Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 86 of 163.
- CVE-2018-17972 Race condition in canonical:ubuntu linux
- CVE-2018-1797 Path traversal in WebSphere Application Server
- CVE-2018-17969 Information disclosure in samsung:scx-6545x firmware
- CVE-2018-17968 Weak cryptography in ruletkaio:ruletkaio
- CVE-2018-17967 Denial of service in imagemagick:imagemagick
- CVE-2018-17966 Denial of service in imagemagick:imagemagick
- CVE-2018-17965 Denial of service in imagemagick:imagemagick
- CVE-2018-17964 Cross-site scripting in aryanic:highportal
- CVE-2018-17963 Integer overflow in canonical:ubuntu linux
- CVE-2018-17962 Integer overflow in canonical:ubuntu linux
- CVE-2018-17961 Security feature bypass in artifex:ghostscript
- CVE-2018-17960 Ckeditor XSS Vulnerability
- CVE-2018-1796 Privilege escalation in Informix Dynamic Server Enterprise Edition
- CVE-2018-17958 Integer overflow in canonical:ubuntu linux
- CVE-2018-17957 yast2-rmt leaks database passwords in process list
- CVE-2018-17956 Password exposed in process listing
- CVE-2018-17955 Static tempfile name allows overwriting of arbitrary files
- CVE-2018-17954 crowbar provision leaks admin password to all nodes in cleartext
- CVE-2018-17953 pam_access does not handle netmask matches correctly
- CVE-2018-17952 Cross-site scripting in NetIQ eDirectory 9.1 SP2
- CVE-2018-17950 Missing authorization in NetIQ eDirectory 9.1 SP2
- CVE-2018-1795 Cross-site scripting in Robotic Process Automation with Automation Anywhere
- CVE-2018-17949 Cross-site scripting in NetIQ iManager 3.1 SP2
- CVE-2018-17948 Open redirect in Access Manager
- CVE-2018-17947 Cross-site scripting in atmist:snazzy maps
- CVE-2018-17946 Cross-site scripting in tribulant:slideshow gallery
- CVE-2018-17944 Information disclosure in lexmark:cx725h firmware
- CVE-2018-17942 Memory corruption in gnu:gnulib
- CVE-2018-1794 Cross-site scripting in WebSphere Application Server
- CVE-2018-17939 Information disclosure in gitlab:gitlab
- CVE-2018-17938 Other in synacor:zimbra collaboration suite
- CVE-2018-17937 Memory corruption in gpsd and microjson (Open Source Project)
- CVE-2018-17936 File upload in NUUO CMS
- CVE-2018-17935 Weak cryptography in F25 Series
- CVE-2018-17934 Path traversal in NUUO CMS
- CVE-2018-17933 Privilege escalation in VGo Robot
- CVE-2018-17932 Auth bypass in JUUKO K-800
- CVE-2018-17931 Missing authorization in VGo Robot
- CVE-2018-17930 Memory corruption in Teledyne DALSA Sherlock
- CVE-2018-1793 Cross-site scripting in WebSphere Application Server
- CVE-2018-17929 Memory corruption in Delta Industrial Automation TPEditor
- CVE-2018-17928 Auth bypass in CMS-770
- CVE-2018-17927 Memory corruption in Delta Industrial Automation TPEditor
- CVE-2018-17926 Auth bypass in M2M ETHERNET
- CVE-2018-17925 Cross-site scripting in iFix
- CVE-2018-17924 Missing authorization in Rockwell Automation
- CVE-2018-17923 Auth bypass in SAGA1-L8B
- CVE-2018-17922 Information disclosure in Circontrol CirCarLife all versions prior to 4.3.1
- CVE-2018-17921 Auth bypass in SAGA1-L8B
- CVE-2018-1792 Code injection in MQ
- CVE-2018-17919 Hardcoded credentials in XMeye P2P Cloud Server
- CVE-2018-17918 Auth bypass in Circontrol CirCarLife all versions prior to 4.3.1
- CVE-2018-17917 Information disclosure in XMeye P2P Cloud Server
- CVE-2018-17916 Memory corruption in InduSoft Web Studio, and InTouch Edge HMI (formerly InTouch Machine Edition)
- CVE-2018-17915 Weak cryptography in XMeye P2P Cloud Server
- CVE-2018-17914 Other in InduSoft Web Studio, and InTouch Edge HMI (formerly InTouch Machine Edition)
- CVE-2018-17913 Memory corruption in CX-Supervisor
- CVE-2018-17912 XML external entity in CASE Suite
- CVE-2018-17911 Memory corruption in LAquis SCADA
- CVE-2018-17910 Memory corruption in WebAccess Versions 8.3.2 and prior.
- CVE-2018-1791 Other in Connections
- CVE-2018-17909 Use after free in CX-Supervisor
- CVE-2018-17908 Misconfiguration in WebAccess Versions 8.3.2 and prior.
- CVE-2018-17907 Memory corruption in CX-Supervisor
- CVE-2018-17906 Hardcoded credentials in Philips iSite and IntelliSpace PACS
- CVE-2018-17905 Memory corruption in CX-Supervisor
- CVE-2018-17904 Cross-site scripting in Reliance 4 SCADA/HMI
- CVE-2018-17903 Auth bypass in SAGA1-L8B
- CVE-2018-17902 Auth bypass in STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500
- CVE-2018-17901 Memory corruption in LAquis SCADA
- CVE-2018-17900 Information disclosure in STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500
- CVE-2018-1790 Cross-site request forgery in Financial Transaction Manager
- CVE-2018-17899 Path traversal in LAquis SCADA
- CVE-2018-17898 Denial of service in STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500
- CVE-2018-17897 Integer overflow in lcds:laquis scada
- CVE-2018-17896 Hardcoded credentials in STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500
- CVE-2018-17895 Memory corruption in LAquis SCADA
- CVE-2018-17894 Hardcoded credentials in NUUO CMS
- CVE-2018-17893 Memory corruption in LAquis SCADA
- CVE-2018-17892 Other in NUUO CMS
- CVE-2018-17891 Information disclosure in Vue RIS
- CVE-2018-17890 Supply chain in NUUO CMS
- CVE-2018-1789 Server-side request forgery in API Connect
- CVE-2018-17889 XML external entity in PI Studio
- CVE-2018-17888 Weak cryptography in NUUO CMS
- CVE-2018-17886 Cross-site scripting in jeesns:jeesns
- CVE-2018-17884 Cross-site scripting in gwolle guestbook project:gwolle guestbook
- CVE-2018-17883 Cross-site scripting in otrs:otrs
- CVE-2018-17882 Integer overflow in cryptobots:battletoken
- CVE-2018-17881 Auth bypass in d-link:dir-823g firmware
- CVE-2018-17880 Missing authorization in d-link:dir-823g firmware
- CVE-2018-1788 Information disclosure in Spectrum Protect
- CVE-2018-17879 Command injection in abus:tvip 10000 firmware
- CVE-2018-17878 Memory corruption in abus:tvip 10000 firmware
- CVE-2018-17877 Weak cryptography in greedy599:greedy 599
- CVE-2018-17876 Coaster CMS Stored Cross-site Scripting vulnerability
- CVE-2018-17875 Command injection in poly:trio 8800 firmware
- CVE-2018-17874 Cross-site scripting in expressionengine:expressionengine
- CVE-2018-17873 Misconfiguration in wifiranger:wifiranger firmware
- CVE-2018-17872 Misconfiguration in verint:collaboration compliance