164/): Denial of service in reddcoin:reddcoin (high 7.5)
- [CVE-2018-19163](https://insights.sbomify.com/CVE-2018-19163/): Denial of service in stratisplatform:stratisx (high 7.5)
- [CVE-2018-19162](https://insights.sbomify.com/CVE-2018-19162/): Denial of service in diviproject:divi (high 7.5)
- [CVE-2018-19161](https://insights.sbomify.com/CVE-2018-19161/): Denial of service in alqo:alqo (high 7.5)
- [CVE-2018-19160](https://insights.sbomify.com/CVE-2018-19160/): Denial of service in bit.diamonds:diamond (high 7.5)
- [CVE-2018-1916](https://insights.sbomify.com/CVE-2018-1916/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2018-19159](https://insights.sbomify.com/CVE-2018-19159/): Denial of service in luxcore:lux (high 7.5)
- [CVE-2018-19158](https://insights.sbomify.com/CVE-2018-19158/): Denial of service in colossusxt:colossuscoinxt (high 7.5)
- [CVE-2018-19157](https://insights.sbomify.com/CVE-2018-19157/): Denial of service in phore:phore (high 7.5)
- [CVE-2018-19156](https://insights.sbomify.com/CVE-2018-19156/): Denial of service in pivx:pivx (high 7.5)
- [CVE-2018-19155](https://insights.sbomify.com/CVE-2018-19155/): Denial of service in navcoin:navcoin (high 7.5)
- [CVE-2018-19154](https://insights.sbomify.com/CVE-2018-19154/): Denial of service in htmlcoin:htmlcoin (high 7.5)
- [CVE-2018-19153](https://insights.sbomify.com/CVE-2018-19153/): Denial of service in particl:particl (high 7.5)
- [CVE-2018-19152](https://insights.sbomify.com/CVE-2018-19152/): Denial of service in emercoin:emercoin (high 7.5)
- [CVE-2018-19151](https://insights.sbomify.com/CVE-2018-19151/): Denial of service in qtum:qtum (high 7.5)
- [CVE-2018-19150](https://insights.sbomify.com/CVE-2018-19150/): Memory corruption in pdfforge:pdf architect (high 7.8)
- [CVE-2018-19149](https://insights.sbomify.com/CVE-2018-19149/): Null dereference in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-19148](https://insights.sbomify.com/CVE-2018-19148/): Caddy allows enumeration of Certificates and Hostnames (low 3.7)
- [CVE-2018-19146](https://insights.sbomify.com/CVE-2018-19146/): Cross-site scripting in concretecms:concrete cms (medium 4.8)
- [CVE-2018-19145](https://insights.sbomify.com/CVE-2018-19145/): Cross-site scripting in s-cms:s-cms (medium 6.1)
- [CVE-2018-19143](https://insights.sbomify.com/CVE-2018-19143/): Path traversal in debian:debian linux (medium 6.5)
- [CVE-2018-19142](https://insights.sbomify.com/CVE-2018-19142/): Cross-site scripting in otrs:open ticket request system (medium 4.8)
- [CVE-2018-19141](https://insights.sbomify.com/CVE-2018-19141/): Cross-site scripting in debian:debian linux (medium 4.8)
- [CVE-2018-1914](https://insights.sbomify.com/CVE-2018-1914/): Cross-site scripting in Rational Engineering Lifecycle Manager (medium 5.4)
- [CVE-2018-19139](https://insights.sbomify.com/CVE-2018-19139/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2018-19138](https://insights.sbomify.com/CVE-2018-19138/): Cross-site request forgery in wstmart:wstmart (high 8.8)
- [CVE-2018-19137](https://insights.sbomify.com/CVE-2018-19137/): Cross-site scripting in domainmod:domainmod (medium 6.1)
- [CVE-2018-19136](https://insights.sbomify.com/CVE-2018-19136/): Cross-site scripting in domainmod:domainmod (medium 6.1)
- [CVE-2018-19135](https://insights.sbomify.com/CVE-2018-19135/): Cross-site request forgery in clippercms:clippercms (high 8.8)
