Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 89 of 163.
- CVE-2018-17589 Cross-site scripting in airties:air 5650 firmware
- CVE-2018-17588 Cross-site scripting in airties:air 5021 firmware
- CVE-2018-17587 Cross-site scripting in airties:air 5750 firmware
- CVE-2018-17586 Cross-site scripting in wpfastestcache:wp fastest cache
- CVE-2018-17585 Cross-site scripting in wpfastestcache:wp fastest cache
- CVE-2018-17584 Cross-site request forgery in wpfastestcache:wp fastest cache
- CVE-2018-17583 Cross-site scripting in wpfastestcache:wp fastest cache
- CVE-2018-17582 Memory corruption in broadcom:tcpreplay
- CVE-2018-17581 Denial of service in canonical:ubuntu linux
- CVE-2018-17580 Memory corruption in broadcom:tcpreplay
- CVE-2018-1758 Cross-site scripting in Rational Collaborative Lifecycle Management
- CVE-2018-17575 SQL injection in swa:swa.jacad
- CVE-2018-17574 Cross-site Scripting in yapi-vendor
- CVE-2018-17573 File upload in smartlogix:wp-insert
- CVE-2018-17572 InfluxDB Reflected Cross-site Scripting
- CVE-2018-17571 Cross-site scripting in vanillaforums:vanilla
- CVE-2018-17570 Integer overflow in viabtc:viabtc exchange server
- CVE-2018-1757 Missing authorization in Security Identity Governance and Intelligence
- CVE-2018-17569 Integer overflow in viabtc:viabtc exchange server
- CVE-2018-17568 Integer overflow in viabtc:viabtc exchange server
- CVE-2018-17567 Jekyll allows attackers to access arbitrary files by specifying a symlink
- CVE-2018-17566 ThinkPHP SQL injection vulnerability
- CVE-2018-17565 Command injection in grandstream:gxp1610 firmware
- CVE-2018-17564 Auth bypass in grandstream:gxp1610 firmware
- CVE-2018-17563 Information disclosure in grandstream:gxp1610 firmware
- CVE-2018-17562 SQL injection in multitech:faxfinder
- CVE-2018-17560 Cross-site scripting in teamwire:teamwire
- CVE-2018-1756 SQL injection in Security Identity Governance and Intelligence
- CVE-2018-17559 Missing authorization in abus:tvip 10000 firmware
- CVE-2018-17558 Command injection in abus:tvip 10000 firmware
- CVE-2018-17556 Cross-site scripting in modx:modx revolution
- CVE-2018-17555 Information disclosure in commscope:arris tg2492lg-na firmware
- CVE-2018-17553 File upload in naviwebs:navigate cms
- CVE-2018-17552 SQL injection in naviwebs:navigate cms
- CVE-2018-1755 Information disclosure in WebSphere Application Server
- CVE-2018-17542 SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds
- CVE-2018-17540 Memory corruption in canonical:ubuntu linux
- CVE-2018-17539 Denial of service in f5:big-ip local traffic manager
- CVE-2018-17538 Other in axon:evidence sync
- CVE-2018-17537 Cross-site scripting in gitlab:gitlab
- CVE-2018-17536 Cross-site scripting in gitlab:gitlab
- CVE-2018-17534 Auth bypass in teltonika:rut900 firmware
- CVE-2018-17533 Cross-site scripting in teltonika:rut900 firmware
- CVE-2018-17532 Command injection in teltonika:rut900 firmware
- CVE-2018-1753 Information disclosure in Security Key Lifecycle Manager
- CVE-2018-1751 Weak cryptography in Security Key Lifecycle Manager
- CVE-2018-17502 Information disclosure in The Receptionist for iPad
- CVE-2018-17500 Hardcoded credentials in Envoy Passport for Android
- CVE-2018-1750 Misconfiguration in Security Key Lifecycle Manager
- CVE-2018-17499 Information disclosure in Envoy Passport for Android
- CVE-2018-17497 Hardcoded credentials in eVisitorPass
- CVE-2018-17496 Security feature bypass in eVisitorPass
- CVE-2018-17495 Privilege escalation in eVisitorPass
- CVE-2018-17494 Privilege escalation in eVisitorPass
- CVE-2018-17493 Security feature bypass in eVisitorPass
- CVE-2018-17492 Hardcoded credentials in EasyLobby Solo
- CVE-2018-17491 Privilege escalation in EasyLobby Solo
- CVE-2018-17490 Missing authorization in EasyLobby Solo
- CVE-2018-1749 Security feature bypass in Security Key Lifecycle Manager
- CVE-2018-17489 Information disclosure in EasyLobby Solo
- CVE-2018-17488 Privilege escalation in Lobby Track Desktop
- CVE-2018-17487 Privilege escalation in Lobby Track Desktop
- CVE-2018-17486 Security feature bypass in Lobby Track Desktop
- CVE-2018-17485 Hardcoded credentials in Lobby Track Desktop
- CVE-2018-17484 Information disclosure in Lobby Track Desktop
- CVE-2018-17483 Information disclosure in Lobby Track Desktop
- CVE-2018-17482 Information disclosure in Lobby Track Desktop
- CVE-2018-17481 Use after free in Chrome
- CVE-2018-17480 Google Chromium V8 Out-of-Bounds Write
- CVE-2018-17479 Use after free in Chrome
- CVE-2018-17478 Memory corruption in Chrome
- CVE-2018-17477 Other in Chrome
- CVE-2018-17476 Other in Chrome
- CVE-2018-17475 Other in Chrome
- CVE-2018-17474 Use after free in Chrome
- CVE-2018-17473 Other in Chrome
- CVE-2018-17472 Security feature bypass in Chrome
- CVE-2018-17471 Security feature bypass in Chrome
- CVE-2018-17470 Memory corruption in Chrome
- CVE-2018-1747 XML external entity in Security Key Lifecycle Manager
- CVE-2018-17469 Memory corruption in Chrome
- CVE-2018-17468 Information disclosure in Chrome
- CVE-2018-17467 Other in Chrome
- CVE-2018-17466 Memory corruption in Chrome
- CVE-2018-17465 Use after free in Chrome
- CVE-2018-17464 Other in Chrome
- CVE-2018-17463 Google Chromium V8 Remote Code Execution
- CVE-2018-17462 Use after free in Chrome
- CVE-2018-17461 Memory corruption in Chrome
- CVE-2018-17460 Other in Chrome
- CVE-2018-17459 Other in Chrome
- CVE-2018-17458 Memory corruption in Chrome
- CVE-2018-17457 Use after free in Chrome
- CVE-2018-17456 Command injection in canonical:ubuntu linux
- CVE-2018-17455 Missing authorization in gitlab:gitlab
- CVE-2018-17454 Cross-site scripting in gitlab:gitlab
- CVE-2018-17453 Information disclosure in gitlab:gitlab
- CVE-2018-17452 Server-side request forgery in gitlab:gitlab
- CVE-2018-17451 Cross-site request forgery in gitlab:gitlab
- CVE-2018-17450 Server-side request forgery in gitlab:gitlab