# Vulnerabilities published in 2018 - [CVE-2018-18348](https://insights.sbomify.com/CVE-2018-18348/): Other in Chrome (medium 4.3) - [CVE-2018-18347](https://insights.sbomify.com/CVE-2018-18347/): Security feature bypass in Chrome (high 8.8) - [CVE-2018-18346](https://insights.sbomify.com/CVE-2018-18346/): Other in Chrome (medium 6.5) - [CVE-2018-18345](https://insights.sbomify.com/CVE-2018-18345/): Security feature bypass in Chrome (medium 6.5) - [CVE-2018-18344](https://insights.sbomify.com/CVE-2018-18344/): Privilege escalation in debian:debian linux (medium 6.5) - [CVE-2018-18343](https://insights.sbomify.com/CVE-2018-18343/): Use after free in Chrome (high 8.8) - [CVE-2018-18342](https://insights.sbomify.com/CVE-2018-18342/): Memory corruption in Chrome (high 8.8) - [CVE-2018-18341](https://insights.sbomify.com/CVE-2018-18341/): Integer overflow in Chrome (high 8.8) - [CVE-2018-18340](https://insights.sbomify.com/CVE-2018-18340/): Use after free in Chrome (high 8.8) - [CVE-2018-1834](https://insights.sbomify.com/CVE-2018-1834/): Privilege escalation in DB2 for Linux, UNIX and Windows (high 7.4) - [CVE-2018-18339](https://insights.sbomify.com/CVE-2018-18339/): Use after free in Chrome (high 8.8) - [CVE-2018-18338](https://insights.sbomify.com/CVE-2018-18338/): Memory corruption in Chrome (high 8.8) - [CVE-2018-18337](https://insights.sbomify.com/CVE-2018-18337/): Use after free in Chrome (high 8.8) - [CVE-2018-18336](https://insights.sbomify.com/CVE-2018-18336/): Use after free in Chrome (high 8.8) - [CVE-2018-18335](https://insights.sbomify.com/CVE-2018-18335/): Memory corruption in Chrome (high 8.8) - [CVE-2018-18334](https://insights.sbomify.com/CVE-2018-18334/): Security feature bypass in Trend Micro Dr. Safety for Android (Consumer) (high 7.5) - [CVE-2018-18333](https://insights.sbomify.com/CVE-2018-18333/): Privilege escalation in Trend Micro Security (Consumer) (high 7.8) - [CVE-2018-18332](https://insights.sbomify.com/CVE-2018-18332/): Misconfiguration in Trend Micro OfficeScan (high 7.5) - [CVE-2018-18331](https://insights.sbomify.com/CVE-2018-18331/): Misconfiguration in Trend Micro OfficeScan (high 7.5) - [CVE-2018-18330](https://insights.sbomify.com/CVE-2018-18330/): Other in Trend Micro Dr. Safety for Android (Consumer) (medium 6.5) - [CVE-2018-1833](https://insights.sbomify.com/CVE-2018-1833/): Other in Event Streams (medium 5.3) - [CVE-2018-18329](https://insights.sbomify.com/CVE-2018-18329/): Memory corruption in Trend Micro Antivirus for Mac (Consumer) (high 7.8) - [CVE-2018-18328](https://insights.sbomify.com/CVE-2018-18328/): Memory corruption in Trend Micro Antivirus for Mac (Consumer) (high 7.8) - [CVE-2018-18327](https://insights.sbomify.com/CVE-2018-18327/): Memory corruption in Trend Micro Antivirus for Mac (Consumer) (high 7.8) - [CVE-2018-18326](https://insights.sbomify.com/CVE-2018-18326/): Insufficient Entropy in DotNetNuke (high 7.5) - [CVE-2018-18325](https://insights.sbomify.com/CVE-2018-18325/): DotNetNuke (DNN) Inadequate Encryption Strength (high 7.5, exploited in the wild) - [CVE-2018-18324](https://insights.sbomify.com/CVE-2018-18324/): Cross-site scripting in control-webpanel:webpanel (medium 6.1) - [CVE-2018-18323](https://insights.sbomify.com/CVE-2018-18323/): Path traversal in control-webpanel:webpanel (high 7.5) - [CVE-2018-18322](https://insights.sbomify.com/CVE-2018-18322/): Command injection in control-webpanel:webpanel (critical 9.8) - [CVE-2018-18320](https://insights.sbomify.com/CVE-2018-18320/): Command injection in asuswrt-merlin project:rt-ac1900 firmware (critical 9.8) - [CVE-2018-18319](https://insights.sbomify.com/CVE-2018-18319/): Code injection in asuswrt-merlin project:rt-ac1900 firmware (critical 9.8) - [CVE-2018-18318](https://insights.sbomify.com/CVE-2018-18318/): Null dereference in qiku:360 mobile phone n6 pro firmware (high 7.5) - [CVE-2018-18317](https://insights.sbomify.com/CVE-2018-18317/): Cross-site request forgery in dscms project:dscms (high 8.8) - [CVE-2018-18316](https://insights.sbomify.com/CVE-2018-18316/): Cross-site