# Vulnerabilities published in 2018


- [CVE-2018-8826](https://insights.sbomify.com/CVE-2018-8826/): Code injection in n/a (critical 9.8)
- [CVE-2018-8825](https://insights.sbomify.com/CVE-2018-8825/): Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow (high 8.8)
- [CVE-2018-8824](https://insights.sbomify.com/CVE-2018-8824/): SQL injection in n/a (critical 9.8)
- [CVE-2018-8823](https://insights.sbomify.com/CVE-2018-8823/): Code injection in n/a (critical 9.8)
- [CVE-2018-8822](https://insights.sbomify.com/CVE-2018-8822/): Memory corruption in n/a (high 7.8)
- [CVE-2018-8821](https://insights.sbomify.com/CVE-2018-8821/): Denial of service in n/a (medium 5.5)
- [CVE-2018-8820](https://insights.sbomify.com/CVE-2018-8820/): SQL injection in n/a (high 7.5)
- [CVE-2018-8819](https://insights.sbomify.com/CVE-2018-8819/): XML external entity in n/a (high 7.5)
- [CVE-2018-8817](https://insights.sbomify.com/CVE-2018-8817/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2018-8815](https://insights.sbomify.com/CVE-2018-8815/): Cross-site scripting in n/a (medium 4.6)
- [CVE-2018-8814](https://insights.sbomify.com/CVE-2018-8814/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2018-8813](https://insights.sbomify.com/CVE-2018-8813/): Open redirect in n/a (medium 4.8)
- [CVE-2018-8811](https://insights.sbomify.com/CVE-2018-8811/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2018-8810](https://insights.sbomify.com/CVE-2018-8810/): Denial of service in n/a (medium 5.5)
- [CVE-2018-8809](https://insights.sbomify.com/CVE-2018-8809/): Memory corruption in n/a (medium 5.5)
- [CVE-2018-8808](https://insights.sbomify.com/CVE-2018-8808/): Memory corruption in n/a (medium 5.5)
- [CVE-2018-8807](https://insights.sbomify.com/CVE-2018-8807/): Use after free in n/a (medium 6.5)
- [CVE-2018-8806](https://insights.sbomify.com/CVE-2018-8806/): Use after free in n/a (medium 6.5)
- [CVE-2018-8805](https://insights.sbomify.com/CVE-2018-8805/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8804](https://insights.sbomify.com/CVE-2018-8804/): Memory corruption in n/a (high 8.8)
- [CVE-2018-8802](https://insights.sbomify.com/CVE-2018-8802/): SQL injection in n/a (high 8.1)
- [CVE-2018-8801](https://insights.sbomify.com/CVE-2018-8801/): Server-side request forgery in n/a (medium 6.5)
- [CVE-2018-8800](https://insights.sbomify.com/CVE-2018-8800/): Memory corruption in rdesktop (critical 9.8)
- [CVE-2018-8799](https://insights.sbomify.com/CVE-2018-8799/): Denial of service in rdesktop (high 7.5)
- [CVE-2018-8798](https://insights.sbomify.com/CVE-2018-8798/): Information disclosure in rdesktop (high 7.5)
- [CVE-2018-8797](https://insights.sbomify.com/CVE-2018-8797/): Memory corruption in rdesktop (critical 9.8)
- [CVE-2018-8796](https://insights.sbomify.com/CVE-2018-8796/): Denial of service in rdesktop (high 7.5)
- [CVE-2018-8795](https://insights.sbomify.com/CVE-2018-8795/): Integer overflow in rdesktop (critical 9.8)
- [CVE-2018-8794](https://insights.sbomify.com/CVE-2018-8794/): Integer overflow in rdesktop (critical 9.8)
- [CVE-2018-8793](https://insights.sbomify.com/CVE-2018-8793/): Memory corruption in rdesktop (critical 9.8)
- [CVE-2018-8792](https://insights.sbomify.com/CVE-2018-8792/): Denial of service in rdesktop (high 7.5)
- [CVE-2018-8791](https://insights.sbomify.com/CVE-2018-8791/): Information disclosure in rdesktop (high 7.5)
- [CVE-2018-8790](https://insights.sbomify.com/CVE-2018-8790/): Privilege escalation in ZoneAlarm (high 7.8)
- [CVE-2018-8789](https://insights.sbomify.com/CVE-2018-8789/): Denial of service in FreeRDP (high 7.5)
