# Vulnerabilities published in 2018


- [CVE-2018-17159](https://insights.sbomify.com/CVE-2018-17159/): Denial of service in FreeBSD (high 7.5)
- [CVE-2018-17158](https://insights.sbomify.com/CVE-2018-17158/): Integer overflow in FreeBSD (high 7.5)
- [CVE-2018-17157](https://insights.sbomify.com/CVE-2018-17157/): Integer overflow in FreeBSD (critical 9.8)
- [CVE-2018-17156](https://insights.sbomify.com/CVE-2018-17156/): Memory corruption in FreeBSD (medium 5.9)
- [CVE-2018-17155](https://insights.sbomify.com/CVE-2018-17155/): Information disclosure in FreeBSD (medium 5.5)
- [CVE-2018-17154](https://insights.sbomify.com/CVE-2018-17154/): Null dereference in FreeBSD (medium 5.5)
- [CVE-2018-17153](https://insights.sbomify.com/CVE-2018-17153/): Auth bypass in western digital:my cloud dl2100 (critical 9.8)
- [CVE-2018-17152](https://insights.sbomify.com/CVE-2018-17152/): XML external entity in intersystems:cache (medium 6.4)
- [CVE-2018-17151](https://insights.sbomify.com/CVE-2018-17151/): Missing authorization in intersystems:cache (medium 5.4)
- [CVE-2018-17150](https://insights.sbomify.com/CVE-2018-17150/): Cross-site scripting in intersystems:cache (medium 6.1)
- [CVE-2018-1715](https://insights.sbomify.com/CVE-2018-1715/): Cross-site scripting in Maximo Asset Management (medium 5.4)
- [CVE-2018-17148](https://insights.sbomify.com/CVE-2018-17148/): Missing authorization in nagios:nagios xi (critical 9.8)
- [CVE-2018-17147](https://insights.sbomify.com/CVE-2018-17147/): Cross-site scripting in nagios:nagios xi (medium 4.8)
- [CVE-2018-17146](https://insights.sbomify.com/CVE-2018-17146/): Cross-site scripting in nagios:nagios xi (medium 5.4)
- [CVE-2018-17145](https://insights.sbomify.com/CVE-2018-17145/): Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145) (high 7.5)
- [CVE-2018-17144](https://insights.sbomify.com/CVE-2018-17144/): Denial of service in bitcoin:bitcoin core (high 7.5)
- [CVE-2018-17143](https://insights.sbomify.com/CVE-2018-17143/): golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer (high 7.5)
- [CVE-2018-17142](https://insights.sbomify.com/CVE-2018-17142/): golang.org/x/net/html NULL Pointer Dereference vulnerability (high 7.5)
- [CVE-2018-17141](https://insights.sbomify.com/CVE-2018-17141/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2018-17140](https://insights.sbomify.com/CVE-2018-17140/): Cross-site scripting in vms-studio:quizlord (medium 5.4)
- [CVE-2018-17139](https://insights.sbomify.com/CVE-2018-17139/): File upload in ultimatefosters:ultimatepos (high 8.8)
- [CVE-2018-17138](https://insights.sbomify.com/CVE-2018-17138/): Cross-site scripting in nickelpro:jibu pro (medium 5.4)
- [CVE-2018-17137](https://insights.sbomify.com/CVE-2018-17137/): Misconfiguration in prezi:next (critical 9.8)
- [CVE-2018-17136](https://insights.sbomify.com/CVE-2018-17136/): SQL injection in zzcms:zzcms (critical 9.8)
- [CVE-2018-17134](https://insights.sbomify.com/CVE-2018-17134/): Code injection in phpmywind:phpmywind (high 7.2)
- [CVE-2018-17133](https://insights.sbomify.com/CVE-2018-17133/): Code injection in phpmywind:phpmywind (high 7.2)
- [CVE-2018-17132](https://insights.sbomify.com/CVE-2018-17132/): Code injection in phpmywind:phpmywind (high 7.2)
- [CVE-2018-17131](https://insights.sbomify.com/CVE-2018-17131/): Code injection in phpmywind:phpmywind (high 7.2)
- [CVE-2018-17130](https://insights.sbomify.com/CVE-2018-17130/): Cross-site scripting in phpmywind:phpmywind (medium 5.4)
- [CVE-2018-17129](https://insights.sbomify.com/CVE-2018-17129/): SQL injection in metinfo:metinfo (medium 4.9)
- [CVE-2018-17128](https://insights.sbomify.com/CVE-2018-17128/): Cross-site scripting in mybb:mybb (medium 5.4)
- [CVE-2018-17127](https://insights.sbomify.com/CVE-2018-17127/): Null dereference in asus:gt-ac5300 firmware (high 7.5)
- [CVE-2018-17126](https://insights.sbomify.com/CVE-2018-17126/): Code injection in chshcms:cscms (critical 9.8)
- [CVE-2018-17125](https://insights.sbomify.com/CVE-2018-17125/): Path traversal in chshcms:cscms (high 7.5)
