# Vulnerabilities published in 2018


- [CVE-2018-17972](https://insights.sbomify.com/CVE-2018-17972/): Race condition in canonical:ubuntu linux (medium 5.5)
- [CVE-2018-1797](https://insights.sbomify.com/CVE-2018-1797/): Path traversal in WebSphere Application Server (medium 6.3)
- [CVE-2018-17969](https://insights.sbomify.com/CVE-2018-17969/): Information disclosure in samsung:scx-6545x firmware (critical 9.8)
- [CVE-2018-17968](https://insights.sbomify.com/CVE-2018-17968/): Weak cryptography in ruletkaio:ruletkaio (high 7.5)
- [CVE-2018-17967](https://insights.sbomify.com/CVE-2018-17967/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2018-17966](https://insights.sbomify.com/CVE-2018-17966/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2018-17965](https://insights.sbomify.com/CVE-2018-17965/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2018-17964](https://insights.sbomify.com/CVE-2018-17964/): Cross-site scripting in aryanic:highportal (medium 6.1)
- [CVE-2018-17963](https://insights.sbomify.com/CVE-2018-17963/): Integer overflow in canonical:ubuntu linux (critical 9.8)
- [CVE-2018-17962](https://insights.sbomify.com/CVE-2018-17962/): Integer overflow in canonical:ubuntu linux (high 7.5)
- [CVE-2018-17961](https://insights.sbomify.com/CVE-2018-17961/): Security feature bypass in artifex:ghostscript (high 8.6)
- [CVE-2018-17960](https://insights.sbomify.com/CVE-2018-17960/): Ckeditor XSS Vulnerability (medium 6.1)
- [CVE-2018-1796](https://insights.sbomify.com/CVE-2018-1796/): Privilege escalation in Informix Dynamic Server Enterprise Edition (high 7.8)
- [CVE-2018-17958](https://insights.sbomify.com/CVE-2018-17958/): Integer overflow in canonical:ubuntu linux (high 7.5)
- [CVE-2018-17957](https://insights.sbomify.com/CVE-2018-17957/): yast2-rmt leaks database passwords in process list (low 3.4)
- [CVE-2018-17956](https://insights.sbomify.com/CVE-2018-17956/): Password exposed in process listing (low 3.3)
- [CVE-2018-17955](https://insights.sbomify.com/CVE-2018-17955/): Static tempfile name allows overwriting of arbitrary files (low 2.2)
- [CVE-2018-17954](https://insights.sbomify.com/CVE-2018-17954/): crowbar provision leaks admin password to all nodes in cleartext (critical 9.3)
- [CVE-2018-17953](https://insights.sbomify.com/CVE-2018-17953/): pam_access does not handle netmask matches correctly (high 7.5)
- [CVE-2018-17952](https://insights.sbomify.com/CVE-2018-17952/): Cross-site scripting in NetIQ eDirectory 9.1 SP2 (medium 6.1)
- [CVE-2018-17950](https://insights.sbomify.com/CVE-2018-17950/): Missing authorization in NetIQ eDirectory 9.1 SP2 (high 7.5)
- [CVE-2018-1795](https://insights.sbomify.com/CVE-2018-1795/): Cross-site scripting in Robotic Process Automation with Automation Anywhere (medium 6.1)
- [CVE-2018-17949](https://insights.sbomify.com/CVE-2018-17949/): Cross-site scripting in NetIQ iManager 3.1 SP2 (medium 6.1)
- [CVE-2018-17948](https://insights.sbomify.com/CVE-2018-17948/): Open redirect in Access Manager (medium 6.1)
- [CVE-2018-17947](https://insights.sbomify.com/CVE-2018-17947/): Cross-site scripting in atmist:snazzy maps (medium 6.1)
- [CVE-2018-17946](https://insights.sbomify.com/CVE-2018-17946/): Cross-site scripting in tribulant:slideshow gallery (medium 6.1)
- [CVE-2018-17944](https://insights.sbomify.com/CVE-2018-17944/): Information disclosure in lexmark:cx725h firmware (medium 4.9)
- [CVE-2018-17942](https://insights.sbomify.com/CVE-2018-17942/): Memory corruption in gnu:gnulib (high 8.8)
- [CVE-2018-1794](https://insights.sbomify.com/CVE-2018-1794/): Cross-site scripting in WebSphere Application Server (medium 6.1)
- [CVE-2018-17939](https://insights.sbomify.com/CVE-2018-17939/): Information disclosure in gitlab:gitlab (high 7.5)
- [CVE-2018-17938](https://insights.sbomify.com/CVE-2018-17938/): Other in synacor:zimbra collaboration suite (medium 5.3)
- [CVE-2018-17937](https://insights.sbomify.com/CVE-2018-17937/): Memory corruption in gpsd and microjson (Open Source Project) (high 8.8)
- [CVE-2018-17936](https://insights.sbomify.com/CVE-2018-17936/): File upload in NUUO CMS (critical 9.8)