request forgery in emlog:emlog (high 8.8) - [CVE-2018-18315](https://insights.sbomify.com/CVE-2018-18315/): File upload in mossle:lemon (high 7.5) - [CVE-2018-18314](https://insights.sbomify.com/CVE-2018-18314/): Memory corruption in canonical:ubuntu linux (critical 9.8) - [CVE-2018-18313](https://insights.sbomify.com/CVE-2018-18313/): Memory corruption in apple:mac os x (critical 9.1) - [CVE-2018-18312](https://insights.sbomify.com/CVE-2018-18312/): Memory corruption in canonical:ubuntu linux (critical 9.8) - [CVE-2018-18311](https://insights.sbomify.com/CVE-2018-18311/): Memory corruption in apple:mac os x (critical 9.8) - [CVE-2018-18310](https://insights.sbomify.com/CVE-2018-18310/): Memory corruption in canonical:ubuntu linux (medium 5.5) - [CVE-2018-18309](https://insights.sbomify.com/CVE-2018-18309/): Memory corruption in gnu:binutils (medium 5.5) - [CVE-2018-18308](https://insights.sbomify.com/CVE-2018-18308/): Cross-site scripting in bigtreecms:bigtree cms (medium 6.1) - [CVE-2018-18307](https://insights.sbomify.com/CVE-2018-18307/): Cross-site scripting in alchemy-cms:alchemy cms (medium 6.1) - [CVE-2018-18296](https://insights.sbomify.com/CVE-2018-18296/): Cross-site scripting in metinfo:metinfo (medium 6.1) - [CVE-2018-18291](https://insights.sbomify.com/CVE-2018-18291/): Cross-site scripting in asus:rt-ac58u firmware (medium 6.1) - [CVE-2018-18290](https://insights.sbomify.com/CVE-2018-18290/): Cross-site scripting in nconsulting:nc-cms (medium 4.8) - [CVE-2018-1829](https://insights.sbomify.com/CVE-2018-1829/): Cross-site scripting in Rational Quality Manager (medium 5.4) - [CVE-2018-18289](https://insights.sbomify.com/CVE-2018-18289/): Information disclosure in mesilat:zabbix (high 7.5) - [CVE-2018-18288](https://insights.sbomify.com/CVE-2018-18288/): Open redirect in crushftp:crushftp (medium 6.1) - [CVE-2018-18287](https://insights.sbomify.com/CVE-2018-18287/): Information disclosure in asus:rt-ac58u firmware (medium 5.3) - [CVE-2018-18286](https://insights.sbomify.com/CVE-2018-18286/): SQL injection in mitel:cmg suite (critical 9.8) - [CVE-2018-18285](https://insights.sbomify.com/CVE-2018-18285/): SQL injection in mitel:cmg suite (critical 9.8) - [CVE-2018-18284](https://insights.sbomify.com/CVE-2018-18284/): Security feature bypass in artifex:ghostscript (high 8.6) - [CVE-2018-18282](https://insights.sbomify.com/CVE-2018-18282/): Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page (medium 6.1) - [CVE-2018-18281](https://insights.sbomify.com/CVE-2018-18281/): Use after free in canonical:ubuntu linux (high 7.8) - [CVE-2018-1828](https://insights.sbomify.com/CVE-2018-1828/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2018-18276](https://insights.sbomify.com/CVE-2018-18276/): Cross-site scripting in profiles project:profiles (medium 4.8) - [CVE-2018-18274](https://insights.sbomify.com/CVE-2018-18274/): Memory corruption in pdfalto project:pdfalto (high 7.8) - [CVE-2018-18271](https://insights.sbomify.com/CVE-2018-18271/): Cross-site scripting in cmsmadesimple:cms made simple (medium 6.1) - [CVE-2018-18270](https://insights.sbomify.com/CVE-2018-18270/): Cross-site scripting in cmsmadesimple:cms made simple (medium 6.1) - [CVE-2018-1827](https://insights.sbomify.com/CVE-2018-1827/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2018-18264](https://insights.sbomify.com/CVE-2018-18264/): Auth bypass in kubernetes:dashboard (high 7.5) - [CVE-2018-18262](https://insights.sbomify.com/CVE-2018-18262/): Cross-site scripting in zohocorp:manageengine opmanager (medium 6.1) - [CVE-2018-18261](https://insights.sbomify.com/CVE-2018-18261/): Cross-site scripting in bijiadao:waimai super cms (medium 6.1) - [CVE-2018-18260](https://insights.sbomify.com/CVE-2018-18260/): Camaleon CMS vulnerable to Stored Cross-site Scripting (medium 6.1) - [CVE-2018-1826](https://insights.sbomify.com/CVE-2018-1826/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2018-18259](https://insights.sbomify.com/CVE-2018-18259/): Cross-site