# Vulnerabilities published in 2018


- [CVE-2018-17871](https://insights.sbomify.com/CVE-2018-17871/): Missing authorization in verint:verba collaboration compliance and quality management platform (medium 6.5)
- [CVE-2018-17870](https://insights.sbomify.com/CVE-2018-17870/): Open redirect in btiteam:xbtit (medium 6.1)
- [CVE-2018-1787](https://insights.sbomify.com/CVE-2018-1787/): Information disclosure in Spectrum Protect (medium 5.1)
- [CVE-2018-17869](https://insights.sbomify.com/CVE-2018-17869/): Cross-site request forgery in dasan:h660gw firmware (high 8.8)
- [CVE-2018-17868](https://insights.sbomify.com/CVE-2018-17868/): Cross-site scripting in dasan:h660gw firmware (medium 4.8)
- [CVE-2018-17867](https://insights.sbomify.com/CVE-2018-17867/): Command injection in dasannetworks:h660gw firmware (high 7.2)
- [CVE-2018-17866](https://insights.sbomify.com/CVE-2018-17866/): Cross-site scripting in ultimatemember:ultimate member (medium 6.1)
- [CVE-2018-17865](https://insights.sbomify.com/CVE-2018-17865/): Cross-site scripting in sap:j2ee engine (medium 6.1)
- [CVE-2018-17862](https://insights.sbomify.com/CVE-2018-17862/): Cross-site scripting in sap:j2ee engine (medium 6.1)
- [CVE-2018-17861](https://insights.sbomify.com/CVE-2018-17861/): Cross-site scripting in sap:j2ee engine (medium 6.1)
- [CVE-2018-17860](https://insights.sbomify.com/CVE-2018-17860/): Misconfiguration in cloudera:cdh (high 7.2)
- [CVE-2018-1786](https://insights.sbomify.com/CVE-2018-1786/): Denial of service in Spectrum Protect (medium 5.3)
- [CVE-2018-17859](https://insights.sbomify.com/CVE-2018-17859/): Security feature bypass in joomla:joomla\! (medium 4.3)
- [CVE-2018-17858](https://insights.sbomify.com/CVE-2018-17858/): Cross-site request forgery in joomla:joomla\! (high 8.8)
- [CVE-2018-17857](https://insights.sbomify.com/CVE-2018-17857/): Missing authorization in joomla:joomla\! (medium 4.3)
- [CVE-2018-17856](https://insights.sbomify.com/CVE-2018-17856/): Joomla RCE Vulnerability (high 7.2)
- [CVE-2018-17855](https://insights.sbomify.com/CVE-2018-17855/): Privilege escalation in joomla:joomla\! (high 8.8)
- [CVE-2018-17854](https://insights.sbomify.com/CVE-2018-17854/): Memory corruption in simdcomp project:simdcomp (medium 6.5)
- [CVE-2018-17852](https://insights.sbomify.com/CVE-2018-17852/): SQL injection in wuzhi cms project:wuzhi cms (critical 9.8)
- [CVE-2018-1785](https://insights.sbomify.com/CVE-2018-1785/): Weak cryptography in Spectrum Protect (low 3.7)
- [CVE-2018-17849](https://insights.sbomify.com/CVE-2018-17849/): Cross-site scripting in naviwebs:navigate cms (medium 5.4)
- [CVE-2018-17848](https://insights.sbomify.com/CVE-2018-17848/): golang.org/x/net/html Improper Validation of Array Index vulnerability (high 7.5)
- [CVE-2018-17847](https://insights.sbomify.com/CVE-2018-17847/): golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer (high 7.5)
- [CVE-2018-17846](https://insights.sbomify.com/CVE-2018-17846/): x/net/html Vulnerable to DoS During HTML Parsing (high 7.5)
- [CVE-2018-17843](https://insights.sbomify.com/CVE-2018-17843/): SQL injection in mlmsoftwarez:add clicking mlm software (critical 9.8)
- [CVE-2018-17842](https://insights.sbomify.com/CVE-2018-17842/): SQL injection in scriptzee:hotel booking engine (critical 9.8)
- [CVE-2018-17841](https://insights.sbomify.com/CVE-2018-17841/): SQL injection in flippa marketplace clone project:flippa marketplace clone (critical 9.8)
- [CVE-2018-17840](https://insights.sbomify.com/CVE-2018-17840/): SQL injection in education website project:education website (critical 9.8)
- [CVE-2018-1784](https://insights.sbomify.com/CVE-2018-1784/): SQL injection in API Connect (high 7.1)
- [CVE-2018-17838](https://insights.sbomify.com/CVE-2018-17838/): Path traversal in jtbc:jtbc php (high 7.5)
- [CVE-2018-17837](https://insights.sbomify.com/CVE-2018-17837/): Path traversal in jtbc:jtbc php (high 7.5)
- [CVE-2018-17836](https://insights.sbomify.com/CVE-2018-17836/): Path traversal in jtbc:jtbc php (high 8.8)
