# Vulnerabilities published in 2018


- [CVE-2018-18206](https://insights.sbomify.com/CVE-2018-18206/): Denial of Service in Bytom (high 7.5)
- [CVE-2018-18205](https://insights.sbomify.com/CVE-2018-18205/): Information disclosure in top-vision:cc8800ce firmware (high 7.5)
- [CVE-2018-18203](https://insights.sbomify.com/CVE-2018-18203/): Security feature bypass in subaru:starlink 2017 firmware (medium 6.4)
- [CVE-2018-18202](https://insights.sbomify.com/CVE-2018-18202/): Hardcoded credentials in ibm:qlogic 20-port 4\/8 gb san switch module firmware (critical 9.8)
- [CVE-2018-18201](https://insights.sbomify.com/CVE-2018-18201/): Cross-site request forgery in qibosoft:qibosoft (high 8.8)
- [CVE-2018-18200](https://insights.sbomify.com/CVE-2018-18200/): SQL injection in redaxo:redaxo (critical 9.8)
- [CVE-2018-1820](https://insights.sbomify.com/CVE-2018-1820/): Cross-site scripting in WebSphere Portal (medium 5.4)
- [CVE-2018-18199](https://insights.sbomify.com/CVE-2018-18199/): Cross-site scripting in redaxo:redaxo (medium 6.1)
- [CVE-2018-18198](https://insights.sbomify.com/CVE-2018-18198/): Cross-site scripting in redaxo:redaxo (medium 6.1)
- [CVE-2018-18197](https://insights.sbomify.com/CVE-2018-18197/): Memory corruption in linuxsampler:libgig (critical 9.8)
- [CVE-2018-18196](https://insights.sbomify.com/CVE-2018-18196/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-18195](https://insights.sbomify.com/CVE-2018-18195/): Denial of service in linuxsampler:libgig (medium 6.5)
- [CVE-2018-18194](https://insights.sbomify.com/CVE-2018-18194/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-18193](https://insights.sbomify.com/CVE-2018-18193/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2018-18192](https://insights.sbomify.com/CVE-2018-18192/): Null dereference in linuxsampler:libgig (medium 6.5)
- [CVE-2018-18191](https://insights.sbomify.com/CVE-2018-18191/): Cross-site request forgery in finecms:finecms (high 8.8)
- [CVE-2018-18190](https://insights.sbomify.com/CVE-2018-18190/): Denial of service in gopro:gpmf-parser (medium 5.5)
- [CVE-2018-1819](https://insights.sbomify.com/CVE-2018-1819/): SQL injection in Financial Transaction Manager (medium 6.3)
- [CVE-2018-1818](https://insights.sbomify.com/CVE-2018-1818/): Hardcoded credentials in Security Guardium (medium 5.9)
- [CVE-2018-1817](https://insights.sbomify.com/CVE-2018-1817/): Cross-site scripting in Security Guardium (medium 6.1)
- [CVE-2018-1815](https://insights.sbomify.com/CVE-2018-1815/): Cross-site scripting in Security Access Manager Appliance (medium 6.1)
- [CVE-2018-1814](https://insights.sbomify.com/CVE-2018-1814/): Weak cryptography in Security Access Manager Appliance (medium 5.9)
- [CVE-2018-1813](https://insights.sbomify.com/CVE-2018-1813/): Security feature bypass in Security Access Manager Appliance (medium 4.3)
- [CVE-2018-1812](https://insights.sbomify.com/CVE-2018-1812/): Cross-site scripting in Robotic Process Automation with Automation Anywhere (medium 5.4)
- [CVE-2018-18098](https://insights.sbomify.com/CVE-2018-18098/): Privilege escalation in Intel(R) SGX SDK and Platform Software for Windows (high 7.3)
- [CVE-2018-18097](https://insights.sbomify.com/CVE-2018-18097/): Privilege escalation in Intel Solid State Drive Toolbox (high 7.8)
- [CVE-2018-18096](https://insights.sbomify.com/CVE-2018-18096/): Memory corruption in Intel QuickAssist Technology for Linux (medium 5.5)
- [CVE-2018-18095](https://insights.sbomify.com/CVE-2018-18095/): Auth bypass in Intel(R) SSD DC S4500/S4600 Series (medium 6.8)
- [CVE-2018-18094](https://insights.sbomify.com/CVE-2018-18094/): Privilege escalation in Intel(R) Media SDK Advisory (high 7.8)
- [CVE-2018-18093](https://insights.sbomify.com/CVE-2018-18093/): Misconfiguration in Intel VTune Amplifier (high 7.8)
- [CVE-2018-18091](https://insights.sbomify.com/CVE-2018-18091/): Use after free in Intel(R) Graphics Driver for Windows (medium 6.5)
- [CVE-2018-18090](https://insights.sbomify.com/CVE-2018-18090/): Memory corruption in Intel(R) Graphics Driver for Windows (medium 5.5)
- [CVE-2018-18089](https://insights.sbomify.com/CVE-2018-18089/): Memory corruption in Intel(R) Graphics Driver for Windows (medium 5.5)
