# Vulnerabilities published in 2018


- [CVE-2018-1675](https://insights.sbomify.com/CVE-2018-1675/): Information disclosure in Tivoli Application Dependency Discovery Manager (medium 6.8)
- [CVE-2018-16749](https://insights.sbomify.com/CVE-2018-16749/): Null dereference in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-16745](https://insights.sbomify.com/CVE-2018-16745/): Memory corruption in mgetty project:mgetty (high 7.8)
- [CVE-2018-16744](https://insights.sbomify.com/CVE-2018-16744/): Command injection in mgetty project:mgetty (high 7.8)
- [CVE-2018-16743](https://insights.sbomify.com/CVE-2018-16743/): Memory corruption in mgetty project:mgetty (high 7.8)
- [CVE-2018-16742](https://insights.sbomify.com/CVE-2018-16742/): Memory corruption in mgetty project:mgetty (high 7.8)
- [CVE-2018-16741](https://insights.sbomify.com/CVE-2018-16741/): Command injection in debian:debian linux (high 7.8)
- [CVE-2018-1674](https://insights.sbomify.com/CVE-2018-1674/): SQL injection in Business Process Manager (medium 6.3)
- [CVE-2018-16739](https://insights.sbomify.com/CVE-2018-16739/): Path traversal in abus:tvip 10000 firmware (high 8.8)
- [CVE-2018-16738](https://insights.sbomify.com/CVE-2018-16738/): Auth bypass in debian:debian linux (low 3.7)
- [CVE-2018-16737](https://insights.sbomify.com/CVE-2018-16737/): Auth bypass in starwindsoftware:starwind virtual san (medium 5.3)
- [CVE-2018-16736](https://insights.sbomify.com/CVE-2018-16736/): Cross-site scripting in rcfilters project:rcfilters (medium 5.4)
- [CVE-2018-16733](https://insights.sbomify.com/CVE-2018-16733/): Go Ethereum Improper Input Validation (high 7.5)
- [CVE-2018-16732](https://insights.sbomify.com/CVE-2018-16732/): Cross-site request forgery in chshcms:cscms (high 8.8)
- [CVE-2018-16731](https://insights.sbomify.com/CVE-2018-16731/): File upload in chshcms:cscms (critical 9.8)
- [CVE-2018-16730](https://insights.sbomify.com/CVE-2018-16730/): Cross-site scripting in chshcms:cscms (medium 6.1)
- [CVE-2018-1673](https://insights.sbomify.com/CVE-2018-1673/): Cross-site scripting in WebSphere Portal (medium 6.1)
- [CVE-2018-16729](https://insights.sbomify.com/CVE-2018-16729/): Cross-site scripting in pluck-cms:pluck (medium 5.4)
- [CVE-2018-16728](https://insights.sbomify.com/CVE-2018-16728/): Cross-site scripting in feindura:feindura (medium 5.4)
- [CVE-2018-16727](https://insights.sbomify.com/CVE-2018-16727/): Cross-site scripting in razorcms:razorcms (medium 5.4)
- [CVE-2018-16726](https://insights.sbomify.com/CVE-2018-16726/): Cross-site scripting in razorcms:razorcms (medium 5.4)
- [CVE-2018-16725](https://insights.sbomify.com/CVE-2018-16725/): Cross-site scripting in baijiacms project:baijiacms (medium 6.1)
- [CVE-2018-16724](https://insights.sbomify.com/CVE-2018-16724/): SQL injection in baijiacms project:baijiacms (critical 9.8)
- [CVE-2018-16723](https://insights.sbomify.com/CVE-2018-16723/): Memory corruption in v-secure:jingyun antivirus (high 7.8)
- [CVE-2018-16722](https://insights.sbomify.com/CVE-2018-16722/): Memory corruption in v-secure:jingyun antivirus (high 7.8)
- [CVE-2018-16721](https://insights.sbomify.com/CVE-2018-16721/): Memory corruption in v-secure:jingyun antivirus (high 7.8)
- [CVE-2018-16720](https://insights.sbomify.com/CVE-2018-16720/): Memory corruption in v-secure:jingyun antivirus (high 7.8)
- [CVE-2018-1672](https://insights.sbomify.com/CVE-2018-1672/): Auth bypass in WebSphere Portal (medium 5.0)
- [CVE-2018-16719](https://insights.sbomify.com/CVE-2018-16719/): Memory corruption in v-secure:jingyun antivirus (high 7.8)
- [CVE-2018-16718](https://insights.sbomify.com/CVE-2018-16718/): Cross-site scripting in nih:ncbi toolbox (medium 6.1)
- [CVE-2018-16717](https://insights.sbomify.com/CVE-2018-16717/): Memory corruption in nih:ncbi toolbox (critical 9.8)
- [CVE-2018-16716](https://insights.sbomify.com/CVE-2018-16716/): Path traversal in nih:ncbi toolbox (critical 9.1)
- [CVE-2018-16715](https://insights.sbomify.com/CVE-2018-16715/): Misconfiguration in absolute:ctes windows agent (high 8.8)