- [CVE-2018-17935](https://insights.sbomify.com/CVE-2018-17935/): Weak cryptography in F25 Series (high 8.1)
- [CVE-2018-17934](https://insights.sbomify.com/CVE-2018-17934/): Path traversal in NUUO CMS (critical 9.8)
- [CVE-2018-17933](https://insights.sbomify.com/CVE-2018-17933/): Privilege escalation in VGo Robot (high 8.8)
- [CVE-2018-17932](https://insights.sbomify.com/CVE-2018-17932/): Auth bypass in JUUKO K-800 (critical 9.8)
- [CVE-2018-17931](https://insights.sbomify.com/CVE-2018-17931/): Missing authorization in VGo Robot (medium 6.8)
- [CVE-2018-17930](https://insights.sbomify.com/CVE-2018-17930/): Memory corruption in Teledyne DALSA Sherlock (critical 9.8)
- [CVE-2018-1793](https://insights.sbomify.com/CVE-2018-1793/): Cross-site scripting in WebSphere Application Server (medium 6.1)
- [CVE-2018-17929](https://insights.sbomify.com/CVE-2018-17929/): Memory corruption in Delta Industrial Automation TPEditor (high 7.8)
- [CVE-2018-17928](https://insights.sbomify.com/CVE-2018-17928/): Auth bypass in CMS-770 (medium 6.5)
- [CVE-2018-17927](https://insights.sbomify.com/CVE-2018-17927/): Memory corruption in Delta Industrial Automation TPEditor (high 7.8)
- [CVE-2018-17926](https://insights.sbomify.com/CVE-2018-17926/): Auth bypass in M2M ETHERNET (medium 4.3)
- [CVE-2018-17925](https://insights.sbomify.com/CVE-2018-17925/): Cross-site scripting in iFix (medium 4.8)
- [CVE-2018-17924](https://insights.sbomify.com/CVE-2018-17924/): Missing authorization in Rockwell Automation (high 7.5)
- [CVE-2018-17923](https://insights.sbomify.com/CVE-2018-17923/): Auth bypass in SAGA1-L8B (medium 6.9)
- [CVE-2018-17922](https://insights.sbomify.com/CVE-2018-17922/): Information disclosure in Circontrol CirCarLife all versions prior to 4.3.1 (critical 9.8)
- [CVE-2018-17921](https://insights.sbomify.com/CVE-2018-17921/): Auth bypass in SAGA1-L8B (high 8.8)
- [CVE-2018-1792](https://insights.sbomify.com/CVE-2018-1792/): Code injection in MQ (high 8.8)
- [CVE-2018-17919](https://insights.sbomify.com/CVE-2018-17919/): Hardcoded credentials in XMeye P2P Cloud Server (medium 6.5)
- [CVE-2018-17918](https://insights.sbomify.com/CVE-2018-17918/): Auth bypass in Circontrol CirCarLife all versions prior to 4.3.1 (critical 9.8)
- [CVE-2018-17917](https://insights.sbomify.com/CVE-2018-17917/): Information disclosure in XMeye P2P Cloud Server (medium 5.3)
- [CVE-2018-17916](https://insights.sbomify.com/CVE-2018-17916/): Memory corruption in InduSoft Web Studio, and InTouch Edge HMI (formerly InTouch Machine Edition) (critical 9.8)
- [CVE-2018-17915](https://insights.sbomify.com/CVE-2018-17915/): Weak cryptography in XMeye P2P Cloud Server (critical 9.8)
- [CVE-2018-17914](https://insights.sbomify.com/CVE-2018-17914/): Other in InduSoft Web Studio, and InTouch Edge HMI (formerly InTouch Machine Edition) (critical 9.8)
- [CVE-2018-17913](https://insights.sbomify.com/CVE-2018-17913/): Memory corruption in CX-Supervisor (high 7.8)
- [CVE-2018-17912](https://insights.sbomify.com/CVE-2018-17912/): XML external entity in CASE Suite (high 7.5)
- [CVE-2018-17911](https://insights.sbomify.com/CVE-2018-17911/): Memory corruption in LAquis SCADA (high 7.8)
- [CVE-2018-17910](https://insights.sbomify.com/CVE-2018-17910/): Memory corruption in WebAccess Versions 8.3.2 and prior. (high 7.8)
- [CVE-2018-1791](https://insights.sbomify.com/CVE-2018-1791/): Other in Connections (medium 4.9)
- [CVE-2018-17909](https://insights.sbomify.com/CVE-2018-17909/): Use after free in CX-Supervisor (high 7.8)
- [CVE-2018-17908](https://insights.sbomify.com/CVE-2018-17908/): Misconfiguration in WebAccess Versions 8.3.2 and prior. (high 7.8)
- [CVE-2018-17907](https://insights.sbomify.com/CVE-2018-17907/): Memory corruption in CX-Supervisor (low 3.3)
- [CVE-2018-17906](https://insights.sbomify.com/CVE-2018-17906/): Hardcoded credentials in Philips iSite and IntelliSpace PACS (high 8.8)
- [CVE-2018-17905](https://insights.sbomify.com/CVE-2018-17905/): Memory corruption in CX-Supervisor (high 7.8)
- [CVE-2018-17904](https://insights.sbomify.com/CVE-2018-17904/): Cross-site scripting in Reliance 4 SCADA/HMI (medium 6.1)