- [CVE-2018-18088](https://insights.sbomify.com/CVE-2018-18088/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2018-18087](https://insights.sbomify.com/CVE-2018-18087/): Cross-site scripting in bixie:portfolio (medium 5.4)
- [CVE-2018-18086](https://insights.sbomify.com/CVE-2018-18086/): File upload in phome:empirecms (high 8.8)
- [CVE-2018-18084](https://insights.sbomify.com/CVE-2018-18084/): SQL injection in comsenz:duomicms (critical 9.8)
- [CVE-2018-18083](https://insights.sbomify.com/CVE-2018-18083/): Code injection in comsenz:duomicms (critical 9.8)
- [CVE-2018-18082](https://insights.sbomify.com/CVE-2018-18082/): Cross-site scripting in bijiadao:waimai super cms (medium 6.1)
- [CVE-2018-1808](https://insights.sbomify.com/CVE-2018-1808/): Code injection in WebSphere Commerce (medium 4.3)
- [CVE-2018-18075](https://insights.sbomify.com/CVE-2018-18075/): SQL injection in wikidforum project:wikidforum (critical 9.8)
- [CVE-2018-18074](https://insights.sbomify.com/CVE-2018-18074/): Insufficiently Protected Credentials in Requests (high 7.5)
- [CVE-2018-18073](https://insights.sbomify.com/CVE-2018-18073/): Security feature bypass in artifex:ghostscript (medium 6.3)
- [CVE-2018-18071](https://insights.sbomify.com/CVE-2018-18071/): Weak cryptography in mercedes-benz:mercedes me (high 7.5)
- [CVE-2018-18070](https://insights.sbomify.com/CVE-2018-18070/): Denial of service in mercedes-benz:comand (medium 5.9)
- [CVE-2018-18069](https://insights.sbomify.com/CVE-2018-18069/): Cross-site scripting in wpml:wpml (medium 6.1)
- [CVE-2018-18068](https://insights.sbomify.com/CVE-2018-18068/): Privilege escalation in raspberrypi:raspberry pi 3 model b\+ firmware (critical 9.8)
- [CVE-2018-18066](https://insights.sbomify.com/CVE-2018-18066/): Null dereference in net-snmp:net-snmp (high 7.5)
- [CVE-2018-18065](https://insights.sbomify.com/CVE-2018-18065/): Null dereference in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-18064](https://insights.sbomify.com/CVE-2018-18064/): Memory corruption in cairographics:cairo (medium 6.5)
- [CVE-2018-18062](https://insights.sbomify.com/CVE-2018-18062/): Cross-site scripting in tecrail:responsive filemanager (medium 6.1)
- [CVE-2018-18061](https://insights.sbomify.com/CVE-2018-18061/): Auth bypass in tecrail:responsive filemanager (high 7.5)
- [CVE-2018-18060](https://insights.sbomify.com/CVE-2018-18060/): Memory corruption in bitdefender:scan engines (medium 5.3)
- [CVE-2018-18059](https://insights.sbomify.com/CVE-2018-18059/): Memory corruption in bitdefender:scan engines (medium 5.3)
- [CVE-2018-18058](https://insights.sbomify.com/CVE-2018-18058/): Denial of service in bitdefender:scan engines (medium 5.3)
- [CVE-2018-18056](https://insights.sbomify.com/CVE-2018-18056/): Information disclosure in ti:tm4c123 firmware (medium 4.6)
- [CVE-2018-1805](https://insights.sbomify.com/CVE-2018-1805/): Information disclosure in Security Access Manager Appliance (medium 4.3)
- [CVE-2018-1804](https://insights.sbomify.com/CVE-2018-1804/): Misconfiguration in Security Access Manager Appliance (low 3.7)
- [CVE-2018-18035](https://insights.sbomify.com/CVE-2018-18035/): Cross-site scripting in open-emr:openemr (medium 6.1)
- [CVE-2018-1803](https://insights.sbomify.com/CVE-2018-1803/): Other in Security Access Manager Appliance (medium 6.1)
- [CVE-2018-18029](https://insights.sbomify.com/CVE-2018-18029/): Cross-site scripting in naviwebs:navigate cms (medium 5.4)
- [CVE-2018-18026](https://insights.sbomify.com/CVE-2018-18026/): Memory corruption in iobit:malware fighter (high 7.8)
- [CVE-2018-18025](https://insights.sbomify.com/CVE-2018-18025/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2018-18024](https://insights.sbomify.com/CVE-2018-18024/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2018-18023](https://insights.sbomify.com/CVE-2018-18023/): Memory corruption in imagemagick:imagemagick (medium 6.5)
- [CVE-2018-18021](https://insights.sbomify.com/CVE-2018-18021/): Privilege escalation in canonical:ubuntu linux (high 7.1)
