# Vulnerabilities published in 2018 - [CVE-2018-8932](https://insights.sbomify.com/CVE-2018-8932/): Missing authorization in n/a (critical 9.0) - [CVE-2018-8931](https://insights.sbomify.com/CVE-2018-8931/): Missing authorization in n/a (critical 9.0) - [CVE-2018-8930](https://insights.sbomify.com/CVE-2018-8930/): Security feature bypass in n/a (critical 9.0) - [CVE-2018-8929](https://insights.sbomify.com/CVE-2018-8929/): Security feature bypass in SSL VPN Client (high 7.3) - [CVE-2018-8928](https://insights.sbomify.com/CVE-2018-8928/): Cross-site scripting in CardDAV Server (medium 6.5) - [CVE-2018-8927](https://insights.sbomify.com/CVE-2018-8927/): Missing authorization in Calendar (medium 5.4) - [CVE-2018-8926](https://insights.sbomify.com/CVE-2018-8926/): Privilege escalation in Photo Station (high 8.8) - [CVE-2018-8925](https://insights.sbomify.com/CVE-2018-8925/): Cross-site request forgery in Photo Station (high 8.8) - [CVE-2018-8924](https://insights.sbomify.com/CVE-2018-8924/): Cross-site scripting in Office (medium 6.5) - [CVE-2018-8923](https://insights.sbomify.com/CVE-2018-8923/): Cross-site scripting in File Station (medium 6.5) - [CVE-2018-8922](https://insights.sbomify.com/CVE-2018-8922/): Missing authorization in Drive (medium 6.5) - [CVE-2018-8921](https://insights.sbomify.com/CVE-2018-8921/): Cross-site scripting in Drive (medium 6.5) - [CVE-2018-8920](https://insights.sbomify.com/CVE-2018-8920/): Code injection in DiskStation Manager (DSM) (medium 5.9) - [CVE-2018-8919](https://insights.sbomify.com/CVE-2018-8919/): Information disclosure in DiskStation Manager (DSM) (high 8.3) - [CVE-2018-8918](https://insights.sbomify.com/CVE-2018-8918/): Cross-site scripting in Synology Router Manager (SRM) (medium 6.5) - [CVE-2018-8917](https://insights.sbomify.com/CVE-2018-8917/): Cross-site scripting in DiskStation Manager (DSM) (medium 6.5) - [CVE-2018-8916](https://insights.sbomify.com/CVE-2018-8916/): Auth bypass in DiskStation Manager (DSM) (medium 6.3) - [CVE-2018-8915](https://insights.sbomify.com/CVE-2018-8915/): Cross-site scripting in Calendar (medium 6.5) - [CVE-2018-8914](https://insights.sbomify.com/CVE-2018-8914/): SQL injection in Media Server (high 7.3) - [CVE-2018-8913](https://insights.sbomify.com/CVE-2018-8913/): Open redirect in Web Station (high 7.1) - [CVE-2018-8912](https://insights.sbomify.com/CVE-2018-8912/): Cross-site scripting in Note Station (medium 6.5) - [CVE-2018-8911](https://insights.sbomify.com/CVE-2018-8911/): Cross-site scripting in Note Station (medium 6.5) - [CVE-2018-8910](https://insights.sbomify.com/CVE-2018-8910/): Cross-site scripting in Drive (medium 6.5) - [CVE-2018-8909](https://insights.sbomify.com/CVE-2018-8909/): Path traversal in n/a (high 7.5) - [CVE-2018-8908](https://insights.sbomify.com/CVE-2018-8908/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-8906](https://insights.sbomify.com/CVE-2018-8906/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-8905](https://insights.sbomify.com/CVE-2018-8905/): Memory corruption in n/a (high 8.8) - [CVE-2018-8904](https://insights.sbomify.com/CVE-2018-8904/): Denial of service in n/a (high 7.8) - [CVE-2018-8903](https://insights.sbomify.com/CVE-2018-8903/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-8902](https://insights.sbomify.com/CVE-2018-8902/): Hardcoded credentials in n/a (medium 6.5) - [CVE-2018-8901](https://insights.sbomify.com/CVE-2018-8901/): Information disclosure in n/a (high 7.8) - [CVE-2018-8900](https://insights.sbomify.com/CVE-2018-8900/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-8899](https://insights.sbomify.com/CVE-2018-8899/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-8898](https://insights.sbomify.com/CVE-2018-8898/): Auth bypass in n/a (critical 9.8) - [CVE-2018-8897](https://insights.sbomify.com/CVE-2018-8897/): Race condition in n/a (high 