Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 83 of 163.
- CVE-2018-18461 Code injection in kibokolabs:arigato autoresponder and newsletter
- CVE-2018-18460 Cross-site scripting in 3cx:live chat
- CVE-2018-1846 XML external entity in Rational Engineering Lifecycle Manager
- CVE-2018-18459 Null dereference in xpdfreader:xpdf
- CVE-2018-18458 Null dereference in xpdfreader:xpdf
- CVE-2018-18457 Null dereference in xpdfreader:xpdf
- CVE-2018-18456 Memory corruption in xpdfreader:xpdf
- CVE-2018-18455 Memory corruption in xpdfreader:xpdf
- CVE-2018-18454 Memory corruption in xpdfreader:xpdf
- CVE-2018-18450 SQL injection in pbootcms:pbootcms
- CVE-2018-1845 XML external entity in InfoSphere Information Server
- CVE-2018-18449 Cross-site request forgery in phome:empirecms
- CVE-2018-18447 Deserialization in dotpdn:paint.net
- CVE-2018-18446 Deserialization in dotpdn:paint.net
- CVE-2018-18445 Memory corruption in canonical:ubuntu linux
- CVE-2018-18444 Memory corruption in ilm:openexr
- CVE-2018-18443 Denial of service in ilm:openexr
- CVE-2018-18442 Denial of service in d-link:dcs-825l firmware
- CVE-2018-18441 Information disclosure in d-link:dcs-2102 firmware
- CVE-2018-18440 Memory corruption in denx:u-boot
- CVE-2018-1844 XML external entity in FileNet Content Manager
- CVE-2018-18439 Memory corruption in denx:u-boot
- CVE-2018-18438 Integer overflow in qemu:qemu
- CVE-2018-18437 Cross-site scripting in axiositalia:registro elettronico
- CVE-2018-18436 Cross-site request forgery in jtbc:jtbc php
- CVE-2018-18435 Misconfiguration in kioware:kioware server
- CVE-2018-18434 Path traversal in linlinjava:litemall
- CVE-2018-18433 Cross-site scripting in destoon:destoon b2b
- CVE-2018-18432 Cross-site request forgery in destoon:destoon b2b
- CVE-2018-18431 Cross-site scripting in destoon:destoon b2b
- CVE-2018-18430 Cross-site scripting in destoon:destoon b2b
- CVE-2018-1843 Information disclosure in Cloud Private
- CVE-2018-18428 Missing authorization in tp-link:tl-sc3130 firmware
- CVE-2018-18427 SQL injection in s-cms:s-cms
- CVE-2018-18426 Code injection in s-cms:s-cms
- CVE-2018-18425 Business logic in primeo project:primeo
- CVE-2018-18422 Cross-site request forgery in usualtool:usualtoolcms
- CVE-2018-18420 Zenario CMS vulnerable to CSRF
- CVE-2018-1842 Security feature bypass in Cognos Analytics
- CVE-2018-18419 Cross-site scripting in ardawan:user management
- CVE-2018-18417 Cross-site scripting in creativeitem:ekushey project manager
- CVE-2018-18416 Cross-site scripting in pokkho:lango
- CVE-2018-1841 Information disclosure in Cloud Private
- CVE-2018-18409 Memory corruption in canonical:ubuntu linux
- CVE-2018-18408 Use after free in broadcom:tcpreplay
- CVE-2018-18407 Memory corruption in broadcom:tcpreplay
- CVE-2018-18406 XML external entity in tufin:securetrack
- CVE-2018-18405 Cross-site scripting in jquery:jquery
- CVE-2018-1840 Privilege escalation in WebSphere Application Server
- CVE-2018-18399 SQL injection in jco:karma
- CVE-2018-18398 Memory corruption in xfce:thunar
- CVE-2018-18397 Missing authorization in canonical:ubuntu linux
- CVE-2018-18396 Other in ThingsPro IIoT Gateway and Device Management Software Solutions
- CVE-2018-18395 Hardcoded credentials in ThingsPro IIoT Gateway and Device Management Software Solutions
- CVE-2018-18394 Information disclosure in ThingsPro IIoT Gateway and Device Management Software Solutions
- CVE-2018-18393 Other in ThingsPro IIoT Gateway and Device Management Software Solutions
- CVE-2018-18392 Privilege escalation in ThingsPro IIoT Gateway and Device Management Software Solutions
- CVE-2018-18391 Privilege escalation in ThingsPro IIoT Gateway and Device Management Software Solutions
- CVE-2018-18390 Information disclosure in ThingsPro IIoT Gateway and Device Management Software Solutions
- CVE-2018-18389 Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication
- CVE-2018-18388 Command injection in escanav:escan anti-virus
- CVE-2018-18387 Privilege escalation in playsms project:playsms
- CVE-2018-18386 Denial of service in canonical:ubuntu linux
- CVE-2018-18385 Asciidoctor Infinite Loop vulnerability
- CVE-2018-18384 Memory corruption in unzip project:unzip
- CVE-2018-18382 File upload in coderpixel:advanced hrm
- CVE-2018-18381 Cross-site scripting in zblogcn:z-blogphp
- CVE-2018-18380 Auth bypass in bigtreecms:bigtree cms
- CVE-2018-1838 Information disclosure in WebSphere Application Server
- CVE-2018-18379 Cross-site scripting in elementor:elementor page builder
- CVE-2018-18377 Missing authorization in orange:airbox firmware
- CVE-2018-18376 Information disclosure in orange:airbox firmware
- CVE-2018-18375 Information disclosure in orange:airbox firmware
- CVE-2018-18374 Cross-site scripting in metinfo:metinfo
- CVE-2018-18373 Cross-site scripting in schiocco:support board - chat and help desk
- CVE-2018-18372 Cross-site scripting in kaasoft:library cms
- CVE-2018-18371 Information disclosure in Symantec Advanced Secure Gateway (ASG)
- CVE-2018-18370 Cross-site scripting in Symantec Advanced Secure Gateway (ASG)
- CVE-2018-18369 Other in Norton Security
- CVE-2018-18368 Privilege escalation in Symantec Endpoint Protection Manager (SEPM)
- CVE-2018-18367 Other in Symantec Endpoint Protection Manager
- CVE-2018-18366 Information disclosure in Norton Security
- CVE-2018-18365 Other in Norton Password Manager
- CVE-2018-18364 Other in Ghost Solution Suite (GSS)
- CVE-2018-18363 Security feature bypass in Norton App Lock
- CVE-2018-18362 Cross-site scripting in Norton Password Manager
- CVE-2018-18361 Cross-site scripting in nconsulting:nc-cms
- CVE-2018-1836 Cross-site scripting in MQ
- CVE-2018-18359 Memory corruption in Chrome
- CVE-2018-18358 Security feature bypass in Chrome
- CVE-2018-18357 Security feature bypass in Chrome
- CVE-2018-18356 Use after free in Chrome
- CVE-2018-18355 Security feature bypass in Chrome
- CVE-2018-18354 Security feature bypass in Chrome
- CVE-2018-18353 Other in Chrome
- CVE-2018-18352 Security feature bypass in Chrome
- CVE-2018-18351 Security feature bypass in Chrome
- CVE-2018-18350 Security feature bypass in Chrome
- CVE-2018-1835 XML external entity in Daeja ViewONE
- CVE-2018-18349 Security feature bypass in Chrome