# Vulnerabilities published in 2018 - [CVE-2018-17589](https://insights.sbomify.com/CVE-2018-17589/): Cross-site scripting in airties:air 5650 firmware (medium 6.1) - [CVE-2018-17588](https://insights.sbomify.com/CVE-2018-17588/): Cross-site scripting in airties:air 5021 firmware (medium 6.1) - [CVE-2018-17587](https://insights.sbomify.com/CVE-2018-17587/): Cross-site scripting in airties:air 5750 firmware (medium 6.1) - [CVE-2018-17586](https://insights.sbomify.com/CVE-2018-17586/): Cross-site scripting in wpfastestcache:wp fastest cache (medium 6.1) - [CVE-2018-17585](https://insights.sbomify.com/CVE-2018-17585/): Cross-site scripting in wpfastestcache:wp fastest cache (medium 6.1) - [CVE-2018-17584](https://insights.sbomify.com/CVE-2018-17584/): Cross-site request forgery in wpfastestcache:wp fastest cache (high 8.8) - [CVE-2018-17583](https://insights.sbomify.com/CVE-2018-17583/): Cross-site scripting in wpfastestcache:wp fastest cache (medium 6.1) - [CVE-2018-17582](https://insights.sbomify.com/CVE-2018-17582/): Memory corruption in broadcom:tcpreplay (high 7.1) - [CVE-2018-17581](https://insights.sbomify.com/CVE-2018-17581/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2018-17580](https://insights.sbomify.com/CVE-2018-17580/): Memory corruption in broadcom:tcpreplay (high 7.1) - [CVE-2018-1758](https://insights.sbomify.com/CVE-2018-1758/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2018-17575](https://insights.sbomify.com/CVE-2018-17575/): SQL injection in swa:swa.jacad (critical 9.8) - [CVE-2018-17574](https://insights.sbomify.com/CVE-2018-17574/): Cross-site Scripting in yapi-vendor (medium 5.4) - [CVE-2018-17573](https://insights.sbomify.com/CVE-2018-17573/): File upload in smartlogix:wp-insert (critical 9.8) - [CVE-2018-17572](https://insights.sbomify.com/CVE-2018-17572/): InfluxDB Reflected Cross-site Scripting (medium 4.8) - [CVE-2018-17571](https://insights.sbomify.com/CVE-2018-17571/): Cross-site scripting in vanillaforums:vanilla (medium 6.1) - [CVE-2018-17570](https://insights.sbomify.com/CVE-2018-17570/): Integer overflow in viabtc:viabtc exchange server (critical 9.8) - [CVE-2018-1757](https://insights.sbomify.com/CVE-2018-1757/): Missing authorization in Security Identity Governance and Intelligence (medium 5.3) - [CVE-2018-17569](https://insights.sbomify.com/CVE-2018-17569/): Integer overflow in viabtc:viabtc exchange server (critical 9.8) - [CVE-2018-17568](https://insights.sbomify.com/CVE-2018-17568/): Integer overflow in viabtc:viabtc exchange server (critical 9.8) - [CVE-2018-17567](https://insights.sbomify.com/CVE-2018-17567/): Jekyll allows attackers to access arbitrary files by specifying a symlink (high 7.5) - [CVE-2018-17566](https://insights.sbomify.com/CVE-2018-17566/): ThinkPHP SQL injection vulnerability (critical 9.8) - [CVE-2018-17565](https://insights.sbomify.com/CVE-2018-17565/): Command injection in grandstream:gxp1610 firmware (critical 9.8) - [CVE-2018-17564](https://insights.sbomify.com/CVE-2018-17564/): Auth bypass in grandstream:gxp1610 firmware (critical 9.8) - [CVE-2018-17563](https://insights.sbomify.com/CVE-2018-17563/): Information disclosure in grandstream:gxp1610 firmware (medium 5.3) - [CVE-2018-17562](https://insights.sbomify.com/CVE-2018-17562/): SQL injection in multitech:faxfinder (high 7.5) - [CVE-2018-17560](https://insights.sbomify.com/CVE-2018-17560/): Cross-site scripting in teamwire:teamwire (medium 6.1) - [CVE-2018-1756](https://insights.sbomify.com/CVE-2018-1756/): SQL injection in Security Identity Governance and Intelligence (high 7.5) - [CVE-2018-17559](https://insights.sbomify.com/CVE-2018-17559/): Missing authorization in abus:tvip 10000 firmware (high 7.5) - [CVE-2018-17558](https://insights.sbomify.com/CVE-2018-17558/): Command injection in abus:tvip 10000 firmware (critical 9.8) - [CVE-2018-17556](https://insights.sbomify.com/CVE-2018-17556/): Cross-site scripting in modx:modx revolution (medium 5.4) - [CVE-2018-17555](https://insights.sbomify.com/CVE-2018-17555/): Information