Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 82 of 163.
- CVE-2018-18590 MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution
- CVE-2018-1859 Privilege escalation in API Connect
- CVE-2018-18589 MFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization Vulnerability
- CVE-2018-18587 Weak cryptography in bigprof:appgini
- CVE-2018-18586 Path traversal in kyzer:libmspack
- CVE-2018-18585 Null dereference in canonical:ubuntu linux
- CVE-2018-18584 Memory corruption in cabextract project:cabextract
- CVE-2018-18583 Memory corruption in lupng project:lupng
- CVE-2018-18582 Memory corruption in lupng project:lupng
- CVE-2018-18581 Memory corruption in lupng project:lupng
- CVE-2018-1858 Cross-site request forgery in API Connect
- CVE-2018-18579 Cross-site scripting in dedecms:dedecms
- CVE-2018-18578 Cross-site scripting in dedecms:dedecms
- CVE-2018-18576 Path traversal in incsub:hustle
- CVE-2018-18573 Code injection in oscommerce:oscommerce
- CVE-2018-18572 File upload in oscommerce:oscommerce
- CVE-2018-18571 Auth bypass in citrix:xenmobile server
- CVE-2018-18570 Planon before Live Build 41 has XSS.
- CVE-2018-1857 Security feature bypass in DB2 for Linux, UNIX and Windows
- CVE-2018-18569 Server-side request forgery in dundas:dundas bi
- CVE-2018-18568 Weak cryptography in polycom:unified communications software
- CVE-2018-18567 Weak cryptography in audiocodes:440hd firmware
- CVE-2018-18566 Information disclosure in polycom:unified communications software
- CVE-2018-18565 File upload in roche:accu-chek inform ii firmware
- CVE-2018-18564 Missing authorization in roche:accu-chek inform ii firmware
- CVE-2018-18563 Missing authorization in roche:accu-chek inform ii firmware
- CVE-2018-18562 Hardcoded credentials in roche:accu-chek inform ii firmware
- CVE-2018-18561 Misconfiguration in roche:accu-chek inform ii firmware
- CVE-2018-18559 Use after free in linux:linux kernel
- CVE-2018-18558 Security feature bypass in espressif:esp-idf
- CVE-2018-18557 Memory corruption in canonical:ubuntu linux
- CVE-2018-18556 Privilege escalation in vyos:vyos
- CVE-2018-18555 Command injection in vyos:vyos
- CVE-2018-18553 Cross-site scripting in leanote:leanote
- CVE-2018-18552 Path traversal in serverscheck:monitoring software
- CVE-2018-18551 Cross-site scripting in serverscheck:monitoring software
- CVE-2018-18550 SQL injection in serverscheck:serverscheck
- CVE-2018-18548 Ajenti Cross-site Scripting Via Filename
- CVE-2018-18547 Cross-site scripting in vestacp:control panel
- CVE-2018-18546 ThinkPHP SQLi Vulnerability
- CVE-2018-18545 Cross-site scripting in fiyo:fiyo cms
- CVE-2018-18544 Denial of service in graphicsmagick:graphicsmagick
- CVE-2018-18541 Auth bypass in debian:debian linux
- CVE-2018-18540 Cross-site scripting in teakki:teakki
- CVE-2018-18537 Memory corruption in asus:aura sync firmware
- CVE-2018-18536 Privilege escalation in asus:aura sync firmware
- CVE-2018-18535 Privilege escalation in asus:aura sync firmware
- CVE-2018-18531 Use of Insufficiently Random Values in penggle:kaptcha
- CVE-2018-18530 ThinkPHP SQLi Vulnerability
- CVE-2018-1853 Other in Spectrum Protect
- CVE-2018-18529 ThinkPHP SQLi Vulnerability
- CVE-2018-18527 SQL injection in owndms:ownticket
- CVE-2018-18524 Cross-site scripting in evernote:evernote
- CVE-2018-18521 Denial of service in canonical:ubuntu linux
- CVE-2018-18520 Memory corruption in canonical:ubuntu linux
- CVE-2018-18519 Privilege escalation in bestxsoftware:best free keylogger
- CVE-2018-18517 Cross-site scripting in citrix:netscaler gateway firmware
- CVE-2018-18513 Null dereference in Thunderbird
- CVE-2018-18512 Use after free in Thunderbird
- CVE-2018-18511 Security feature bypass in Firefox
- CVE-2018-18510 Denial of service in Firefox
- CVE-2018-1851 Deserialization in WebSphere Application Server
- CVE-2018-18509 Security feature bypass in Thunderbird
- CVE-2018-18508 Null dereference in NSS
- CVE-2018-18506 Security feature bypass in Firefox
- CVE-2018-18505 Security feature bypass in Firefox
- CVE-2018-18504 Use after free in canonical:ubuntu linux
- CVE-2018-18503 Memory corruption in Firefox
- CVE-2018-18502 Memory corruption in Firefox
- CVE-2018-18501 Memory corruption in Firefox
- CVE-2018-18500 Use after free in canonical:ubuntu linux
- CVE-2018-1850 Missing authorization in Security Access Manager Appliance
- CVE-2018-18499 Security feature bypass in Firefox
- CVE-2018-18498 Integer overflow in Firefox
- CVE-2018-18497 Security feature bypass in Firefox
- CVE-2018-18496 Other in Firefox
- CVE-2018-18495 Security feature bypass in Firefox
- CVE-2018-18494 Security feature bypass in Firefox
- CVE-2018-18493 Memory corruption in Firefox
- CVE-2018-18492 Use after free in Firefox
- CVE-2018-18489 Denial of service in tp-link:wr840n firmware
- CVE-2018-18488 SQL injection in gxlcms:gxlcms
- CVE-2018-18487 Weak cryptography in gxlcms:gxlcms
- CVE-2018-18486 SQL injection in phpshe:phpshe
- CVE-2018-18485 Path traversal in phpshe:phpshe
- CVE-2018-18484 Denial of service in gnu:binutils
- CVE-2018-18483 Integer overflow in gnu:binutils
- CVE-2018-18482 libpg_query memory leak
- CVE-2018-18481 Memory corruption in libopencad project:libopencad
- CVE-2018-18480 Memory corruption in libopencad project:libopencad
- CVE-2018-1848 Cross-site scripting in Business Automation Workflow
- CVE-2018-18478 LibreNMS XSS Vulnerability
- CVE-2018-18476 mysql-bunuuid-rails vulnerable to SQL injection
- CVE-2018-18475 File upload in zohocorp:manageengine opmanager
- CVE-2018-18473 Hardcoded credentials in patlite:nbm-d88n firmware
- CVE-2018-18472 Command injection in westerndigital:my book live firmware
- CVE-2018-18471 XML external entity in axentra:hipserv
- CVE-2018-1847 Path traversal in Financial Transaction Manager
- CVE-2018-18467 Missing authorization in conversations:conversations
- CVE-2018-18466 Information disclosure in securenvoy:securaccess