7.8) - [CVE-2018-8896](https://insights.sbomify.com/CVE-2018-8896/): Denial of service in n/a (high 7.8) - [CVE-2018-8895](https://insights.sbomify.com/CVE-2018-8895/): Denial of service in n/a (high 7.8) - [CVE-2018-8894](https://insights.sbomify.com/CVE-2018-8894/): Denial of service in n/a (high 7.8) - [CVE-2018-8893](https://insights.sbomify.com/CVE-2018-8893/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-8892](https://insights.sbomify.com/CVE-2018-8892/): Cross-site request forgery in BlackBerry UEM (medium 6.5) - [CVE-2018-8891](https://insights.sbomify.com/CVE-2018-8891/): Cross-site scripting in BlackBerry UEM (medium 4.8) - [CVE-2018-8890](https://insights.sbomify.com/CVE-2018-8890/): Information disclosure in UEM (high 7.5) - [CVE-2018-8889](https://insights.sbomify.com/CVE-2018-8889/): Path traversal in BlackBerry Enterprise Mobility Server (BEMS) (medium 4.7) - [CVE-2018-8888](https://insights.sbomify.com/CVE-2018-8888/): Cross-site scripting in BlackBerry UEM (medium 4.8) - [CVE-2018-8885](https://insights.sbomify.com/CVE-2018-8885/): Race condition in n/a (high 7.0) - [CVE-2018-8883](https://insights.sbomify.com/CVE-2018-8883/): Memory corruption in n/a (high 7.8) - [CVE-2018-8882](https://insights.sbomify.com/CVE-2018-8882/): Memory corruption in n/a (high 7.8) - [CVE-2018-8881](https://insights.sbomify.com/CVE-2018-8881/): Memory corruption in n/a (high 7.3) - [CVE-2018-8880](https://insights.sbomify.com/CVE-2018-8880/): Information disclosure in n/a (high 7.5) - [CVE-2018-8879](https://insights.sbomify.com/CVE-2018-8879/): Memory corruption in n/a (critical 9.8) - [CVE-2018-8878](https://insights.sbomify.com/CVE-2018-8878/): Information disclosure in n/a (medium 5.3) - [CVE-2018-8877](https://insights.sbomify.com/CVE-2018-8877/): Information disclosure in n/a (medium 5.3) - [CVE-2018-8876](https://insights.sbomify.com/CVE-2018-8876/): Denial of service in n/a (high 7.8) - [CVE-2018-8875](https://insights.sbomify.com/CVE-2018-8875/): Denial of service in n/a (high 7.8) - [CVE-2018-8874](https://insights.sbomify.com/CVE-2018-8874/): Denial of service in n/a (high 7.8) - [CVE-2018-8873](https://insights.sbomify.com/CVE-2018-8873/): Denial of service in n/a (high 7.8) - [CVE-2018-8872](https://insights.sbomify.com/CVE-2018-8872/): Memory corruption in Triconex Tricon (high 8.1) - [CVE-2018-8871](https://insights.sbomify.com/CVE-2018-8871/): Memory corruption in Automation TPEditor (critical 9.8) - [CVE-2018-8870](https://insights.sbomify.com/CVE-2018-8870/): Medtronic MyCareLink Patient Monitor Use of Hard-coded Password (medium 6.4) - [CVE-2018-8869](https://insights.sbomify.com/CVE-2018-8869/): Other in IDS 2102 (critical 9.8) - [CVE-2018-8868](https://insights.sbomify.com/CVE-2018-8868/): Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or Function (medium 6.2) - [CVE-2018-8867](https://insights.sbomify.com/CVE-2018-8867/): Denial of service in GE PACSystems RX3i CPE305/310 version 9.20 and prior RX3i CPE330 version 9.21 and prior RX3i CPE 400 version 9.30 and prior PACSystems RSTi-EP CPE 100 all versionsPACSystems CPU320/CRU320 RXi all versions (high 7.5) - [CVE-2018-8866](https://insights.sbomify.com/CVE-2018-8866/): Command injection in VGo Robot (high 8.8) - [CVE-2018-8865](https://insights.sbomify.com/CVE-2018-8865/): Memory corruption in IDS 2102 (critical 9.8) - [CVE-2018-8864](https://insights.sbomify.com/CVE-2018-8864/): Weak cryptography in ATI Emergency Mass Notification Systems (low 3.1) - [CVE-2018-8863](https://insights.sbomify.com/CVE-2018-8863/): Philips EncoreAnywhere Exposure of Sensitive Information to an Unauthorized Actor (medium 5.9) - [CVE-2018-8862](https://insights.sbomify.com/CVE-2018-8862/): Auth bypass in Emergency Mass Notification Systems (low 3.1) - [CVE-2018-8861](https://insights.sbomify.com/CVE-2018-8861/): Privilege escalation in Brilliance CT Scanners (high 8.7) - [CVE-2018-8860](https://insights.sbomify.com/CVE-2018-8860/): Information