disclosure in commscope:arris tg2492lg-na firmware (high 7.5) - [CVE-2018-17553](https://insights.sbomify.com/CVE-2018-17553/): File upload in naviwebs:navigate cms (high 8.8) - [CVE-2018-17552](https://insights.sbomify.com/CVE-2018-17552/): SQL injection in naviwebs:navigate cms (critical 9.8) - [CVE-2018-1755](https://insights.sbomify.com/CVE-2018-1755/): Information disclosure in WebSphere Application Server (medium 5.9) - [CVE-2018-17542](https://insights.sbomify.com/CVE-2018-17542/): SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds (medium 4.3) - [CVE-2018-17540](https://insights.sbomify.com/CVE-2018-17540/): Memory corruption in canonical:ubuntu linux (high 7.5) - [CVE-2018-17539](https://insights.sbomify.com/CVE-2018-17539/): Denial of service in f5:big-ip local traffic manager (high 7.5) - [CVE-2018-17538](https://insights.sbomify.com/CVE-2018-17538/): Other in axon:evidence sync (critical 9.8) - [CVE-2018-17537](https://insights.sbomify.com/CVE-2018-17537/): Cross-site scripting in gitlab:gitlab (medium 5.4) - [CVE-2018-17536](https://insights.sbomify.com/CVE-2018-17536/): Cross-site scripting in gitlab:gitlab (medium 5.4) - [CVE-2018-17534](https://insights.sbomify.com/CVE-2018-17534/): Auth bypass in teltonika:rut900 firmware (medium 6.8) - [CVE-2018-17533](https://insights.sbomify.com/CVE-2018-17533/): Cross-site scripting in teltonika:rut900 firmware (medium 6.1) - [CVE-2018-17532](https://insights.sbomify.com/CVE-2018-17532/): Command injection in teltonika:rut900 firmware (critical 9.8) - [CVE-2018-1753](https://insights.sbomify.com/CVE-2018-1753/): Information disclosure in Security Key Lifecycle Manager (medium 4.3) - [CVE-2018-1751](https://insights.sbomify.com/CVE-2018-1751/): Weak cryptography in Security Key Lifecycle Manager (medium 5.9) - [CVE-2018-17502](https://insights.sbomify.com/CVE-2018-17502/): Information disclosure in The Receptionist for iPad (medium 4.0) - [CVE-2018-17500](https://insights.sbomify.com/CVE-2018-17500/): Hardcoded credentials in Envoy Passport for Android (low 2.9) - [CVE-2018-1750](https://insights.sbomify.com/CVE-2018-1750/): Misconfiguration in Security Key Lifecycle Manager (medium 4.2) - [CVE-2018-17499](https://insights.sbomify.com/CVE-2018-17499/): Information disclosure in Envoy Passport for Android (low 2.9) - [CVE-2018-17497](https://insights.sbomify.com/CVE-2018-17497/): Hardcoded credentials in eVisitorPass (high 8.4) - [CVE-2018-17496](https://insights.sbomify.com/CVE-2018-17496/): Security feature bypass in eVisitorPass (high 8.4) - [CVE-2018-17495](https://insights.sbomify.com/CVE-2018-17495/): Privilege escalation in eVisitorPass (high 8.4) - [CVE-2018-17494](https://insights.sbomify.com/CVE-2018-17494/): Privilege escalation in eVisitorPass (high 8.4) - [CVE-2018-17493](https://insights.sbomify.com/CVE-2018-17493/): Security feature bypass in eVisitorPass (high 8.4) - [CVE-2018-17492](https://insights.sbomify.com/CVE-2018-17492/): Hardcoded credentials in EasyLobby Solo (high 8.4) - [CVE-2018-17491](https://insights.sbomify.com/CVE-2018-17491/): Privilege escalation in EasyLobby Solo (high 8.4) - [CVE-2018-17490](https://insights.sbomify.com/CVE-2018-17490/): Missing authorization in EasyLobby Solo (high 7.7) - [CVE-2018-1749](https://insights.sbomify.com/CVE-2018-1749/): Security feature bypass in Security Key Lifecycle Manager (medium 4.3) - [CVE-2018-17489](https://insights.sbomify.com/CVE-2018-17489/): Information disclosure in EasyLobby Solo (low 2.9) - [CVE-2018-17488](https://insights.sbomify.com/CVE-2018-17488/): Privilege escalation in Lobby Track Desktop (high 8.4) - [CVE-2018-17487](https://insights.sbomify.com/CVE-2018-17487/): Privilege escalation in Lobby Track Desktop (high 8.4) - [CVE-2018-17486](https://insights.sbomify.com/CVE-2018-17486/): Security feature bypass in Lobby Track Desktop (low 2.9) - [CVE-2018-17485](https://insights.sbomify.com/CVE-2018-17485/): Hardcoded credentials in Lobby Track Desktop (high 