- [CVE-2018-17835](https://insights.sbomify.com/CVE-2018-17835/): Cross-site scripting in get-simple:getsimple cms (medium 4.8)
- [CVE-2018-17832](https://insights.sbomify.com/CVE-2018-17832/): Cross-site scripting in wuzhicms:wuzhi cms (medium 6.1)
- [CVE-2018-17831](https://insights.sbomify.com/CVE-2018-17831/): SQL injection in redaxo:redaxo (critical 9.8)
- [CVE-2018-17830](https://insights.sbomify.com/CVE-2018-17830/): Cross-site scripting in redaxo:redaxo (medium 5.4)
- [CVE-2018-1783](https://insights.sbomify.com/CVE-2018-1783/): Missing authorization in ibm:spectrum scale (medium 5.5)
- [CVE-2018-17828](https://insights.sbomify.com/CVE-2018-17828/): Path traversal in gdraheim:zziplib (medium 5.5)
- [CVE-2018-17827](https://insights.sbomify.com/CVE-2018-17827/): Code injection in hisiphp:hisiphp (high 7.2)
- [CVE-2018-17826](https://insights.sbomify.com/CVE-2018-17826/): Cross-site request forgery in hisiphp:hisiphp (high 8.8)
- [CVE-2018-17825](https://insights.sbomify.com/CVE-2018-17825/): Memory corruption in adplug project:adplug (critical 9.8)
- [CVE-2018-1782](https://insights.sbomify.com/CVE-2018-1782/): Denial of service in Spectrum Scale (medium 6.5)
- [CVE-2018-1781](https://insights.sbomify.com/CVE-2018-1781/): Privilege escalation in DB2 for Linux, UNIX and Windows (high 8.4)
- [CVE-2018-1780](https://insights.sbomify.com/CVE-2018-1780/): Privilege escalation in DB2 for Linux, UNIX and Windows (high 7.8)
- [CVE-2018-17798](https://insights.sbomify.com/CVE-2018-17798/): Path traversal in zzcms:zzcms (medium 6.5)
- [CVE-2018-17797](https://insights.sbomify.com/CVE-2018-17797/): Path traversal in zzcms:zzcms (medium 6.5)
- [CVE-2018-17796](https://insights.sbomify.com/CVE-2018-17796/): SQL injection in mushroom content management system project:mushroom content management system (critical 9.8)
- [CVE-2018-17795](https://insights.sbomify.com/CVE-2018-17795/): Memory corruption in libtiff:libtiff (high 8.8)
- [CVE-2018-17794](https://insights.sbomify.com/CVE-2018-17794/): Null dereference in gnu:binutils (medium 6.5)
- [CVE-2018-17792](https://insights.sbomify.com/CVE-2018-17792/): Cross-site request forgery in altn:mdaemon webmail (high 8.8)
- [CVE-2018-17791](https://insights.sbomify.com/CVE-2018-17791/): Business logic in newgensoft:omniflow intelligent business process suite (high 7.5)
- [CVE-2018-17790](https://insights.sbomify.com/CVE-2018-17790/): Cross-site scripting in prospecta:master data online (medium 5.4)
- [CVE-2018-1779](https://insights.sbomify.com/CVE-2018-1779/): Denial of service in API Connect (high 7.5)
- [CVE-2018-17789](https://insights.sbomify.com/CVE-2018-17789/): Cross-site request forgery in prospecta:master data online (medium 6.5)
- [CVE-2018-17787](https://insights.sbomify.com/CVE-2018-17787/): Command injection in d-link:dir-823g firmware (critical 9.8)
- [CVE-2018-17786](https://insights.sbomify.com/CVE-2018-17786/): Missing authorization in d-link:dir-823g firmware (critical 9.8)
- [CVE-2018-17785](https://insights.sbomify.com/CVE-2018-17785/): In blynk-server a Directory Traversal exists (high 7.5)
- [CVE-2018-17784](https://insights.sbomify.com/CVE-2018-17784/): Cross-site scripting in sugarcrm:sugarcrm (medium 6.1)
- [CVE-2018-17783](https://insights.sbomify.com/CVE-2018-17783/): MantisBT allows XSS via Edit Filter page (medium 5.4)
- [CVE-2018-17782](https://insights.sbomify.com/CVE-2018-17782/): MantisBT allows XSS via the Manage Filter page (medium 5.4)
- [CVE-2018-17781](https://insights.sbomify.com/CVE-2018-17781/): Information disclosure in foxitsoftware:phantompdf (high 7.5)
- [CVE-2018-17780](https://insights.sbomify.com/CVE-2018-17780/): Information disclosure in telegram:telegram desktop (medium 6.5)
- [CVE-2018-1778](https://insights.sbomify.com/CVE-2018-1778/): Auth bypass in API Connect (high 7.7)
- [CVE-2018-17777](https://insights.sbomify.com/CVE-2018-17777/): Auth bypass in dlink:dva-5592 firmware (critical 9.8)
- [CVE-2018-17776](https://insights.sbomify.com/CVE-2018-17776/): Misconfiguration in pcprotect:antivirus (high 7.8)