- [CVE-2018-19134](https://insights.sbomify.com/CVE-2018-19134/): Memory corruption in artifex:ghostscript (high 7.8)
- [CVE-2018-19133](https://insights.sbomify.com/CVE-2018-19133/): Flarum Core Leaks PII (medium 5.3)
- [CVE-2018-19132](https://insights.sbomify.com/CVE-2018-19132/): Denial of service in debian:debian linux (medium 5.9)
- [CVE-2018-19131](https://insights.sbomify.com/CVE-2018-19131/): Cross-site scripting in squid-cache:squid (medium 6.1)
- [CVE-2018-19130](https://insights.sbomify.com/CVE-2018-19130/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2018-1913](https://insights.sbomify.com/CVE-2018-1913/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2018-19129](https://insights.sbomify.com/CVE-2018-19129/): Null dereference in libav:libav (medium 6.5)
- [CVE-2018-19128](https://insights.sbomify.com/CVE-2018-19128/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2018-19127](https://insights.sbomify.com/CVE-2018-19127/): Code injection in phpcms:phpcms (critical 9.8)
- [CVE-2018-19126](https://insights.sbomify.com/CVE-2018-19126/): File upload in prestashop:prestashop (critical 9.8)
- [CVE-2018-19125](https://insights.sbomify.com/CVE-2018-19125/): Missing authorization in prestashop:prestashop (high 7.5)
- [CVE-2018-19124](https://insights.sbomify.com/CVE-2018-19124/): Path traversal in prestashop:prestashop (high 7.5)
- [CVE-2018-19122](https://insights.sbomify.com/CVE-2018-19122/): Null dereference in mz-automation:libiec61850 (medium 4.3)
- [CVE-2018-19121](https://insights.sbomify.com/CVE-2018-19121/): Null dereference in mz-automation:libiec61850 (medium 4.3)
- [CVE-2018-19120](https://insights.sbomify.com/CVE-2018-19120/): Server-side request forgery in kde:kde applications (high 7.5)
- [CVE-2018-1912](https://insights.sbomify.com/CVE-2018-1912/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2018-19118](https://insights.sbomify.com/CVE-2018-19118/): Memory corruption in zohocorp:manageengine adaudit plus (high 7.5)
- [CVE-2018-19115](https://insights.sbomify.com/CVE-2018-19115/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2018-19114](https://insights.sbomify.com/CVE-2018-19114/): Path traversal in iminho:mindoc (high 8.8)
- [CVE-2018-19113](https://insights.sbomify.com/CVE-2018-19113/): Misconfiguration in pronestor:pronestor health monitoring (high 7.3)
- [CVE-2018-19111](https://insights.sbomify.com/CVE-2018-19111/): Information disclosure in google:cardboard (medium 5.3)
- [CVE-2018-19110](https://insights.sbomify.com/CVE-2018-19110/): Missing authorization in tianti project:tianti (medium 6.5)
- [CVE-2018-1911](https://insights.sbomify.com/CVE-2018-1911/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2018-19109](https://insights.sbomify.com/CVE-2018-19109/): Missing authorization in tianti project:tianti (high 8.8)
- [CVE-2018-19108](https://insights.sbomify.com/CVE-2018-19108/): Integer overflow in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-19107](https://insights.sbomify.com/CVE-2018-19107/): Integer overflow in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-19106](https://insights.sbomify.com/CVE-2018-19106/): Open redirect in avinetworks:avi vantage (medium 6.1)
- [CVE-2018-19105](https://insights.sbomify.com/CVE-2018-19105/): Memory corruption in librecad:librecad (high 7.8)