- [CVE-2018-16713](https://insights.sbomify.com/CVE-2018-16713/): Memory corruption in iobit:advanced systemcare (medium 6.5)
- [CVE-2018-16712](https://insights.sbomify.com/CVE-2018-16712/): Information disclosure in iobit:advanced systemcare (medium 6.5)
- [CVE-2018-16711](https://insights.sbomify.com/CVE-2018-16711/): Memory corruption in iobit:advanced systemcare (high 8.8)
- [CVE-2018-16710](https://insights.sbomify.com/CVE-2018-16710/): Information disclosure in octoprint:octoprint (critical 9.1)
- [CVE-2018-1671](https://insights.sbomify.com/CVE-2018-1671/): Cross-site scripting in ibm:curam social program management (medium 6.1)
- [CVE-2018-16709](https://insights.sbomify.com/CVE-2018-16709/): Missing authorization in fujixerox:apeosport-v 5070 firmware (critical 9.8)
- [CVE-2018-16706](https://insights.sbomify.com/CVE-2018-16706/): Missing authorization in lg:supersign cms (high 7.5)
- [CVE-2018-16705](https://insights.sbomify.com/CVE-2018-16705/): Information disclosure in furuno:felcom 250 firmware (critical 9.8)
- [CVE-2018-16704](https://insights.sbomify.com/CVE-2018-16704/): Gleez CMS Vulnerability Allows Forced Browsing to Profile Page of Other Users (medium 4.3)
- [CVE-2018-16703](https://insights.sbomify.com/CVE-2018-16703/): Security feature bypass in gleeztech:gleez cms (medium 5.3)
- [CVE-2018-1670](https://insights.sbomify.com/CVE-2018-1670/): Information disclosure in Financial Transaction Manager (low 3.1)
- [CVE-2018-1669](https://insights.sbomify.com/CVE-2018-1669/): XML external entity in DataPower Gateway CD (high 7.1)
- [CVE-2018-1668](https://insights.sbomify.com/CVE-2018-1668/): Auth bypass in DataPower Gateway (medium 5.3)
- [CVE-2018-16672](https://insights.sbomify.com/CVE-2018-16672/): Information disclosure in circontrol:circarlife scada (medium 6.5)
- [CVE-2018-16671](https://insights.sbomify.com/CVE-2018-16671/): Information disclosure in circontrol:circarlife scada (medium 5.3)
- [CVE-2018-16670](https://insights.sbomify.com/CVE-2018-16670/): Missing authorization in circontrol:circarlife scada (medium 5.3)
- [CVE-2018-1667](https://insights.sbomify.com/CVE-2018-1667/): Cross-site scripting in DataPower Gateways (medium 5.4)
- [CVE-2018-16669](https://insights.sbomify.com/CVE-2018-16669/): Information disclosure in circontrol:open charge point protocol (critical 9.8)
- [CVE-2018-16668](https://insights.sbomify.com/CVE-2018-16668/): Information disclosure in circontrol:circarlife scada (medium 5.3)
- [CVE-2018-16667](https://insights.sbomify.com/CVE-2018-16667/): Memory corruption in contiki-ng:contiki-ng. (high 7.0)
- [CVE-2018-16666](https://insights.sbomify.com/CVE-2018-16666/): Memory corruption in contiki-ng:contiki-ng. (high 7.8)
- [CVE-2018-16665](https://insights.sbomify.com/CVE-2018-16665/): Memory corruption in contiki-ng:contiki-ng. (medium 6.1)
- [CVE-2018-16664](https://insights.sbomify.com/CVE-2018-16664/): Memory corruption in contiki-ng:contiki-ng. (high 7.0)
- [CVE-2018-16663](https://insights.sbomify.com/CVE-2018-16663/): Memory corruption in contiki-ng:contiki-ng. (high 7.8)
- [CVE-2018-16660](https://insights.sbomify.com/CVE-2018-16660/): Command injection in imperva:securesphere (high 8.8)
- [CVE-2018-1666](https://insights.sbomify.com/CVE-2018-1666/): Other in DataPower Gateway (medium 4.3)
- [CVE-2018-16659](https://insights.sbomify.com/CVE-2018-16659/): SQL injection in rausoft:id.prove (critical 9.8)
- [CVE-2018-16658](https://insights.sbomify.com/CVE-2018-16658/): Information disclosure in canonical:ubuntu linux (medium 6.1)
- [CVE-2018-16657](https://insights.sbomify.com/CVE-2018-16657/): Null dereference in debian:debian linux (critical 9.8)
- [CVE-2018-16656](https://insights.sbomify.com/CVE-2018-16656/): Missing authorization in kyocera:taskalfa 4002i firmware (high 7.5)
- [CVE-2018-16655](https://insights.sbomify.com/CVE-2018-16655/): Cross-site scripting in gxlcms:gxlcms (medium 6.1)
- [CVE-2018-16654](https://insights.sbomify.com/CVE-2018-16654/): Cross-site scripting in zurmo:zurmo crm (medium 6.1)