- [CVE-2018-18020](https://insights.sbomify.com/CVE-2018-18020/): Denial of service in qpdf project:qpdf (low 3.3)
- [CVE-2018-1802](https://insights.sbomify.com/CVE-2018-1802/): Privilege escalation in DB2 for Linux, UNIX and Windows (high 8.4)
- [CVE-2018-18019](https://insights.sbomify.com/CVE-2018-18019/): Cross-site scripting in tribulant:slideshow gallery (medium 6.1)
- [CVE-2018-18018](https://insights.sbomify.com/CVE-2018-18018/): SQL injection in tribulant:slideshow gallery (critical 9.8)
- [CVE-2018-18017](https://insights.sbomify.com/CVE-2018-18017/): Cross-site scripting in tribulant:slideshow gallery (medium 6.1)
- [CVE-2018-18016](https://insights.sbomify.com/CVE-2018-18016/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2018-18014](https://insights.sbomify.com/CVE-2018-18014/): Auth bypass in citrix:xenmobile server (medium 4.8)
- [CVE-2018-18013](https://insights.sbomify.com/CVE-2018-18013/): Deserialization in citrix:xenmobile server (high 7.8)
- [CVE-2018-1801](https://insights.sbomify.com/CVE-2018-1801/): XML external entity in App Connect (medium 5.3)
- [CVE-2018-18009](https://insights.sbomify.com/CVE-2018-18009/): Hardcoded credentials in dlink:dir-140l firmware (critical 9.8)
- [CVE-2018-18008](https://insights.sbomify.com/CVE-2018-18008/): Hardcoded credentials in dlink:dir-140l firmware (critical 9.8)
- [CVE-2018-18007](https://insights.sbomify.com/CVE-2018-18007/): Hardcoded credentials in dlink:dsl-2770l firmware (critical 9.8)
- [CVE-2018-18006](https://insights.sbomify.com/CVE-2018-18006/): Hardcoded credentials in ricoh:myprint (critical 9.8)
- [CVE-2018-18005](https://insights.sbomify.com/CVE-2018-18005/): Cross-site scripting in vivotek:camera (medium 6.1)
- [CVE-2018-18004](https://insights.sbomify.com/CVE-2018-18004/): Missing authorization in vivotek:camera (medium 5.3)
- [CVE-2018-1800](https://insights.sbomify.com/CVE-2018-1800/): Information disclosure in Sterling B2B Integrator (medium 5.1)
- [CVE-2018-17997](https://insights.sbomify.com/CVE-2018-17997/): Cross-site scripting in layerbb:layerbb (medium 6.1)
- [CVE-2018-17996](https://insights.sbomify.com/CVE-2018-17996/): Cross-site request forgery in layerbb:layerbb (medium 6.5)
- [CVE-2018-17990](https://insights.sbomify.com/CVE-2018-17990/): Command injection in dlink:dsl-3782 firmware (high 8.8)
- [CVE-2018-1799](https://insights.sbomify.com/CVE-2018-1799/): Other in DB2 for Linux, UNIX and Windows (medium 6.2)
- [CVE-2018-17989](https://insights.sbomify.com/CVE-2018-17989/): Cross-site scripting in dlink:dsl-3782 firmware (medium 5.4)
- [CVE-2018-17988](https://insights.sbomify.com/CVE-2018-17988/): SQL injection in layerbb:layerbb (critical 9.8)
- [CVE-2018-17987](https://insights.sbomify.com/CVE-2018-17987/): Weak cryptography in hashheroes:hashheroes (high 7.5)
- [CVE-2018-17986](https://insights.sbomify.com/CVE-2018-17986/): Cross-site request forgery in razorcms:razorcms (high 8.8)
- [CVE-2018-17985](https://insights.sbomify.com/CVE-2018-17985/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2018-17984](https://insights.sbomify.com/CVE-2018-17984/): Path traversal in ispconfig:ispconfig (high 7.8)
- [CVE-2018-17983](https://insights.sbomify.com/CVE-2018-17983/): Mercurial Out-of-bounds Read vulnerability (critical 9.1)
- [CVE-2018-17981](https://insights.sbomify.com/CVE-2018-17981/): Cross-site scripting in lifesize:express 220 firmware (medium 6.1)
- [CVE-2018-17980](https://insights.sbomify.com/CVE-2018-17980/): Code injection in nomachine:nomachine (high 7.8)
- [CVE-2018-1798](https://insights.sbomify.com/CVE-2018-1798/): Cross-site scripting in WebSphere Application Server (medium 6.1)
- [CVE-2018-17977](https://insights.sbomify.com/CVE-2018-17977/): Denial of service in linux:linux kernel (medium 4.4)
- [CVE-2018-17976](https://insights.sbomify.com/CVE-2018-17976/): Information disclosure in gitlab:gitlab (medium 6.5)
- [CVE-2018-17975](https://insights.sbomify.com/CVE-2018-17975/): Information disclosure in gitlab:gitlab (medium 5.3)
- [CVE-2018-17974](https://insights.sbomify.com/CVE-2018-17974/): Memory corruption in broadcom:tcpreplay (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/85/