disclosure in VGo Robot (medium 6.5) - [CVE-2018-8859](https://insights.sbomify.com/CVE-2018-8859/): Auth bypass in SmartServer 1 (critical 9.8) - [CVE-2018-8858](https://insights.sbomify.com/CVE-2018-8858/): Hardcoded credentials in VGo Robot (critical 9.8) - [CVE-2018-8857](https://insights.sbomify.com/CVE-2018-8857/): Hardcoded credentials in Brilliance CT Scanners (high 7.8) - [CVE-2018-8856](https://insights.sbomify.com/CVE-2018-8856/): Hardcoded credentials in e-Alert Unit (non-medical device) (critical 9.8) - [CVE-2018-8855](https://insights.sbomify.com/CVE-2018-8855/): Misconfiguration in SmartServer 1 (critical 9.8) - [CVE-2018-8854](https://insights.sbomify.com/CVE-2018-8854/): Denial of service in e-Alert Unit (non-medical device) (high 7.5) - [CVE-2018-8853](https://insights.sbomify.com/CVE-2018-8853/): Privilege escalation in Brilliance CT Scanners (high 8.8) - [CVE-2018-8852](https://insights.sbomify.com/CVE-2018-8852/): Auth bypass in e-Alert Unit (non-medical device) (high 8.8) - [CVE-2018-8851](https://insights.sbomify.com/CVE-2018-8851/): Hardcoded credentials in SmartServer 1 (critical 9.8) - [CVE-2018-8850](https://insights.sbomify.com/CVE-2018-8850/): Code injection in e-Alert Unit (non-medical device) (critical 9.8) - [CVE-2018-8849](https://insights.sbomify.com/CVE-2018-8849/): Medtronic N'Vision Clinician Programmer Missing Encryption of Sensitive Data (medium 4.6) - [CVE-2018-8848](https://insights.sbomify.com/CVE-2018-8848/): Misconfiguration in e-Alert Unit (non-medical device) (high 7.5) - [CVE-2018-8847](https://insights.sbomify.com/CVE-2018-8847/): Memory corruption in Eaton 9000X Drive (critical 9.8) - [CVE-2018-8846](https://insights.sbomify.com/CVE-2018-8846/): Cross-site scripting in e-Alert Unit (non-medical device) (medium 6.1) - [CVE-2018-8845](https://insights.sbomify.com/CVE-2018-8845/): Memory corruption in WebAccess (critical 9.8) - [CVE-2018-8844](https://insights.sbomify.com/CVE-2018-8844/): Cross-site request forgery in e-Alert Unit (non-medical device) (high 8.8) - [CVE-2018-8843](https://insights.sbomify.com/CVE-2018-8843/): Use after free in Rockwell Automation Arena (medium 5.5) - [CVE-2018-8842](https://insights.sbomify.com/CVE-2018-8842/): Information disclosure in e-Alert Unit (non-medical device) (high 8.8) - [CVE-2018-8841](https://insights.sbomify.com/CVE-2018-8841/): Privilege escalation in WebAccess (high 7.8) - [CVE-2018-8840](https://insights.sbomify.com/CVE-2018-8840/): Memory corruption in Schneider Electric InduSoft Web Studio and InTouch Machine Edition (critical 9.8) - [CVE-2018-8839](https://insights.sbomify.com/CVE-2018-8839/): Memory corruption in PMSoft (high 7.8) - [CVE-2018-8838](https://insights.sbomify.com/CVE-2018-8838/): Missing authorization in Yokogawa CENTUM and Exaopc (medium 6.5) - [CVE-2018-8837](https://insights.sbomify.com/CVE-2018-8837/): Memory corruption in Advantech WebAccess HMI Designer (high 7.8) - [CVE-2018-8836](https://insights.sbomify.com/CVE-2018-8836/): Denial of service in WAGO 750 Series (medium 5.3) - [CVE-2018-8835](https://insights.sbomify.com/CVE-2018-8835/): Use after free in Advantech WebAccess HMI Designer (high 7.8) - [CVE-2018-8834](https://insights.sbomify.com/CVE-2018-8834/): Memory corruption in Omron CX-One (high 7.8) - [CVE-2018-8833](https://insights.sbomify.com/CVE-2018-8833/): Memory corruption in Advantech WebAccess HMI Designer (high 7.8) - [CVE-2018-8832](https://insights.sbomify.com/CVE-2018-8832/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-8831](https://insights.sbomify.com/CVE-2018-8831/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-8828](https://insights.sbomify.com/CVE-2018-8828/): Memory corruption in n/a (critical 9.8) - [CVE-2018-8827](https://insights.sbomify.com/CVE-2018-8827/): Cross-site scripting in n/a (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/8/