- [CVE-2018-19104](https://insights.sbomify.com/CVE-2018-19104/): Cross-site request forgery in bagesoft:bagecms (high 8.8)
- [CVE-2018-1910](https://insights.sbomify.com/CVE-2018-1910/): Cross-site scripting in Rational Engineering Lifecycle Manager (medium 5.4)
- [CVE-2018-19093](https://insights.sbomify.com/CVE-2018-19093/): Memory corruption in mz-automation:libiec61850 (high 7.5)
- [CVE-2018-19092](https://insights.sbomify.com/CVE-2018-19092/): Cross-site scripting in yzmcms:yzmcms (medium 6.1)
- [CVE-2018-19091](https://insights.sbomify.com/CVE-2018-19091/): Cross-site scripting in tianti project:tianti (medium 5.4)
- [CVE-2018-19090](https://insights.sbomify.com/CVE-2018-19090/): Cross-site scripting in tianti project:tianti (medium 5.4)
- [CVE-2018-19089](https://insights.sbomify.com/CVE-2018-19089/): Cross-site scripting in tianti project:tianti (medium 5.4)
- [CVE-2018-19087](https://insights.sbomify.com/CVE-2018-19087/): Memory corruption in iobit:malware fighter (high 7.8)
- [CVE-2018-19086](https://insights.sbomify.com/CVE-2018-19086/): Memory corruption in iobit:malware fighter (high 7.8)
- [CVE-2018-19085](https://insights.sbomify.com/CVE-2018-19085/): Memory corruption in iobit:malware fighter (high 7.8)
- [CVE-2018-19084](https://insights.sbomify.com/CVE-2018-19084/): Memory corruption in iobit:malware fighter (high 7.8)
- [CVE-2018-19083](https://insights.sbomify.com/CVE-2018-19083/): Cross-site scripting in wecenter:wecenter (medium 6.1)
- [CVE-2018-19082](https://insights.sbomify.com/CVE-2018-19082/): Memory corruption in foscam:c2 application firmware (critical 9.8)
- [CVE-2018-19081](https://insights.sbomify.com/CVE-2018-19081/): Command injection in foscam:c2 application firmware (critical 9.8)
- [CVE-2018-19080](https://insights.sbomify.com/CVE-2018-19080/): Cross-site scripting in foscam:c2 application firmware (medium 6.1)
- [CVE-2018-1908](https://insights.sbomify.com/CVE-2018-1908/): Cross-site scripting in Robotic Process Automation with Automation Anywhere (medium 5.4)
- [CVE-2018-19079](https://insights.sbomify.com/CVE-2018-19079/): Missing authorization in foscam:c2 application firmware (high 7.5)
- [CVE-2018-19078](https://insights.sbomify.com/CVE-2018-19078/): Information disclosure in foscam:c2 application firmware (critical 9.8)
- [CVE-2018-19077](https://insights.sbomify.com/CVE-2018-19077/): Denial of service in foscam:c2 application firmware (high 7.5)
- [CVE-2018-19076](https://insights.sbomify.com/CVE-2018-19076/): Auth bypass in foscam:c2 application firmware (critical 9.8)
- [CVE-2018-19075](https://insights.sbomify.com/CVE-2018-19075/): Information disclosure in foscam:c2 application firmware (medium 5.3)
- [CVE-2018-19074](https://insights.sbomify.com/CVE-2018-19074/): Misconfiguration in foscam:c2 application firmware (high 7.5)
- [CVE-2018-19073](https://insights.sbomify.com/CVE-2018-19073/): Command injection in foscam:c2 application firmware (high 7.2)
- [CVE-2018-19072](https://insights.sbomify.com/CVE-2018-19072/): Misconfiguration in foscam:c2 application firmware (medium 5.5)
- [CVE-2018-19071](https://insights.sbomify.com/CVE-2018-19071/): Misconfiguration in foscam:c2 application firmware (high 7.8)
- [CVE-2018-19070](https://insights.sbomify.com/CVE-2018-19070/): Command injection in foscam:c2 application firmware (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/77/