- [CVE-2018-8788](https://insights.sbomify.com/CVE-2018-8788/): Memory corruption in FreeRDP (critical 9.8)
- [CVE-2018-8787](https://insights.sbomify.com/CVE-2018-8787/): Integer overflow in FreeRDP (critical 9.8)
- [CVE-2018-8786](https://insights.sbomify.com/CVE-2018-8786/): Integer overflow in FreeRDP (critical 9.8)
- [CVE-2018-8785](https://insights.sbomify.com/CVE-2018-8785/): Memory corruption in FreeRDP (critical 9.8)
- [CVE-2018-8784](https://insights.sbomify.com/CVE-2018-8784/): Memory corruption in FreeRDP (critical 9.8)
- [CVE-2018-8781](https://insights.sbomify.com/CVE-2018-8781/): Integer overflow in Linux Kernel (high 7.8)
- [CVE-2018-8780](https://insights.sbomify.com/CVE-2018-8780/): Path traversal in n/a (critical 9.1)
- [CVE-2018-8779](https://insights.sbomify.com/CVE-2018-8779/): Other in n/a (high 7.5)
- [CVE-2018-8778](https://insights.sbomify.com/CVE-2018-8778/): Information disclosure in n/a (high 7.5)
- [CVE-2018-8777](https://insights.sbomify.com/CVE-2018-8777/): Denial of service in n/a (high 7.5)
- [CVE-2018-8772](https://insights.sbomify.com/CVE-2018-8772/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8770](https://insights.sbomify.com/CVE-2018-8770/): Information disclosure in n/a (medium 5.3)
- [CVE-2018-8769](https://insights.sbomify.com/CVE-2018-8769/): Memory corruption in n/a (high 7.8)
- [CVE-2018-8768](https://insights.sbomify.com/CVE-2018-8768/): Jupyter Notebook file bypasses sanitization, executes JavaScript (high 7.8)
- [CVE-2018-8767](https://insights.sbomify.com/CVE-2018-8767/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2018-8766](https://insights.sbomify.com/CVE-2018-8766/): File upload in n/a (critical 9.8)
- [CVE-2018-8765](https://insights.sbomify.com/CVE-2018-8765/): Denial of service in n/a (high 7.8)
- [CVE-2018-8764](https://insights.sbomify.com/CVE-2018-8764/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2018-8763](https://insights.sbomify.com/CVE-2018-8763/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8761](https://insights.sbomify.com/CVE-2018-8761/): Business logic in n/a (high 7.5)
- [CVE-2018-8756](https://insights.sbomify.com/CVE-2018-8756/): Code injection in n/a (high 7.2)
- [CVE-2018-8755](https://insights.sbomify.com/CVE-2018-8755/): Information disclosure in n/a (critical 9.8)
- [CVE-2018-8754](https://insights.sbomify.com/CVE-2018-8754/): Memory corruption in n/a (medium 5.5)
- [CVE-2018-8753](https://insights.sbomify.com/CVE-2018-8753/): Weak cryptography in n/a (medium 5.9)
- [CVE-2018-8741](https://insights.sbomify.com/CVE-2018-8741/): Path traversal in n/a (high 8.8)
- [CVE-2018-8740](https://insights.sbomify.com/CVE-2018-8740/): Null dereference in n/a (high 7.5)
- [CVE-2018-8739](https://insights.sbomify.com/CVE-2018-8739/): Privilege escalation in n/a (critical 9.8)
- [CVE-2018-8738](https://insights.sbomify.com/CVE-2018-8738/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8737](https://insights.sbomify.com/CVE-2018-8737/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-8736](https://insights.sbomify.com/CVE-2018-8736/): Privilege escalation in n/a (high 8.8)
- [CVE-2018-8735](https://insights.sbomify.com/CVE-2018-8735/): Command injection in n/a (high 8.8)
- [CVE-2018-8734](https://insights.sbomify.com/CVE-2018-8734/): SQL injection in n/a (critical 9.8)
- [CVE-2018-8733](https://insights.sbomify.com/CVE-2018-8733/): Auth bypass in n/a (critical 9.8)