8.4) - [CVE-2018-17484](https://insights.sbomify.com/CVE-2018-17484/): Information disclosure in Lobby Track Desktop (medium 4.0) - [CVE-2018-17483](https://insights.sbomify.com/CVE-2018-17483/): Information disclosure in Lobby Track Desktop (low 2.9) - [CVE-2018-17482](https://insights.sbomify.com/CVE-2018-17482/): Information disclosure in Lobby Track Desktop (medium 4.0) - [CVE-2018-17481](https://insights.sbomify.com/CVE-2018-17481/): Use after free in Chrome (high 8.8) - [CVE-2018-17480](https://insights.sbomify.com/CVE-2018-17480/): Google Chromium V8 Out-of-Bounds Write (high 8.8, exploited in the wild) - [CVE-2018-17479](https://insights.sbomify.com/CVE-2018-17479/): Use after free in Chrome (high 8.8) - [CVE-2018-17478](https://insights.sbomify.com/CVE-2018-17478/): Memory corruption in Chrome (high 8.8) - [CVE-2018-17477](https://insights.sbomify.com/CVE-2018-17477/): Other in Chrome (medium 4.3) - [CVE-2018-17476](https://insights.sbomify.com/CVE-2018-17476/): Other in Chrome (medium 4.3) - [CVE-2018-17475](https://insights.sbomify.com/CVE-2018-17475/): Other in Chrome (medium 4.3) - [CVE-2018-17474](https://insights.sbomify.com/CVE-2018-17474/): Use after free in Chrome (high 8.8) - [CVE-2018-17473](https://insights.sbomify.com/CVE-2018-17473/): Other in Chrome (medium 4.3) - [CVE-2018-17472](https://insights.sbomify.com/CVE-2018-17472/): Security feature bypass in Chrome (critical 9.6) - [CVE-2018-17471](https://insights.sbomify.com/CVE-2018-17471/): Security feature bypass in Chrome (medium 4.3) - [CVE-2018-17470](https://insights.sbomify.com/CVE-2018-17470/): Memory corruption in Chrome (high 7.4) - [CVE-2018-1747](https://insights.sbomify.com/CVE-2018-1747/): XML external entity in Security Key Lifecycle Manager (high 7.1) - [CVE-2018-17469](https://insights.sbomify.com/CVE-2018-17469/): Memory corruption in Chrome (high 8.8) - [CVE-2018-17468](https://insights.sbomify.com/CVE-2018-17468/): Information disclosure in Chrome (medium 6.5) - [CVE-2018-17467](https://insights.sbomify.com/CVE-2018-17467/): Other in Chrome (medium 4.3) - [CVE-2018-17466](https://insights.sbomify.com/CVE-2018-17466/): Memory corruption in Chrome (high 8.8) - [CVE-2018-17465](https://insights.sbomify.com/CVE-2018-17465/): Use after free in Chrome (high 8.8) - [CVE-2018-17464](https://insights.sbomify.com/CVE-2018-17464/): Other in Chrome (medium 4.3) - [CVE-2018-17463](https://insights.sbomify.com/CVE-2018-17463/): Google Chromium V8 Remote Code Execution (high 8.8, exploited in the wild) - [CVE-2018-17462](https://insights.sbomify.com/CVE-2018-17462/): Use after free in Chrome (critical 9.6) - [CVE-2018-17461](https://insights.sbomify.com/CVE-2018-17461/): Memory corruption in Chrome (high 8.8) - [CVE-2018-17460](https://insights.sbomify.com/CVE-2018-17460/): Other in Chrome (medium 6.5) - [CVE-2018-17459](https://insights.sbomify.com/CVE-2018-17459/): Other in Chrome (medium 6.5) - [CVE-2018-17458](https://insights.sbomify.com/CVE-2018-17458/): Memory corruption in Chrome (high 8.8) - [CVE-2018-17457](https://insights.sbomify.com/CVE-2018-17457/): Use after free in Chrome (high 8.8) - [CVE-2018-17456](https://insights.sbomify.com/CVE-2018-17456/): Command injection in canonical:ubuntu linux (critical 9.8) - [CVE-2018-17455](https://insights.sbomify.com/CVE-2018-17455/): Missing authorization in gitlab:gitlab (high 7.5) - [CVE-2018-17454](https://insights.sbomify.com/CVE-2018-17454/): Cross-site scripting in gitlab:gitlab (medium 5.4) - [CVE-2018-17453](https://insights.sbomify.com/CVE-2018-17453/): Information disclosure in gitlab:gitlab (medium 5.3) - [CVE-2018-17452](https://insights.sbomify.com/CVE-2018-17452/): Server-side request forgery in gitlab:gitlab (critical 9.8) - [CVE-2018-17451](https://insights.sbomify.com/CVE-2018-17451/): Cross-site request forgery in gitlab:gitlab (high 8.8) - [CVE-2018-17450](https://insights.sbomify.com/CVE-2018-17450/): Server-side request forgery in gitlab:gitlab (medium 4.3) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/89/