Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 93 of 163.
- CVE-2018-17036 Code injection in ucms project:ucms
- CVE-2018-17035 SQL injection in ucms project:ucms
- CVE-2018-17034 Cross-site scripting in ucms project:ucms
- CVE-2018-17031 Gogs XSS Vulnerability
- CVE-2018-17030 Code injection in bigtreecms:bigtree cms
- CVE-2018-17026 Cross-site scripting in monstra:monstra
- CVE-2018-17025 Cross-site scripting in monstra:monstra
- CVE-2018-17024 Cross-site scripting in monstra:monstra
- CVE-2018-17023 Cross-site request forgery in asus:gt-ac5300 firmware
- CVE-2018-17022 Memory corruption in asus:gt-ac5300 firmware
- CVE-2018-17021 Cross-site scripting in asus:gt-ac5300 firmware
- CVE-2018-17020 Denial of service in asus:gt-ac5300 firmware
- CVE-2018-1702 XML external entity in Platform Symphony
- CVE-2018-17019 Denial of service in bro:bro
- CVE-2018-17018 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17017 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17016 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17015 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17014 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17013 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17012 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17011 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17010 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-1701 Command injection in InfoSphere Information Server
- CVE-2018-17009 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17008 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17007 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17006 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17005 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17004 Denial of service in tp-link:tl-wr886n firmware
- CVE-2018-17003 Cross-site scripting in limesurvey:limesurvey
- CVE-2018-17002 Cross-site scripting in ricoh:mp 2001sp firmware
- CVE-2018-17001 Cross-site scripting in ricoh:sp 4510sf firmware
- CVE-2018-17000 Null dereference in canonical:ubuntu linux
- CVE-2018-16999 Memory corruption in nasm:netwide assembler
- CVE-2018-16994 Denial of service in phoenixcontact:axl f bk eth firmware
- CVE-2018-1699 SQL injection in Maximo Asset Management
- CVE-2018-16988 Auth bypass in buffalo:open xdmod
- CVE-2018-16987 Information disclosure in squashtest:squash tm
- CVE-2018-16986 Memory corruption in ti:ble-stack
- CVE-2018-16985 Memory corruption in lizard project:lizard
- CVE-2018-16984 Django allows unprivileged users to read the password hashes of arbitrary accounts
- CVE-2018-16983 Security feature bypass in noscript:noscript
- CVE-2018-16982 Open Chinese Convert subject to Denial of Service via Out-of-bounds Read
- CVE-2018-16981 Memory corruption in debian:debian linux
- CVE-2018-16980 Cross-site scripting in dotcms:dotcms
- CVE-2018-1698 Information disclosure in Maximo Asset Management
- CVE-2018-16979 Other in monstra:monstra
- CVE-2018-16978 Cross-site scripting in monstra:monstra
- CVE-2018-16977 Information disclosure in monstra:monstra
- CVE-2018-16976 Race condition in gitolite:gitolite
- CVE-2018-16975 Elefant CMS PHP Code Execution Vulnerability
- CVE-2018-16974 Elefant CMS Code Execution Vulnerability
- CVE-2018-16971 Missing authorization in wisetail:learning management system
- CVE-2018-16970 Missing authorization in wisetail:learning management system
- CVE-2018-1697 Information disclosure in Maximo Asset Management
- CVE-2018-16969 Information disclosure in citrix:sharefile storagezones controller
- CVE-2018-16968 Path traversal in citrix:sharefile storagezones controller
- CVE-2018-16967 Cross-site scripting in filemanagerpro:file manager
- CVE-2018-16966 Cross-site request forgery in filemanagerpro:file manager
- CVE-2018-16965 Cross-site scripting in zohocorp:manageengine supportcenter plus
- CVE-2018-16962 Privilege escalation in webroot:secureanywhere
- CVE-2018-16961 Path traversal in buffalo:open xdmod
- CVE-2018-16960 Cross-site scripting in buffalo:open xdmod
- CVE-2018-16959 Information disclosure in oracle:webcenter interaction
- CVE-2018-16958 Misconfiguration in oracle:webcenter interaction
- CVE-2018-16957 Hardcoded credentials in oracle:webcenter interaction
- CVE-2018-16956 Denial of service in oracle:webcenter interaction
- CVE-2018-16955 Cross-site scripting in oracle:webcenter interaction
- CVE-2018-16954 Open redirect in oracle:webcenter interaction
- CVE-2018-16953 Cross-site scripting in oracle:webcenter interaction
- CVE-2018-16952 Cross-site request forgery in oracle:webcenter interaction
- CVE-2018-16951 Command injection in xunfeng project:xunfeng
- CVE-2018-16950 Denial of service in inteno:dg400 firmware
- CVE-2018-1695 Auth bypass in WebSphere Application Server
- CVE-2018-16949 Denial of service in debian:debian linux
- CVE-2018-16948 Information disclosure in debian:debian linux
- CVE-2018-16947 Auth bypass in debian:debian linux
- CVE-2018-16946 Missing authorization in lg:lnb5110 firmware
- CVE-2018-1694 Misconfiguration in Rational Collaborative Lifecycle Management
- CVE-2018-1692 Cross-site scripting in Rational Quality Manager
- CVE-2018-1691 Cross-site scripting in Rational Quality Manager
- CVE-2018-1690 Cross-site scripting in Rhapsody Model Manager
- CVE-2018-16890 Memory corruption in curl
- CVE-2018-16889 Information disclosure in ceph
- CVE-2018-16888 Privilege escalation in systemd
- CVE-2018-16887 katello Cross-site Scripting vulnerability
- CVE-2018-16886 go.etcd.io/etcd Authentication Bypass
- CVE-2018-16885 Memory corruption in kernel
- CVE-2018-16884 Use after free in kernel:
- CVE-2018-16883 Information disclosure in sssd
- CVE-2018-16882 Use after free in kernel:
- CVE-2018-16881 Integer overflow in rsyslog:
- CVE-2018-16880 Memory corruption in kernel
- CVE-2018-1688 Cross-site scripting in Rational Collaborative Lifecycle Management
- CVE-2018-16879 Misconfiguration in Tower
- CVE-2018-16878 Denial of service in pacemaker
- CVE-2018-16877 Auth bypass in pacemaker
- CVE-2018-16876 Ansible sensitive information disclosure
- CVE-2018-16875 Denial of service in golang