- [CVE-2018-16653](https://insights.sbomify.com/CVE-2018-16653/): Cross-site scripting in rejucms project:rejucms (medium 6.1)
- [CVE-2018-16651](https://insights.sbomify.com/CVE-2018-16651/): Code injection in phpmyfaq:phpmyfaq (high 7.2)
- [CVE-2018-16650](https://insights.sbomify.com/CVE-2018-16650/): phpMyFAQ CSRF (high 8.8)
- [CVE-2018-1665](https://insights.sbomify.com/CVE-2018-1665/): Weak cryptography in DataPower Gateway (medium 5.9)
- [CVE-2018-16648](https://insights.sbomify.com/CVE-2018-16648/): Memory corruption in artifex:mupdf (medium 5.5)
- [CVE-2018-16647](https://insights.sbomify.com/CVE-2018-16647/): Memory corruption in artifex:mupdf (medium 5.5)
- [CVE-2018-16646](https://insights.sbomify.com/CVE-2018-16646/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-16645](https://insights.sbomify.com/CVE-2018-16645/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-16644](https://insights.sbomify.com/CVE-2018-16644/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-16643](https://insights.sbomify.com/CVE-2018-16643/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-16642](https://insights.sbomify.com/CVE-2018-16642/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-16641](https://insights.sbomify.com/CVE-2018-16641/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2018-16640](https://insights.sbomify.com/CVE-2018-16640/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-1664](https://insights.sbomify.com/CVE-2018-1664/): Information disclosure in DataPower Gateway CD (medium 6.2)
- [CVE-2018-16639](https://insights.sbomify.com/CVE-2018-16639/): Cross-site scripting in typesettercms:typesetter (medium 5.4)
- [CVE-2018-16638](https://insights.sbomify.com/CVE-2018-16638/): Evolution CMS Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2018-16637](https://insights.sbomify.com/CVE-2018-16637/): Evolution CMS Stored Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2018-16636](https://insights.sbomify.com/CVE-2018-16636/): Cross-site scripting in nucleuscms:nucleus cms (medium 6.5)
- [CVE-2018-16635](https://insights.sbomify.com/CVE-2018-16635/): Cross-site scripting in blackcat-cms:blackcat cms (medium 5.4)
- [CVE-2018-16634](https://insights.sbomify.com/CVE-2018-16634/): Cross-site request forgery in pluck-cms:pluck (high 8.8)
- [CVE-2018-16633](https://insights.sbomify.com/CVE-2018-16633/): Cross-site scripting in pluck-cms:pluck (medium 5.4)
- [CVE-2018-16632](https://insights.sbomify.com/CVE-2018-16632/): Cross-site scripting in jupo:mezzanine (medium 4.8)
- [CVE-2018-16631](https://insights.sbomify.com/CVE-2018-16631/): Cross-site scripting in intelliants:subrion cms (medium 5.4)
- [CVE-2018-16630](https://insights.sbomify.com/CVE-2018-16630/): Kirby XSS Vulnerability (medium 4.8)
- [CVE-2018-1663](https://insights.sbomify.com/CVE-2018-1663/): Misconfiguration in DataPower Gateways (medium 5.9)
- [CVE-2018-16629](https://insights.sbomify.com/CVE-2018-16629/): Subrion CMS XSS (medium 4.8)
- [CVE-2018-16628](https://insights.sbomify.com/CVE-2018-16628/): Cross-site scripting in getkirby:kirby (medium 5.4)
- [CVE-2018-16627](https://insights.sbomify.com/CVE-2018-16627/): Other in getkirby:kirby (medium 6.1)
- [CVE-2018-16626](https://insights.sbomify.com/CVE-2018-16626/): Cross-site scripting in typesettercms:typesetter (medium 4.8)
- [CVE-2018-16625](https://insights.sbomify.com/CVE-2018-16625/): Cross-site scripting in typesettercms:typesetter (medium 4.8)
- [CVE-2018-16624](https://insights.sbomify.com/CVE-2018-16624/): Cross-site scripting in getkirby:kirby (medium 5.4)
- [CVE-2018-16623](https://insights.sbomify.com/CVE-2018-16623/): Cross-site scripting in getkirby:kirby (medium 4.8)
- [CVE-2018-16622](https://insights.sbomify.com/CVE-2018-16622/): Cross-site scripting in html-js:doracms (medium 5.4)
- [CVE-2018-16621](https://insights.sbomify.com/CVE-2018-16621/): Code injection in sonatype:nexus repository manager (high 7.2)
- [CVE-2018-16620](https://insights.sbomify.com/CVE-2018-16620/): Missing authorization in sonatype:nexus repository manager (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/95/