Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 90 of 163.
- CVE-2018-1745 Missing authorization in Security Key Lifecycle Manager
- CVE-2018-17449 Missing authorization in gitlab:gitlab
- CVE-2018-17448 Missing authorization in citrix:netscaler sd-wan
- CVE-2018-17447 Information disclosure in citrix:netscaler sd-wan
- CVE-2018-17446 SQL injection in citrix:netscaler sd-wan
- CVE-2018-17445 Command injection in citrix:netscaler sd-wan
- CVE-2018-17444 Path traversal in citrix:netscaler sd-wan
- CVE-2018-17443 Cross-site scripting in dlink:central wifimanager
- CVE-2018-17442 File upload in dlink:central wifimanager
- CVE-2018-17441 Cross-site scripting in dlink:central wifimanager
- CVE-2018-17440 File upload in dlink:central wifimanager
- CVE-2018-1744 Path traversal in Security Key Lifecycle Manager
- CVE-2018-17439 Memory corruption in hdfgroup:hdf5
- CVE-2018-17438 Denial of service in hdfgroup:hdf5
- CVE-2018-17437 Denial of service in hdfgroup:hdf5
- CVE-2018-17436 Memory corruption in hdfgroup:hdf5
- CVE-2018-17435 Memory corruption in hdfgroup:hdf5
- CVE-2018-17434 Denial of service in hdfgroup:hdf5
- CVE-2018-17433 Memory corruption in hdfgroup:hdf5
- CVE-2018-17432 Null dereference in hdfgroup:hdf5
- CVE-2018-17431 Auth bypass in comodo:unified threat management firewall
- CVE-2018-1743 Information disclosure in Security Key Lifecycle Manager
- CVE-2018-17429 Cross-site request forgery in jtbc:jtbc
- CVE-2018-17428 SQL injection in nexusfi:opac easyweb five
- CVE-2018-17427 Memory corruption in simdcomp project:simdcomp
- CVE-2018-17426 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2018-17425 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2018-17423 Cross-site scripting in e107:e107
- CVE-2018-17422 Open redirect in dotcms:dotcms
- CVE-2018-17421 Cross-site scripting in zrlog:zrlog
- CVE-2018-17420 SQL injection in zrlog:zrlog
- CVE-2018-1742 Hardcoded credentials in Security Key Lifecycle Manager
- CVE-2018-17419 miekg/dns parsing error leads to nil pointer dereference and DoS
- CVE-2018-17418 File upload in monstra:monstra
- CVE-2018-17416 SQL injection in zzcms:zzcms
- CVE-2018-17415 SQL injection in zzcms:zzcms
- CVE-2018-17414 SQL injection in zzcms:zzcms
- CVE-2018-17413 Cross-site scripting in zzcms:zzcms
- CVE-2018-17412 SQL injection in zzcms:zzcms
- CVE-2018-17411 XML external entity in informationbuilders:data quality suite
- CVE-2018-17410 SQL injection in horus cms project:horus cms
- CVE-2018-1741 Denial of service in Security Key Lifecycle Manager
- CVE-2018-17408 Memory corruption in zahiraccounting:zahir enterprise plus
- CVE-2018-17407 Memory corruption in canonical:ubuntu linux
- CVE-2018-17404 Information disclosure in sbi:sbi buddy
- CVE-2018-17403 Auth bypass in phonepe:phonepe
- CVE-2018-17402 Information disclosure in phonepe:phonepe
- CVE-2018-17401 Auth bypass in phonepe:phonepe
- CVE-2018-17400 Information disclosure in phonepe:phonepe
- CVE-2018-1740 Cross-site scripting in Security Access Manager Appliance
- CVE-2018-17399 SQL injection in jimtawl project:jimtawl
- CVE-2018-17398 SQL injection in arenam:amgallery
- CVE-2018-17397 SQL injection in multiplanet:alphaindex dictionaries
- CVE-2018-17394 SQL injection in osthemeclub:timetable schedule
- CVE-2018-17393 SQL injection in healthnode hospital management system project:healthnode hospital management system
- CVE-2018-17391 SQL injection in super cms blog pro project:super cms blog pro
- CVE-2018-17389 Cross-site request forgery in ranksol:live call support
- CVE-2018-17388 SQL injection in ranksol:twilio web to fax machine system
- CVE-2018-17387 Cross-site request forgery in ranksol:nimble professional
- CVE-2018-17386 SQL injection in thephpfactory:micro deal factory
- CVE-2018-17385 SQL injection in thephpfactory:social factory
- CVE-2018-17384 SQL injection in thephpfactory:swap factory
- CVE-2018-17383 SQL injection in thephpfactory:collection factory
- CVE-2018-17382 SQL injection in thephpfactory:jobs factory
- CVE-2018-17381 SQL injection in thephpfactory:dutch auction factory
- CVE-2018-17380 SQL injection in thephpfactory:article factory manager
- CVE-2018-1738 Auth bypass in Security Key Lifecycle Manager
- CVE-2018-17379 SQL injection in thephpfactory:raffle factory
- CVE-2018-17378 SQL injection in thephpfactory:penny auction factory
- CVE-2018-17377 SQL injection in extensiondeveloper:questions
- CVE-2018-17376 SQL injection in thephpfactory:reverse auction factory
- CVE-2018-17375 SQL injection in joomlathat:music collection
- CVE-2018-17374 SQL injection in thephpfactory:auction factory
- CVE-2018-17369 Cross-site scripting in springboot authority project:springboot authority
- CVE-2018-17368 Information disclosure in publiccms:publiccms
- CVE-2018-17366 Mingsoft MCMS CSRF vulnerability
- CVE-2018-17365 Path traversal in seacms:seacms
- CVE-2018-17364 Code injection in otcms:otcms
- CVE-2018-17361 Cross-site scripting in weaselcms project:weaselcms
- CVE-2018-17360 Memory corruption in gnu:binutils
- CVE-2018-1736 Open redirect in WebSphere Portal
- CVE-2018-17359 Memory corruption in gnu:binutils
- CVE-2018-17358 Memory corruption in gnu:binutils
- CVE-2018-17341 Auth bypass in bigtreecms:bigtree cms
- CVE-2018-1734 Information disclosure in Rational Collaborative Lifecycle Management
- CVE-2018-17338 Memory corruption in pdfalto project:pdfalto
- CVE-2018-17337 Cross-site scripting in intelbras:nplug firmware
- CVE-2018-17336 Memory corruption in canonical:ubuntu linux
- CVE-2018-17334 Memory corruption in libsvg2 project:libsvg2
- CVE-2018-17333 Memory corruption in libsvg2 project:libsvg2
- CVE-2018-17332 Denial of service in libsvg2 project:libsvg2
- CVE-2018-1733 Other in QRadar SIEM
- CVE-2018-17322 Cross-site scripting in yunucms:yunucms
- CVE-2018-17321 Cross-site scripting in seacms:seacms
- CVE-2018-17320 Cross-site scripting in ucms project:ucms
- CVE-2018-1732 Information disclosure in QRadar SIEM
- CVE-2018-17317 Command injection in fruitywifi project:fruitywifi
- CVE-2018-17316 Cross-site scripting in ricoh:mp c6003 firmware
- CVE-2018-17315 Cross-site scripting in ricoh:mp c2003sp firmware
- CVE-2018-17314 Cross-site scripting in ricoh:mp 305\+ firmware