- [CVE-2018-1712](https://insights.sbomify.com/CVE-2018-1712/): Server-side request forgery in API Connect (high 8.6)
- [CVE-2018-17113](https://insights.sbomify.com/CVE-2018-17113/): Cross-site scripting in easycms:easycms (medium 6.1)
- [CVE-2018-17111](https://insights.sbomify.com/CVE-2018-17111/): Missing authorization in coinlancer:coinlancer (critical 9.8)
- [CVE-2018-17110](https://insights.sbomify.com/CVE-2018-17110/): SQL injection in tecdiary:simple pos (critical 9.8)
- [CVE-2018-1711](https://insights.sbomify.com/CVE-2018-1711/): Privilege escalation in DB2 for Linux, UNIX and Windows (high 8.4)
- [CVE-2018-17108](https://insights.sbomify.com/CVE-2018-17108/): Auth bypass in sbi:sbi buddy (high 8.8)
- [CVE-2018-17107](https://insights.sbomify.com/CVE-2018-17107/): tgstation-server cached user logins in legacy server (critical 9.8)
- [CVE-2018-17106](https://insights.sbomify.com/CVE-2018-17106/): Memory corruption in tinyftp project:tinyftp (high 7.5)
- [CVE-2018-17104](https://insights.sbomify.com/CVE-2018-17104/): Cross-site request forgery in microweber:microweber (high 8.8)
- [CVE-2018-17103](https://insights.sbomify.com/CVE-2018-17103/): Cross-site request forgery in get-simple:getsimple cms (high 8.8)
- [CVE-2018-17102](https://insights.sbomify.com/CVE-2018-17102/): QuickAppsCMS Cross-Site Request Forgery (CSRF) (high 8.8)
- [CVE-2018-17101](https://insights.sbomify.com/CVE-2018-17101/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2018-17100](https://insights.sbomify.com/CVE-2018-17100/): Integer overflow in canonical:ubuntu linux (high 8.8)
- [CVE-2018-1710](https://insights.sbomify.com/CVE-2018-1710/): Memory corruption in DB2 for Linux, UNIX and Windows (high 8.4)
- [CVE-2018-17098](https://insights.sbomify.com/CVE-2018-17098/): Memory corruption in surina:soundtouch (high 8.8)
- [CVE-2018-17097](https://insights.sbomify.com/CVE-2018-17097/): Memory corruption in surina:soundtouch (high 8.8)
- [CVE-2018-17096](https://insights.sbomify.com/CVE-2018-17096/): Denial of service in surina:soundtouch (medium 6.5)
- [CVE-2018-17095](https://insights.sbomify.com/CVE-2018-17095/): Memory corruption in audiofile:audiofile (high 8.8)
- [CVE-2018-17092](https://insights.sbomify.com/CVE-2018-17092/): SQL injection in i4a:donlinkage (medium 5.4)
- [CVE-2018-17091](https://insights.sbomify.com/CVE-2018-17091/): Information disclosure in i4a:donlinkage (medium 5.4)
- [CVE-2018-17090](https://insights.sbomify.com/CVE-2018-17090/): Cross-site scripting in i4a:donlinkage (medium 5.4)
- [CVE-2018-17088](https://insights.sbomify.com/CVE-2018-17088/): Integer overflow in jhead project:jhead (high 7.8)
- [CVE-2018-17086](https://insights.sbomify.com/CVE-2018-17086/): Cross-site scripting in otcms:otcms (medium 6.1)
- [CVE-2018-17085](https://insights.sbomify.com/CVE-2018-17085/): Cross-site scripting in otcms:otcms (medium 6.1)
- [CVE-2018-17082](https://insights.sbomify.com/CVE-2018-17082/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2018-17081](https://insights.sbomify.com/CVE-2018-17081/): Cross-site request forgery in e107:e107 (medium 4.3)
- [CVE-2018-1708](https://insights.sbomify.com/CVE-2018-1708/): Information disclosure in Spectrum Symphony (medium 6.5)
- [CVE-2018-17079](https://insights.sbomify.com/CVE-2018-17079/): Cross-site scripting in zrlog:zrlog (medium 6.1)
- [CVE-2018-17077](https://insights.sbomify.com/CVE-2018-17077/): Cross-site scripting in yiqicms project:yiqicms (medium 6.1)
- [CVE-2018-17076](https://insights.sbomify.com/CVE-2018-17076/): Memory corruption in logological:general-purpose preprocessor (high 8.8)
- [CVE-2018-17075](https://insights.sbomify.com/CVE-2018-17075/): golang.org/x/net/html NULL Pointer Dereference vulnerability (high 7.5)
- [CVE-2018-17074](https://insights.sbomify.com/CVE-2018-17074/): Open redirect in feed statistics project:feed statistics (medium 6.1)
- [CVE-2018-17073](https://insights.sbomify.com/CVE-2018-17073/): Null dereference in bitmap project:bitmap (high 7.5)
- [CVE-2018-17072](https://insights.sbomify.com/CVE-2018-17072/): Memory corruption in json\+\+ project:json\+\+ (critical 9.8)
