Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 91 of 163.
- CVE-2018-17313 Cross-site scripting in ricoh:mp c307 firmware
- CVE-2018-17312 Cross-site scripting in ricoh:aficio mp 301spf firmware
- CVE-2018-17311 Cross-site scripting in ricoh:mp c6503 firmware
- CVE-2018-17310 Cross-site scripting in ricoh:mp c1803 jpn firmware
- CVE-2018-1731 Cross-site scripting in Rational DOORS Next Generation
- CVE-2018-17309 Cross-site scripting in ricoh:mp c406zspf firmware
- CVE-2018-17305 Privilege escalation in uipath:orchestrator
- CVE-2018-17302 Cross-site scripting in espocrm:espocrm
- CVE-2018-17301 Cross-site scripting in espocrm:espocrm
- CVE-2018-17300 Cross-site scripting in cuppacms:cuppacms
- CVE-2018-1730 XML external entity in QRadar SIEM
- CVE-2018-17298 Auth bypass in enalean:tuleap
- CVE-2018-17297 Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
- CVE-2018-17294 Memory corruption in canonical:ubuntu linux
- CVE-2018-17293 Null dereference in webassembly virtual machine project:webassembly virtual machine
- CVE-2018-17292 Memory corruption in webassembly virtual machine project:webassembly virtual machine
- CVE-2018-1729 Information disclosure in QRadar SIEM
- CVE-2018-17289 XML external entity in kofax:front office server
- CVE-2018-17288 Cross-site scripting in kofax:front office server
- CVE-2018-17287 Information disclosure in kofax:front office server
- CVE-2018-17283 Missing authorization in zohocorp:manageengine opmanager
- CVE-2018-17282 Null dereference in exiv2:exiv2
- CVE-2018-17281 Denial of service in debian:debian linux
- CVE-2018-1728 Cross-site scripting in QRadar SIEM
- CVE-2018-1727 XML external entity in InfoSphere Information Server
- CVE-2018-17256 Umbraco CMS vulnerable to stored XSS
- CVE-2018-17254 SQL injection in arkextensions:jck editor
- CVE-2018-1725 Information disclosure in QRadar SIEM
- CVE-2018-17247 Improper Restriction of XML External Entity Reference in Elasticsearch
- CVE-2018-17246 Code injection in Kibana
- CVE-2018-17245 Information disclosure in Kibana
- CVE-2018-17244 Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
- CVE-2018-17243 SQL injection in zohocorp:manageengine opmanager
- CVE-2018-17240 Information disclosure in netwavepr:indoor ip camera firmware
- CVE-2018-1724 Misconfiguration in Spectrum LSF
- CVE-2018-17237 Denial of service in hdfgroup:hdf5
- CVE-2018-17236 Memory corruption in mp4v2 project:mp4v2
- CVE-2018-17235 Memory corruption in mp4v2 project:mp4v2
- CVE-2018-17234 Denial of service in hdfgroup:hdf5
- CVE-2018-17233 Denial of service in hdfgroup:hdf5
- CVE-2018-17232 SQL injection in slack archivebot project:slack archivebot
- CVE-2018-17231 Denial of service in telegram:telegram desktop
- CVE-2018-17230 Memory corruption in exiv2:exiv2
- CVE-2018-1723 Information disclosure in Spectrum Scale
- CVE-2018-17229 Memory corruption in exiv2:exiv2
- CVE-2018-17228 Command injection in nmap4j project:nmap4j
- CVE-2018-1722 Other in Security Access Manager Appliance
- CVE-2018-17218 Cross-site scripting in ptc:thingworx platform
- CVE-2018-17217 Hardcoded credentials in ptc:thingworx platform
- CVE-2018-17216 Information disclosure in ptc:thingworx platform
- CVE-2018-17215 Information disclosure in postman:postman
- CVE-2018-17213 Auth bypass in printeron:central print services
- CVE-2018-17211 Information disclosure in printeron:central print services
- CVE-2018-17210 Auth bypass in printeron:central print services
- CVE-2018-1721 XML external entity in Cognos Analytics
- CVE-2018-17208 Command injection in linksys:velop firmware
- CVE-2018-17207 Code injection in awesomemotive:duplicator
- CVE-2018-17206 Memory corruption in canonical:ubuntu linux
- CVE-2018-17205 Denial of service in canonical:ubuntu linux
- CVE-2018-17204 Denial of service in canonical:ubuntu linux
- CVE-2018-17202 Infinite Loop in Apache Sanselan
- CVE-2018-17201 Improper Input Validation in Apache Sanselan
- CVE-2018-17200 Deserialization in OFBiz
- CVE-2018-1720 Weak cryptography in Sterling B2B Integrator
- CVE-2018-17199 Security feature bypass in Apache HTTP Server
- CVE-2018-17198 XML external entity in Apache Roller
- CVE-2018-17197 Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser
- CVE-2018-17196 Improper Input Validation in Apache Kafka
- CVE-2018-17195 Cleartext Transmission of Sensitive Information in Apache nifi
- CVE-2018-17194 Apache NiFi Improper Input Validation vulnerability
- CVE-2018-17193 Cross site scripting in org.apache.nifi:nifi
- CVE-2018-17192 Improper Restriction of Rendered UI Layers or Frames in Apache nifif
- CVE-2018-17191 Code injection in Apache NetBeans
- CVE-2018-17190 Remote Code Execution in spark-core
- CVE-2018-1719 Weak cryptography in WebSphere Application Server
- CVE-2018-17189 Denial of service in Apache HTTP Server
- CVE-2018-17188 Privilege escalation in Apache CouchDB
- CVE-2018-17187 Improper Certificate Validation in proton-j
- CVE-2018-17186 Improper Restriction of XML External Entity Reference in org.apache.syncope:syncope-core
- CVE-2018-17184 Improper Control of Interaction Frequency in Apache syncope-core
- CVE-2018-17183 Code injection in artifex:ghostscript
- CVE-2018-17182 Use after free in canonical:ubuntu linux
- CVE-2018-17181 SQL injection in open-emr:openemr
- CVE-2018-17180 Path traversal in open-emr:openemr
- CVE-2018-1718 Cross-site scripting in Sterling B2B Integrator
- CVE-2018-17179 SQL injection in open-emr:openemr
- CVE-2018-17178 Auth bypass in neatorobotics:botvac d3 connected firmware
- CVE-2018-17177 Hardcoded credentials in neatorobotics:botvac 85 firmware
- CVE-2018-17176 Auth bypass in neatorobotics:botvac d4 connected firmware
- CVE-2018-17175 In marshmallow library the schema "only" option treats an empty list as implying no "only" option
- CVE-2018-17174 Memory corruption in nmealib project:nmealib
- CVE-2018-17173 Code injection in lg:supersign cms
- CVE-2018-17172 Command injection in xerox:altalink b8045 firmware
- CVE-2018-17170 Code injection in teamwire:teamwire
- CVE-2018-17169 XML external entity in printeron:printeron
- CVE-2018-17168 Cross-site request forgery in printeron:printeron
- CVE-2018-17167 Cross-site scripting in printeron:printeron
- CVE-2018-17161 Memory corruption in FreeBSD
- CVE-2018-17160 Memory corruption in FreeBSD
- CVE-2018-1716 Cross-site scripting in WebSphere Portal