Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 87 of 163.
- CVE-2018-17871 Missing authorization in verint:verba collaboration compliance and quality management platform
- CVE-2018-17870 Open redirect in btiteam:xbtit
- CVE-2018-1787 Information disclosure in Spectrum Protect
- CVE-2018-17869 Cross-site request forgery in dasan:h660gw firmware
- CVE-2018-17868 Cross-site scripting in dasan:h660gw firmware
- CVE-2018-17867 Command injection in dasannetworks:h660gw firmware
- CVE-2018-17866 Cross-site scripting in ultimatemember:ultimate member
- CVE-2018-17865 Cross-site scripting in sap:j2ee engine
- CVE-2018-17862 Cross-site scripting in sap:j2ee engine
- CVE-2018-17861 Cross-site scripting in sap:j2ee engine
- CVE-2018-17860 Misconfiguration in cloudera:cdh
- CVE-2018-1786 Denial of service in Spectrum Protect
- CVE-2018-17859 Security feature bypass in joomla:joomla\!
- CVE-2018-17858 Cross-site request forgery in joomla:joomla\!
- CVE-2018-17857 Missing authorization in joomla:joomla\!
- CVE-2018-17856 Joomla RCE Vulnerability
- CVE-2018-17855 Privilege escalation in joomla:joomla\!
- CVE-2018-17854 Memory corruption in simdcomp project:simdcomp
- CVE-2018-17852 SQL injection in wuzhi cms project:wuzhi cms
- CVE-2018-1785 Weak cryptography in Spectrum Protect
- CVE-2018-17849 Cross-site scripting in naviwebs:navigate cms
- CVE-2018-17848 golang.org/x/net/html Improper Validation of Array Index vulnerability
- CVE-2018-17847 golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer
- CVE-2018-17846 x/net/html Vulnerable to DoS During HTML Parsing
- CVE-2018-17843 SQL injection in mlmsoftwarez:add clicking mlm software
- CVE-2018-17842 SQL injection in scriptzee:hotel booking engine
- CVE-2018-17841 SQL injection in flippa marketplace clone project:flippa marketplace clone
- CVE-2018-17840 SQL injection in education website project:education website
- CVE-2018-1784 SQL injection in API Connect
- CVE-2018-17838 Path traversal in jtbc:jtbc php
- CVE-2018-17837 Path traversal in jtbc:jtbc php
- CVE-2018-17836 Path traversal in jtbc:jtbc php
- CVE-2018-17835 Cross-site scripting in get-simple:getsimple cms
- CVE-2018-17832 Cross-site scripting in wuzhicms:wuzhi cms
- CVE-2018-17831 SQL injection in redaxo:redaxo
- CVE-2018-17830 Cross-site scripting in redaxo:redaxo
- CVE-2018-1783 Missing authorization in ibm:spectrum scale
- CVE-2018-17828 Path traversal in gdraheim:zziplib
- CVE-2018-17827 Code injection in hisiphp:hisiphp
- CVE-2018-17826 Cross-site request forgery in hisiphp:hisiphp
- CVE-2018-17825 Memory corruption in adplug project:adplug
- CVE-2018-1782 Denial of service in Spectrum Scale
- CVE-2018-1781 Privilege escalation in DB2 for Linux, UNIX and Windows
- CVE-2018-1780 Privilege escalation in DB2 for Linux, UNIX and Windows
- CVE-2018-17798 Path traversal in zzcms:zzcms
- CVE-2018-17797 Path traversal in zzcms:zzcms
- CVE-2018-17796 SQL injection in mushroom content management system project:mushroom content management system
- CVE-2018-17795 Memory corruption in libtiff:libtiff
- CVE-2018-17794 Null dereference in gnu:binutils
- CVE-2018-17792 Cross-site request forgery in altn:mdaemon webmail
- CVE-2018-17791 Business logic in newgensoft:omniflow intelligent business process suite
- CVE-2018-17790 Cross-site scripting in prospecta:master data online
- CVE-2018-1779 Denial of service in API Connect
- CVE-2018-17789 Cross-site request forgery in prospecta:master data online
- CVE-2018-17787 Command injection in d-link:dir-823g firmware
- CVE-2018-17786 Missing authorization in d-link:dir-823g firmware
- CVE-2018-17785 In blynk-server a Directory Traversal exists
- CVE-2018-17784 Cross-site scripting in sugarcrm:sugarcrm
- CVE-2018-17783 MantisBT allows XSS via Edit Filter page
- CVE-2018-17782 MantisBT allows XSS via the Manage Filter page
- CVE-2018-17781 Information disclosure in foxitsoftware:phantompdf
- CVE-2018-17780 Information disclosure in telegram:telegram desktop
- CVE-2018-1778 Auth bypass in API Connect
- CVE-2018-17777 Auth bypass in dlink:dva-5592 firmware
- CVE-2018-17776 Misconfiguration in pcprotect:antivirus
- CVE-2018-17775 Misconfiguration in seqrite:end point security
- CVE-2018-17774 Weak cryptography in ingenico:telium 2 firmware
- CVE-2018-17773 Memory corruption in ingenico:telium 2 firmware
- CVE-2018-17772 Other in ingenico:telium 2 firmware
- CVE-2018-17771 Hardcoded credentials in ingenico:telium 2 firmware
- CVE-2018-17770 Memory corruption in ingenico:telium 2 firmware
- CVE-2018-1777 Cross-site scripting in WebSphere Application Server
- CVE-2018-17769 Memory corruption in ingenico:telium 2 firmware
- CVE-2018-17768 Other in ingenico:telium 2 firmware
- CVE-2018-17767 Hardcoded credentials in ingenico:telium 2 firmware
- CVE-2018-17766 Security feature bypass in ingenico:telium 2 firmware
- CVE-2018-17765 Other in ingenico:telium 2 firmware
- CVE-2018-1775 Path traversal in FlashSystem 9100 Family
- CVE-2018-1774 Code injection in API Connect
- CVE-2018-1773 Auth bypass in Datacap
- CVE-2018-1772 Cross-site scripting in ibm:spss analytic server
- CVE-2018-1771 Memory corruption in Domino
- CVE-2018-17707 Command injection in Epic Games Launcher
- CVE-2018-17706 Memory corruption in Foxit PhantomPDF
- CVE-2018-17705 Use after free in Reader
- CVE-2018-17704 Use after free in Reader
- CVE-2018-17703 Use after free in Reader
- CVE-2018-17702 Use after free in Reader
- CVE-2018-17701 Memory corruption in PhantomPDF
- CVE-2018-17700 Memory corruption in foxitsoftware:phantompdf
- CVE-2018-1770 Path traversal in WebSphere Application Server
- CVE-2018-17699 Memory corruption in Reader
- CVE-2018-17698 Use after free in PhantomPDF
- CVE-2018-17697 Use after free in Reader
- CVE-2018-17696 Use after free in Reader
- CVE-2018-17695 Use after free in PhantomPDF
- CVE-2018-17694 Use after free in PhantomPDF
- CVE-2018-17693 Memory corruption in PhantomPDF
- CVE-2018-17692 Memory corruption in PhantomPDF
- CVE-2018-17691 Use after free in PhantomPDF