- [CVE-2018-17903](https://insights.sbomify.com/CVE-2018-17903/): Auth bypass in SAGA1-L8B (critical 9.1)
- [CVE-2018-17902](https://insights.sbomify.com/CVE-2018-17902/): Auth bypass in STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500 (medium 5.3)
- [CVE-2018-17901](https://insights.sbomify.com/CVE-2018-17901/): Memory corruption in LAquis SCADA (high 7.8)
- [CVE-2018-17900](https://insights.sbomify.com/CVE-2018-17900/): Information disclosure in STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500 (critical 9.8)
- [CVE-2018-1790](https://insights.sbomify.com/CVE-2018-1790/): Cross-site request forgery in Financial Transaction Manager (medium 4.3)
- [CVE-2018-17899](https://insights.sbomify.com/CVE-2018-17899/): Path traversal in LAquis SCADA (high 8.8)
- [CVE-2018-17898](https://insights.sbomify.com/CVE-2018-17898/): Denial of service in STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500 (high 7.5)
- [CVE-2018-17897](https://insights.sbomify.com/CVE-2018-17897/): Integer overflow in lcds:laquis scada (critical 9.8)
- [CVE-2018-17896](https://insights.sbomify.com/CVE-2018-17896/): Hardcoded credentials in STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500 (high 8.1)
- [CVE-2018-17895](https://insights.sbomify.com/CVE-2018-17895/): Memory corruption in LAquis SCADA (critical 9.8)
- [CVE-2018-17894](https://insights.sbomify.com/CVE-2018-17894/): Hardcoded credentials in NUUO CMS (critical 9.8)
- [CVE-2018-17893](https://insights.sbomify.com/CVE-2018-17893/): Memory corruption in LAquis SCADA (critical 9.8)
- [CVE-2018-17892](https://insights.sbomify.com/CVE-2018-17892/): Other in NUUO CMS (high 8.8)
- [CVE-2018-17891](https://insights.sbomify.com/CVE-2018-17891/): Information disclosure in Vue RIS (low 3.7)
- [CVE-2018-17890](https://insights.sbomify.com/CVE-2018-17890/): Supply chain in NUUO CMS (critical 9.8)
- [CVE-2018-1789](https://insights.sbomify.com/CVE-2018-1789/): Server-side request forgery in API Connect (high 8.4)
- [CVE-2018-17889](https://insights.sbomify.com/CVE-2018-17889/): XML external entity in PI Studio (medium 5.3)
- [CVE-2018-17888](https://insights.sbomify.com/CVE-2018-17888/): Weak cryptography in NUUO CMS (critical 9.8)
- [CVE-2018-17886](https://insights.sbomify.com/CVE-2018-17886/): Cross-site scripting in jeesns:jeesns (medium 5.4)
- [CVE-2018-17884](https://insights.sbomify.com/CVE-2018-17884/): Cross-site scripting in gwolle guestbook project:gwolle guestbook (medium 6.1)
- [CVE-2018-17883](https://insights.sbomify.com/CVE-2018-17883/): Cross-site scripting in otrs:otrs (medium 6.1)
- [CVE-2018-17882](https://insights.sbomify.com/CVE-2018-17882/): Integer overflow in cryptobots:battletoken (high 7.5)
- [CVE-2018-17881](https://insights.sbomify.com/CVE-2018-17881/): Auth bypass in d-link:dir-823g firmware (critical 9.8)
- [CVE-2018-17880](https://insights.sbomify.com/CVE-2018-17880/): Missing authorization in d-link:dir-823g firmware (high 7.5)
- [CVE-2018-1788](https://insights.sbomify.com/CVE-2018-1788/): Information disclosure in Spectrum Protect (medium 4.1)
- [CVE-2018-17879](https://insights.sbomify.com/CVE-2018-17879/): Command injection in abus:tvip 10000 firmware (critical 9.8)
- [CVE-2018-17878](https://insights.sbomify.com/CVE-2018-17878/): Memory corruption in abus:tvip 10000 firmware (critical 9.8)
- [CVE-2018-17877](https://insights.sbomify.com/CVE-2018-17877/): Weak cryptography in greedy599:greedy 599 (high 7.5)
- [CVE-2018-17876](https://insights.sbomify.com/CVE-2018-17876/): Coaster CMS Stored Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2018-17875](https://insights.sbomify.com/CVE-2018-17875/): Command injection in poly:trio 8800 firmware (high 8.8)
- [CVE-2018-17874](https://insights.sbomify.com/CVE-2018-17874/): Cross-site scripting in expressionengine:expressionengine (medium 6.1)
- [CVE-2018-17873](https://insights.sbomify.com/CVE-2018-17873/): Misconfiguration in wifiranger:wifiranger firmware (high 8.8)
- [CVE-2018-17872](https://insights.sbomify.com/CVE-2018-17872/): Misconfiguration in verint:collaboration compliance (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/86/