scripting in luya:luya cms (medium 6.1) - [CVE-2018-18258](https://insights.sbomify.com/CVE-2018-18258/): Code injection in bagesoft:bagecms (critical 9.8) - [CVE-2018-18257](https://insights.sbomify.com/CVE-2018-18257/): Path traversal in bagesoft:bagecms (high 7.5) - [CVE-2018-18256](https://insights.sbomify.com/CVE-2018-18256/): Privilege escalation in capmon:access manager (high 7.8) - [CVE-2018-18255](https://insights.sbomify.com/CVE-2018-18255/): Privilege escalation in capmon:access manager (high 7.8) - [CVE-2018-18254](https://insights.sbomify.com/CVE-2018-18254/): Misconfiguration in capmon:access manager (high 7.8) - [CVE-2018-18253](https://insights.sbomify.com/CVE-2018-18253/): Race condition in capmon:access manager (high 7.0) - [CVE-2018-18252](https://insights.sbomify.com/CVE-2018-18252/): Privilege escalation in capmon:access manager (high 7.8) - [CVE-2018-18251](https://insights.sbomify.com/CVE-2018-18251/): SQL injection in deltek:vision (critical 9.8) - [CVE-2018-18250](https://insights.sbomify.com/CVE-2018-18250/): Other in icinga:icinga web 2 (high 7.5) - [CVE-2018-1825](https://insights.sbomify.com/CVE-2018-1825/): Cross-site scripting in Rational Quality Manager (medium 5.4) - [CVE-2018-18249](https://insights.sbomify.com/CVE-2018-18249/): Code injection in icinga:icinga web 2 (critical 9.8) - [CVE-2018-18248](https://insights.sbomify.com/CVE-2018-18248/): Cross-site scripting in icinga:icinga web 2 (medium 6.1) - [CVE-2018-18247](https://insights.sbomify.com/CVE-2018-18247/): Cross-site scripting in icinga:icinga web 2 (medium 5.4) - [CVE-2018-18246](https://insights.sbomify.com/CVE-2018-18246/): Cross-site request forgery in icinga:icinga web 2 (medium 6.5) - [CVE-2018-18245](https://insights.sbomify.com/CVE-2018-18245/): Cross-site scripting in debian:debian linux (medium 5.4) - [CVE-2018-18244](https://insights.sbomify.com/CVE-2018-18244/): Cross-site scripting in vivotek:camera (medium 6.1) - [CVE-2018-18242](https://insights.sbomify.com/CVE-2018-18242/): SQL injection in youke365:youke 365 (critical 9.8) - [CVE-2018-18240](https://insights.sbomify.com/CVE-2018-18240/): Pippo RCE Vulnerability (critical 9.8) - [CVE-2018-1824](https://insights.sbomify.com/CVE-2018-1824/): Cross-site scripting in Rational Quality Manager (medium 5.4) - [CVE-2018-1823](https://insights.sbomify.com/CVE-2018-1823/): Cross-site scripting in Rational Quality Manager (medium 5.4) - [CVE-2018-18227](https://insights.sbomify.com/CVE-2018-18227/): Null dereference in debian:debian linux (high 7.5) - [CVE-2018-18226](https://insights.sbomify.com/CVE-2018-18226/): Denial of service in debian:debian linux (high 7.5) - [CVE-2018-18225](https://insights.sbomify.com/CVE-2018-18225/): Denial of service in debian:debian linux (high 7.5) - [CVE-2018-18224](https://insights.sbomify.com/CVE-2018-18224/): Memory corruption in opendesign:drawings sdk (high 8.1) - [CVE-2018-18223](https://insights.sbomify.com/CVE-2018-18223/): Memory corruption in opendesign:drawings sdk (high 8.1) - [CVE-2018-1822](https://insights.sbomify.com/CVE-2018-1822/): Auth bypass in FlashSystem 900 (critical 9.8) - [CVE-2018-18215](https://insights.sbomify.com/CVE-2018-18215/): Cross-site request forgery in youke365:youke 365 (high 8.8) - [CVE-2018-18211](https://insights.sbomify.com/CVE-2018-18211/): SQL injection in pbootcms:pbootcms (high 8.1) - [CVE-2018-18210](https://insights.sbomify.com/CVE-2018-18210/): Cross-site scripting in dilicms:dilicms (medium 6.1) - [CVE-2018-1821](https://insights.sbomify.com/CVE-2018-1821/): XML external entity in Operational Decision Management (high 7.1) - [CVE-2018-18209](https://insights.sbomify.com/CVE-2018-18209/): Cross-site scripting in dilicms:dilicms (medium 6.1) - [CVE-2018-18208](https://insights.sbomify.com/CVE-2018-18208/): Cross-site scripting in virtualmin:virtualmin (medium 6.1) - [CVE-2018-18207](https://insights.sbomify.com/CVE-2018-18207/): Other in virtualmin:virtualmin (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/84/