- [CVE-2018-17775](https://insights.sbomify.com/CVE-2018-17775/): Misconfiguration in seqrite:end point security (high 7.8)
- [CVE-2018-17774](https://insights.sbomify.com/CVE-2018-17774/): Weak cryptography in ingenico:telium 2 firmware (medium 6.8)
- [CVE-2018-17773](https://insights.sbomify.com/CVE-2018-17773/): Memory corruption in ingenico:telium 2 firmware (medium 6.8)
- [CVE-2018-17772](https://insights.sbomify.com/CVE-2018-17772/): Other in ingenico:telium 2 firmware (medium 6.8)
- [CVE-2018-17771](https://insights.sbomify.com/CVE-2018-17771/): Hardcoded credentials in ingenico:telium 2 firmware (medium 6.6)
- [CVE-2018-17770](https://insights.sbomify.com/CVE-2018-17770/): Memory corruption in ingenico:telium 2 firmware (medium 6.6)
- [CVE-2018-1777](https://insights.sbomify.com/CVE-2018-1777/): Cross-site scripting in WebSphere Application Server (medium 5.4)
- [CVE-2018-17769](https://insights.sbomify.com/CVE-2018-17769/): Memory corruption in ingenico:telium 2 firmware (medium 6.6)
- [CVE-2018-17768](https://insights.sbomify.com/CVE-2018-17768/): Other in ingenico:telium 2 firmware (medium 6.8)
- [CVE-2018-17767](https://insights.sbomify.com/CVE-2018-17767/): Hardcoded credentials in ingenico:telium 2 firmware (medium 6.8)
- [CVE-2018-17766](https://insights.sbomify.com/CVE-2018-17766/): Security feature bypass in ingenico:telium 2 firmware (medium 4.6)
- [CVE-2018-17765](https://insights.sbomify.com/CVE-2018-17765/): Other in ingenico:telium 2 firmware (medium 6.8)
- [CVE-2018-1775](https://insights.sbomify.com/CVE-2018-1775/): Path traversal in FlashSystem 9100 Family (medium 6.5)
- [CVE-2018-1774](https://insights.sbomify.com/CVE-2018-1774/): Code injection in API Connect (high 8.9)
- [CVE-2018-1773](https://insights.sbomify.com/CVE-2018-1773/): Auth bypass in Datacap (medium 4.3)
- [CVE-2018-1772](https://insights.sbomify.com/CVE-2018-1772/): Cross-site scripting in ibm:spss analytic server (medium 5.4)
- [CVE-2018-1771](https://insights.sbomify.com/CVE-2018-1771/): Memory corruption in Domino (high 8.4)
- [CVE-2018-17707](https://insights.sbomify.com/CVE-2018-17707/): Command injection in Epic Games Launcher (high 8.8)
- [CVE-2018-17706](https://insights.sbomify.com/CVE-2018-17706/): Memory corruption in Foxit PhantomPDF (high 8.8)
- [CVE-2018-17705](https://insights.sbomify.com/CVE-2018-17705/): Use after free in Reader (high 8.8)
- [CVE-2018-17704](https://insights.sbomify.com/CVE-2018-17704/): Use after free in Reader (high 8.8)
- [CVE-2018-17703](https://insights.sbomify.com/CVE-2018-17703/): Use after free in Reader (high 8.8)
- [CVE-2018-17702](https://insights.sbomify.com/CVE-2018-17702/): Use after free in Reader (high 8.8)
- [CVE-2018-17701](https://insights.sbomify.com/CVE-2018-17701/): Memory corruption in PhantomPDF (high 8.8)
- [CVE-2018-17700](https://insights.sbomify.com/CVE-2018-17700/): Memory corruption in foxitsoftware:phantompdf (high 8.8)
- [CVE-2018-1770](https://insights.sbomify.com/CVE-2018-1770/): Path traversal in WebSphere Application Server (medium 6.5)
- [CVE-2018-17699](https://insights.sbomify.com/CVE-2018-17699/): Memory corruption in Reader (medium 6.5)
- [CVE-2018-17698](https://insights.sbomify.com/CVE-2018-17698/): Use after free in PhantomPDF (high 8.8)
- [CVE-2018-17697](https://insights.sbomify.com/CVE-2018-17697/): Use after free in Reader (high 8.8)
- [CVE-2018-17696](https://insights.sbomify.com/CVE-2018-17696/): Use after free in Reader (high 8.8)
- [CVE-2018-17695](https://insights.sbomify.com/CVE-2018-17695/): Use after free in PhantomPDF (high 8.8)
- [CVE-2018-17694](https://insights.sbomify.com/CVE-2018-17694/): Use after free in PhantomPDF (high 8.8)
- [CVE-2018-17693](https://insights.sbomify.com/CVE-2018-17693/): Memory corruption in PhantomPDF (high 8.8)
- [CVE-2018-17692](https://insights.sbomify.com/CVE-2018-17692/): Memory corruption in PhantomPDF (high 8.8)
- [CVE-2018-17691](https://insights.sbomify.com/CVE-2018-17691/): Use after free in PhantomPDF (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/87/