- [CVE-2018-8732](https://insights.sbomify.com/CVE-2018-8732/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-8729](https://insights.sbomify.com/CVE-2018-8729/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8728](https://insights.sbomify.com/CVE-2018-8728/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8727](https://insights.sbomify.com/CVE-2018-8727/): Path traversal in n/a (high 7.5)
- [CVE-2018-8726](https://insights.sbomify.com/CVE-2018-8726/): Memory corruption in n/a (high 7.8)
- [CVE-2018-8725](https://insights.sbomify.com/CVE-2018-8725/): Memory corruption in n/a (high 7.8)
- [CVE-2018-8724](https://insights.sbomify.com/CVE-2018-8724/): Privilege escalation in n/a (high 7.8)
- [CVE-2018-8722](https://insights.sbomify.com/CVE-2018-8722/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8721](https://insights.sbomify.com/CVE-2018-8721/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2018-8720](https://insights.sbomify.com/CVE-2018-8720/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-8719](https://insights.sbomify.com/CVE-2018-8719/): Information disclosure in n/a (medium 5.3)
- [CVE-2018-8718](https://insights.sbomify.com/CVE-2018-8718/): Cross-Site Request Forgery in Jenkins Mailer Plugin (high 8.0)
- [CVE-2018-8717](https://insights.sbomify.com/CVE-2018-8717/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2018-8716](https://insights.sbomify.com/CVE-2018-8716/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2018-8715](https://insights.sbomify.com/CVE-2018-8715/): Auth bypass in n/a (high 8.1)
- [CVE-2018-8714](https://insights.sbomify.com/CVE-2018-8714/): Information disclosure in n/a (medium 6.1)
- [CVE-2018-8712](https://insights.sbomify.com/CVE-2018-8712/): Path traversal in n/a (critical 9.8)
- [CVE-2018-8711](https://insights.sbomify.com/CVE-2018-8711/): Path traversal in n/a (critical 9.8)
- [CVE-2018-8710](https://insights.sbomify.com/CVE-2018-8710/): Code injection in n/a (critical 9.8)
- [CVE-2018-8654](https://insights.sbomify.com/CVE-2018-8654/): Privilege escalation in Microsoft Dynamics 365 (on-premises) version 8 (medium 6.5)
- [CVE-2018-8653](https://insights.sbomify.com/CVE-2018-8653/): Microsoft Internet Explorer Scripting Engine Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2018-8652](https://insights.sbomify.com/CVE-2018-8652/): Cross-site scripting in Windows Azure Pack Rollup 13.1 (medium 5.4)
- [CVE-2018-8651](https://insights.sbomify.com/CVE-2018-8651/): Cross-site scripting in Microsoft Dynamics NAV (medium 5.4)
- [CVE-2018-8650](https://insights.sbomify.com/CVE-2018-8650/): Cross-site scripting in Microsoft SharePoint (medium 5.4)
- [CVE-2018-8649](https://insights.sbomify.com/CVE-2018-8649/): Denial of service in Windows 10 (medium 5.5)
- [CVE-2018-8643](https://insights.sbomify.com/CVE-2018-8643/): Memory corruption in Internet Explorer 10 (high 7.5)
- [CVE-2018-8641](https://insights.sbomify.com/CVE-2018-8641/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2018-8639](https://insights.sbomify.com/CVE-2018-8639/): Microsoft Windows Win32k Improper Resource Shutdown or Release (high 8.4, exploited in the wild)
- [CVE-2018-8638](https://insights.sbomify.com/CVE-2018-8638/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-8637](https://insights.sbomify.com/CVE-2018-8637/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-8636](https://insights.sbomify.com/CVE-2018-8636/): Memory corruption in Microsoft Excel (high 7.8)
- [CVE-2018-8635](https://insights.sbomify.com/CVE-2018-8635/): Privilege escalation in Microsoft SharePoint (high 8.8)
- [CVE-2018-8634](https://insights.sbomify.com/CVE-2018-8634/): Memory corruption in Windows 10 (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/9/