Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 79 of 163.
- CVE-2018-18955 Privilege escalation in canonical:ubuntu linux
- CVE-2018-18954 Memory corruption in canonical:ubuntu linux
- CVE-2018-18952 Cross-site scripting in jeecms:jeecms
- CVE-2018-18950 Path traversal in kindeditor:kindeditor
- CVE-2018-1895 Cross-site scripting in InfoSphere Information Server
- CVE-2018-18949 SQL injection in zohocorp:manageengine opmanager
- CVE-2018-18944 Memory corruption in artha project:artha
- CVE-2018-18943 XSS in baserCMS before 4.1.4
- CVE-2018-18942 RCE in baserCMS before 4.1.4
- CVE-2018-18941 Information disclosure in vignette:content management
- CVE-2018-18940 Cross-site scripting in netscape:enterprise server
- CVE-2018-18939 Cross-site scripting in wuzhi cms project:wuzhi cms
- CVE-2018-18938 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2018-18937 Null dereference in mz-automation:libiec61850
- CVE-2018-18936 Path traversal in popojicms:popojicms
- CVE-2018-18935 Cross-site request forgery in popojicms:popojicms
- CVE-2018-18934 File upload in popojicms:popojicms
- CVE-2018-18933 Memory corruption in foxitsoftware:foxit reader
- CVE-2018-18931 Privilege escalation in trms:carousel digital signage
- CVE-2018-18930 File upload in trms:carousel digital signage
- CVE-2018-1893 Cross-site scripting in Rational Collaborative Lifecycle Management
- CVE-2018-18929 Hardcoded credentials in trms:seneca hdn firmware
- CVE-2018-18928 Integer overflow in icu-project:international components for unicode
- CVE-2018-18927 Cross-site scripting in publiccms:publiccms
- CVE-2018-18926 Gitea Remote Code Execution (RCE)
- CVE-2018-18925 Auth bypass in gogs:gogs
- CVE-2018-18924 File upload in projeqtor:projeqtor
- CVE-2018-18923 SQL injection in abisoftgt:ticketly
- CVE-2018-18922 Missing authorization in abisoftgt:ticketly
- CVE-2018-18921 CSRF in PHP Server Monitor before 3.3.2
- CVE-2018-18920 Py-EVM is vulnerable to arbitrary bytecode injection
- CVE-2018-1892 Cross-site scripting in Rational Collaborative Lifecycle Management
- CVE-2018-18919 Cross-site scripting in iiong:wp editor.md
- CVE-2018-18915 Denial of service in exiv2:exiv2
- CVE-2018-18913 Other in opera:opera browser
- CVE-2018-18912 Memory corruption in sharing-file:easy file sharing web server
- CVE-2018-1891 Cross-site scripting in Security Guardium
- CVE-2018-18909 Cross-site scripting in xheditor:xheditor
- CVE-2018-18908 Information disclosure in sky:sky go
- CVE-2018-18907 Auth bypass in dlink:dir-850l firmare
- CVE-2018-18903 Code injection in vanillaforums:vanilla
- CVE-2018-1890 Privilege escalation in Runtimes for Java Technology
- CVE-2018-18898 Denial of service in bestpractical:request tracker
- CVE-2018-18897 Denial of service in canonical:ubuntu linux
- CVE-2018-18894 Path traversal in lexmark:6500e firmware
- CVE-2018-18893 Jinjava calls getClass
- CVE-2018-18892 Code injection in 1234n:minicms
- CVE-2018-18891 Auth bypass in 1234n:minicms
- CVE-2018-18890 Information disclosure in 1234n:minicms
- CVE-2018-1889 Cross-site scripting in Security Guardium
- CVE-2018-18888 File upload in laravelcms project:laravelcms
- CVE-2018-18887 SQL injection in s-cms:s-cms
- CVE-2018-18886 Cross-site scripting in helpy.io:helpy
- CVE-2018-18883 Null dereference in xen:xen
- CVE-2018-18882 Cross-site scripting in controlbyweb:x-320m-i firmware
- CVE-2018-18881 Denial of service in controlbyweb:x-320m-i firmware
- CVE-2018-18880 Cross-site scripting in columbiaweather:weather microserver firmware
- CVE-2018-1888 Code injection in i Access for Windows
- CVE-2018-18879 Command injection in columbiaweather:weather microserver firmware
- CVE-2018-18878 Denial of service in columbiaweather:weather microserver firmware
- CVE-2018-18877 Auth bypass in columbiaweather:weather microserver firmware
- CVE-2018-18876 Path traversal in columbiaweather:weather microserver firmware
- CVE-2018-18875 Cross-site scripting in columbiaweather:weather microserver firmware
- CVE-2018-18874 File upload in nconsulting:nc-cms
- CVE-2018-18873 Null dereference in canonical:ubuntu linux
- CVE-2018-18872 Cross-site scripting in kieranoshea:calendar
- CVE-2018-18871 Auth bypass in gigasetpro:maxwell basic firmware
- CVE-2018-1887 Hardcoded credentials in Security Access Manager Appliance
- CVE-2018-18869 Path traversal in phome:empirecms
- CVE-2018-18868 Cross-site scripting in no-cms project:no-cms
- CVE-2018-18867 Server-side request forgery in tecrail:responsive filemanager
- CVE-2018-18865 Information disclosure in royalapplications:royal ts
- CVE-2018-18864 Cross-site scripting in loadbalancer:enterprise va max
- CVE-2018-18863 Path traversal in ngahr:resourcelink
- CVE-2018-18862 Missing authorization in bmc:remedy action request system
- CVE-2018-18861 Memory corruption in pcman:ftp server
- CVE-2018-18860 Privilege escalation in switchvpn:switchvpn
- CVE-2018-1886 Information disclosure in Security Access Manager Appliance
- CVE-2018-18859 Privilege escalation in liquidvpn:liquidvpn
- CVE-2018-18858 Command injection in liquidvpn:liquidvpn
- CVE-2018-18857 Command injection in liquidvpn:liquidvpn
- CVE-2018-18856 Command injection in liquidvpn:liquidvpn
- CVE-2018-18854 Uncontrolled Resource Consumption in spray-json
- CVE-2018-18853 Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields
- CVE-2018-18852 Command injection in cerio:dt-300n firmware
- CVE-2018-18850 Deserialization in octopus:octopus server
- CVE-2018-1885 Information disclosure in Business Automation Workflow
- CVE-2018-18849 Memory corruption in canonical:ubuntu linux
- CVE-2018-18845 Cross-site scripting in advanced comment system project:advanced comment system
- CVE-2018-18843 Server-side request forgery in gitlab:gitlab
- CVE-2018-18842 Cross-site request forgery in zblogcn:z-blogphp
- CVE-2018-18841 Cross-site scripting in sem-cms:semcms
- CVE-2018-18840 Cross-site scripting in sem-cms:semcms
- CVE-2018-1884 Path traversal in Case Manager
- CVE-2018-18839 Information disclosure in my-netdata:netdata
- CVE-2018-18838 Other in my-netdata:netdata
- CVE-2018-18837 Other in my-netdata:netdata
- CVE-2018-18836 Code injection in my-netdata:netdata
- CVE-2018-18835 Code injection in doccms:doccms
- CVE-2018-18834 Memory corruption in mz-automation:libiec61850