Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 94 of 163.
- CVE-2018-16874 Path traversal in golang
- CVE-2018-16873 Command injection in golang
- CVE-2018-16872 Race condition in QEMU:
- CVE-2018-16871 Null dereference in kernel:
- CVE-2018-16870 Weak cryptography in wolfssl
- CVE-2018-16869 Weak cryptography in nettle
- CVE-2018-16868 Weak cryptography in gnutls
- CVE-2018-16867 Path traversal in QEMU:
- CVE-2018-16866 Information disclosure in systemd
- CVE-2018-16865 Memory corruption in systemd
- CVE-2018-16864 Memory corruption in systemd
- CVE-2018-16863 Command injection in ghostscript
- CVE-2018-16862 Information disclosure in kernel:
- CVE-2018-16861 Cross-site scripting in foreman
- CVE-2018-16860 Auth bypass in samba
- CVE-2018-1686 Cross-site scripting in Maximo Asset Management
- CVE-2018-16859 Ansible Logs Passwords If PowerShell ScriptBlock is Enabled
- CVE-2018-16858 Path traversal in libreoffice
- CVE-2018-16857 Security feature bypass in samba
- CVE-2018-16856 Openstack Octavia allows Insertion of Sensitive Information into Log File
- CVE-2018-16855 Memory corruption in pdns-recursor
- CVE-2018-16854 Moodle Login CSRF vulnerability in login form
- CVE-2018-16853 Denial of service in samba
- CVE-2018-16852 Null dereference in samba
- CVE-2018-16851 Null dereference in samba
- CVE-2018-16850 SQL injection in postgresql
- CVE-2018-1685 Information disclosure in ibm:db2
- CVE-2018-16849 openstack-mistral Discloses the presence of arbitrary files within the filesystem
- CVE-2018-16848 OpenStack Mistral DoS
- CVE-2018-16847 Memory corruption in QEMU:
- CVE-2018-16846 Denial of service in ceph
- CVE-2018-16845 Denial of service in nginx
- CVE-2018-16844 Denial of service in nginx
- CVE-2018-16843 Denial of service in nginx
- CVE-2018-16842 Memory corruption in curl:
- CVE-2018-16841 Memory corruption in samba
- CVE-2018-16840 Use after free in curl
- CVE-2018-1684 Denial of service in MQ
- CVE-2018-16839 Memory corruption in curl:
- CVE-2018-16838 Auth bypass in sssd
- CVE-2018-16837 Ansible Leaks Data Passed to ssh-keygen
- CVE-2018-16836 Path traversal in rubedo project:rubedo
- CVE-2018-16833 Cross-site scripting in zohocorp:manageengine desktop central
- CVE-2018-16832 Cross-site request forgery in xunfeng project:xunfeng
- CVE-2018-16831 Smarty Path Traversal Vulnerability
- CVE-2018-1683 Information disclosure in WebSphere Application Server
- CVE-2018-16822 SQL injection in seacms:seacms
- CVE-2018-16821 Path traversal in seacms:seacms
- CVE-2018-16820 Path traversal in monstra:monstra
- CVE-2018-1682 Information disclosure in Watson Studio Local
- CVE-2018-16819 Path traversal in monstra:monstra
- CVE-2018-16809 Dolibarr SQL injection via the integer parameters qty and value_unit
- CVE-2018-16808 Dolibarr Stored Cross-site Scripting in expensereport/card.php
- CVE-2018-16807 Denial of service in bro:bro
- CVE-2018-16806 Weak cryptography in pektron:passive keyless entry and start system firmware
- CVE-2018-16805 Cross-site scripting in b3log:solo
- CVE-2018-16804 Cross-site scripting in ucms project:ucms
- CVE-2018-16803 SQL injection in cimtechniques:cimscan
- CVE-2018-16802 Security feature bypass in artifex:ghostscript
- CVE-2018-1680 Misconfiguration in Security Privileged Identity Manager
- CVE-2018-16797 Memory corruption in kakaocorp:potplayer
- CVE-2018-16796 File upload in hiscout:grc suite
- CVE-2018-16795 Cross-site request forgery in open-emr:openemr
- CVE-2018-16794 Server-side request forgery in microsoft:active directory federation services
- CVE-2018-16793 Server-side request forgery in microsoft:exchange server
- CVE-2018-16792 XML external entity in solarwinds:sftp\/scp server
- CVE-2018-16791 Misconfiguration in solarwinds:sftp\/scp server
- CVE-2018-16790 Memory corruption in mongodb:libbson
- CVE-2018-1679 Information disclosure in Sterling B2B Integrator
- CVE-2018-16789 Denial of service in shellinabox project:shellinabox
- CVE-2018-16786 Cross-site scripting in dedecms:dedecms
- CVE-2018-16785 Code injection in dedecms:dedecms
- CVE-2018-16784 Code injection in dedecms:dedecms
- CVE-2018-16782 Memory corruption in entropymine:imageworsener
- CVE-2018-16781 Denial of service in rockcarry:ffjpeg
- CVE-2018-16780 Cross-site scripting in complete responsive cms blog project:complete responsive cms blog
- CVE-2018-16779 Cross-site scripting in blogcms project:blogcms
- CVE-2018-16778 Cross-site scripting in jenzabar:jenzabar
- CVE-2018-16776 Cross-site scripting in creatiwity:witycms
- CVE-2018-16775 Cross-site scripting in victor cms project:victor cms
- CVE-2018-16774 Path traversal in hongcms project:hongcms
- CVE-2018-16773 Cross-site scripting in easycms:easycms
- CVE-2018-16772 Cross-site scripting in hoosk:hoosk
- CVE-2018-16771 Code injection in hoosk:hoosk
- CVE-2018-16770 Memory corruption in webassembly virtual machine project:webassembly virtual machine
- CVE-2018-1677 Denial of service in DataPower Gateways
- CVE-2018-16769 Memory corruption in webassembly virtual machine project:webassembly virtual machine
- CVE-2018-16768 Memory corruption in webassembly virtual machine project:webassembly virtual machine
- CVE-2018-16767 Memory corruption in webassembly virtual machine project:webassembly virtual machine
- CVE-2018-16766 Denial of service in webassembly virtual machine project:webassembly virtual machine
- CVE-2018-16765 Memory corruption in webassembly virtual machine project:webassembly virtual machine
- CVE-2018-16764 Memory corruption in webassembly virtual machine project:webassembly virtual machine
- CVE-2018-16763 Code injection in thedaylightstudio:fuel cms
- CVE-2018-16762 SQL injection in thedaylightstudio:fuel cms
- CVE-2018-16761 Open redirect in eventum project:eventum
- CVE-2018-1676 Cross-site scripting in Planning Analytics Local
- CVE-2018-16759 Cross-site scripting in easycms:easycms
- CVE-2018-16758 Auth bypass in debian:debian linux
- CVE-2018-16752 Command injection in linknet-usa:lw-n605r firmware
- CVE-2018-16750 Denial of service in canonical:ubuntu linux