- [CVE-2018-17071](https://insights.sbomify.com/CVE-2018-17071/): Weak cryptography in lucky9:lucky9io (high 7.5)
- [CVE-2018-17070](https://insights.sbomify.com/CVE-2018-17070/): Cross-site request forgery in unlcms:unlcms (medium 6.5)
- [CVE-2018-17069](https://insights.sbomify.com/CVE-2018-17069/): Cross-site request forgery in unlcms:unlcms (medium 6.5)
- [CVE-2018-17068](https://insights.sbomify.com/CVE-2018-17068/): Command injection in dlink:dir-816 a2 firmware (critical 9.8)
- [CVE-2018-17067](https://insights.sbomify.com/CVE-2018-17067/): Memory corruption in dlink:dir-816 a2 firmware (critical 9.8)
- [CVE-2018-17066](https://insights.sbomify.com/CVE-2018-17066/): Command injection in dlink:dir-816 a2 firmware (critical 9.8)
- [CVE-2018-17065](https://insights.sbomify.com/CVE-2018-17065/): Memory corruption in dlink:dir-816 a2 firmware (critical 9.8)
- [CVE-2018-17064](https://insights.sbomify.com/CVE-2018-17064/): Command injection in dlink:dir-816 a2 firmware (critical 9.8)
- [CVE-2018-17063](https://insights.sbomify.com/CVE-2018-17063/): Command injection in dlink:dir-816 a2 firmware (critical 9.8)
- [CVE-2018-17062](https://insights.sbomify.com/CVE-2018-17062/): Cross-site scripting in seacms:seacms (medium 6.1)
- [CVE-2018-17061](https://insights.sbomify.com/CVE-2018-17061/): Cross-site scripting in bullguard:safe browsing (medium 6.1)
- [CVE-2018-17060](https://insights.sbomify.com/CVE-2018-17060/): Improper Access Control in Telerik Extensions (medium 5.3)
- [CVE-2018-1706](https://insights.sbomify.com/CVE-2018-1706/): Cross-site scripting in Spectrum Symphony (medium 5.4)
- [CVE-2018-17058](https://insights.sbomify.com/CVE-2018-17058/): File upload in jaba:jaba xpress (high 8.8)
- [CVE-2018-17057](https://insights.sbomify.com/CVE-2018-17057/): TCPDF vulnerable to attackers triggering deserialization of arbitrary data (critical 9.8)
- [CVE-2018-17056](https://insights.sbomify.com/CVE-2018-17056/): Cross-site scripting in progress:sitefinity cms (medium 6.1)
- [CVE-2018-17055](https://insights.sbomify.com/CVE-2018-17055/): File upload in progress:sitefinity (high 7.5)
- [CVE-2018-17054](https://insights.sbomify.com/CVE-2018-17054/): Cross-site scripting in progress:sitefinity cms (medium 6.1)
- [CVE-2018-17053](https://insights.sbomify.com/CVE-2018-17053/): Cross-site scripting in progress:sitefinity cms (medium 6.1)
- [CVE-2018-17051](https://insights.sbomify.com/CVE-2018-17051/): Cross-site scripting in knet:cisco configuration manager (medium 6.1)
- [CVE-2018-17050](https://insights.sbomify.com/CVE-2018-17050/): Integer overflow in polyai project:polyai (high 7.5)
- [CVE-2018-1705](https://insights.sbomify.com/CVE-2018-1705/): Information disclosure in Platform Symphony (medium 6.5)
- [CVE-2018-17049](https://insights.sbomify.com/CVE-2018-17049/): Cross-site scripting in cqu lankers project:cqu lankers (medium 6.1)
- [CVE-2018-17048](https://insights.sbomify.com/CVE-2018-17048/): SQL injection in fangfa:fdcms (high 7.5)
- [CVE-2018-17046](https://insights.sbomify.com/CVE-2018-17046/): Cross-site scripting in translate man project:translate man (medium 6.1)
- [CVE-2018-17045](https://insights.sbomify.com/CVE-2018-17045/): Cross-site request forgery in cms maelostore project:cms maelostore (high 8.8)
- [CVE-2018-17044](https://insights.sbomify.com/CVE-2018-17044/): Cross-site scripting in yzmcms:yzmcms (medium 4.8)
- [CVE-2018-17043](https://insights.sbomify.com/CVE-2018-17043/): Memory corruption in doc2txt project:doc2txt (high 7.8)
- [CVE-2018-17042](https://insights.sbomify.com/CVE-2018-17042/): Denial of service in scalabium:dbf2txt (medium 5.5)
- [CVE-2018-1704](https://insights.sbomify.com/CVE-2018-1704/): Open redirect in Platform Symphony (medium 6.8)
- [CVE-2018-17039](https://insights.sbomify.com/CVE-2018-17039/): Cross-site scripting in 1234n:minicms (medium 6.1)
- [CVE-2018-17037](https://insights.sbomify.com/CVE-2018-17037/): Privilege escalation in ucms project:ucms (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/92/