Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 80 of 163.
- CVE-2018-18832 SQL injection in dkcms:dkcms
- CVE-2018-18831 Path Traversal in minsoft:ms-mcms
- CVE-2018-18830 Unrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms
- CVE-2018-1883 Denial of service in MQ
- CVE-2018-18829 Null dereference in libav:libav
- CVE-2018-18828 Memory corruption in libav:libav
- CVE-2018-18827 Memory corruption in libav:libav
- CVE-2018-18826 Memory corruption in libav:libav
- CVE-2018-18825 Cross-site scripting in pagoda linux project:pagoda linux
- CVE-2018-18824 Cross-site scripting in wolfcms:wolf cms
- CVE-2018-18823 Cross-site scripting in wolfcms:wolf cms
- CVE-2018-18822 SQL injection in grapixel:new media
- CVE-2018-18820 Memory corruption in debian:debian linux
- CVE-2018-1882 Information disclosure in Spectrum Protect
- CVE-2018-18819 Missing authorization in mitel:micollab
- CVE-2018-18817 Missing authorization in leostream:agent
- CVE-2018-18816 TIBCO JasperReports Persistent Cross Site Scripting Vulnerability
- CVE-2018-18815 TIBCO JasperReports Server User Information Disclosure
- CVE-2018-18814 TIBCO Spotfire Authentication Vulnerability
- CVE-2018-18813 TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities
- CVE-2018-18812 TIBCO Spotfire Fails To Prevent Write Access to Spotfire Library
- CVE-2018-18810 TIBCO Managed File Transfer Credentials Disclosure
- CVE-2018-18809 TIBCO JasperReports Library Directory Traversal
- CVE-2018-18808 TIBCO JasperReports Server Privilege Escalation Via Race Condition
- CVE-2018-18807 TIBCO Statistica Server Vulnerable to Cross Site Scripting
- CVE-2018-18806 SQL injection in school equipment monitoring system project:school equipment monitoring system
- CVE-2018-18805 SQL injection in pointofsales project:pointofsales
- CVE-2018-18804 SQL injection in bakeshop inventory system project:bakeshop inventory system
- CVE-2018-18803 SQL injection in curriculum evaluation system project:curriculum evaluation system
- CVE-2018-18802 Cross-site request forgery in tubigan:welcome to our resort
- CVE-2018-18801 SQL injection in bsen ordering software project:bsen ordering software
- CVE-2018-18800 SQL injection in tubigan:welcome to our resort
- CVE-2018-18799 Cross-site request forgery in school attendance monitoring system project:school attendance monitoring system
- CVE-2018-18798 SQL injection in school attendance monitoring system project:school attendance monitoring system
- CVE-2018-18797 Cross-site request forgery in school attendance monitoring system project:school attendance monitoring system
- CVE-2018-18796 SQL injection in library management system project:library management system
- CVE-2018-18795 SQL injection in school event management system project:school event management system
- CVE-2018-18794 Cross-site request forgery in school event management system project:school event management system
- CVE-2018-18793 File upload in school event management system project:school event management system
- CVE-2018-18792 SQL injection in zzcms:zzcms
- CVE-2018-18791 SQL injection in zzcms:zzcms
- CVE-2018-18790 SQL injection in zzcms:zzcms
- CVE-2018-18789 SQL injection in zzcms:zzcms
- CVE-2018-18788 SQL injection in zzcms:zzcms
- CVE-2018-18787 SQL injection in zzcms:zzcms
- CVE-2018-18786 SQL injection in zzcms:zzcms
- CVE-2018-18785 SQL injection in zzcms:zzcms
- CVE-2018-18784 SQL injection in zzcms:zzcms
- CVE-2018-18783 Cross-site scripting in sem-cms:semcms
- CVE-2018-18782 Cross-site scripting in dedecms:dedecms
- CVE-2018-18781 Cross-site scripting in dedecms:dedecms
- CVE-2018-1878 Information disclosure in Robotic Process Automation with Automation Anywhere
- CVE-2018-18778 Path traversal in acme:mini-httpd
- CVE-2018-18777 Path traversal in microstrategy:microstrategy web
- CVE-2018-18776 Cross-site scripting in microstrategy:microstrategy web
- CVE-2018-18775 Cross-site scripting in microstrategy:microstrategy web
- CVE-2018-18774 Cross-site scripting in control-webpanel:webpanel
- CVE-2018-18773 Cross-site request forgery in control-webpanel:webpanel
- CVE-2018-18772 Cross-site request forgery in control-webpanel:webpanel
- CVE-2018-18771 File upload in lulucms:lulu cms
- CVE-2018-1877 Information disclosure in Robotic Process Automation with Automation Anywhere
- CVE-2018-18767 Weak cryptography in d-link:dcs-825l firmware
- CVE-2018-18766 Privilege escalation in provisio:sitekiosk
- CVE-2018-18765 Memory corruption in cesanta:mongoose
- CVE-2018-18764 Memory corruption in cesanta:mongoose
- CVE-2018-18763 SQL injection in saltos:saltos
- CVE-2018-18762 Information disclosure in saltos:saltos
- CVE-2018-18761 SQL injection in saltos:saltos
- CVE-2018-18760 RhinOS 3.0 build 1190 allows CSRF.
- CVE-2018-1876 Information disclosure in Robotic Process Automation with Automation Anywhere
- CVE-2018-18759 Memory corruption in modbustools:modbus slave
- CVE-2018-18758 SQL injection in open faculty evaluation system project:open faculty evaluation system
- CVE-2018-18757 SQL injection in open faculty evaluation system project:open faculty evaluation system
- CVE-2018-18756 Memory corruption in kangujang:local server
- CVE-2018-18755 SQL injection in k-iwi:k-iwi
- CVE-2018-18754 Hardcoded credentials in zyxel:vmg3312-b10b firmware
- CVE-2018-18753 Deserialization in typecho:typecho
- CVE-2018-18752 File upload in webiness project:webiness inventory
- CVE-2018-18751 Memory corruption in canonical:ubuntu linux
- CVE-2018-1875 Open redirect in InfoSphere Information Governance Catalog
- CVE-2018-18749 Integer overflow in data tools project:data tools
- CVE-2018-18748 Security feature bypass in sandboxie-plus:sandboxie
- CVE-2018-18745 Cross-site scripting in sem-cms:semcms
- CVE-2018-18744 Cross-site scripting in sem-cms:semcms
- CVE-2018-18743 Cross-site scripting in sem-cms:semcms
- CVE-2018-18742 Cross-site request forgery in sem-cms:semcms
- CVE-2018-18741 Cross-site scripting in sem-cms:semcms
- CVE-2018-18740 Cross-site scripting in sem-cms:semcms
- CVE-2018-1874 Information disclosure in API Connect
- CVE-2018-18739 Cross-site scripting in sem-cms:semcms
- CVE-2018-18738 Cross-site scripting in sem-cms:semcms
- CVE-2018-18737 XML external entity in douchat:douchat
- CVE-2018-18736 Cross-site scripting in catfish-cms:catfish blog
- CVE-2018-18735 Cross-site request forgery in catfish-cms:catfish blog
- CVE-2018-18734 Cross-site request forgery in catfish-cms:catfish cms
- CVE-2018-18733 Cross-site scripting in catfish-cms:catfish cms
- CVE-2018-18732 Memory corruption in tenda:ac10 firmware
- CVE-2018-18731 Memory corruption in tenda:ac10 firmware
- CVE-2018-18730 Memory corruption in tenda:ac10 firmware
- CVE-2018-18729 Memory corruption in tenda:ac10 firmware