Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 96 of 163.
- CVE-2018-16619 Cross-site scripting in sonatype:nexus repository manager
- CVE-2018-16618 Command injection in vtech:storio max firmware
- CVE-2018-16613 Privilege escalation in gvectors:wpforo forum
- CVE-2018-1661 Cross-site request forgery in DataPower Gateways
- CVE-2018-16608 Missing authorization in monstra:monstra
- CVE-2018-16607 Cross-site scripting in opmantek:open-audit
- CVE-2018-16606 Missing authorization in proconf:proconf
- CVE-2018-16605 Cross-site scripting in dlink:dir-600m firmware
- CVE-2018-16604 Code injection in nibbleblog:nibbleblog
- CVE-2018-16603 Information disclosure in amazon:amazon web services freertos
- CVE-2018-16602 Memory corruption in amazon:amazon web services freertos
- CVE-2018-16601 Integer overflow in amazon:amazon web services freertos
- CVE-2018-16600 Memory corruption in amazon:amazon web services freertos
- CVE-2018-1660 Cross-site scripting in WebSphere Portal
- CVE-2018-16599 Memory corruption in amazon:amazon web services freertos
- CVE-2018-16598 Other in amazon:amazon web services freertos
- CVE-2018-16597 Missing authorization in linux:linux kernel
- CVE-2018-16596 Memory corruption in swisscom:internet-box 2 firmware
- CVE-2018-16595 Memory corruption in sony:r5c firmware
- CVE-2018-16594 Path traversal in sony:r5c firmware
- CVE-2018-16593 Command injection in sony:r5c firmware
- CVE-2018-16591 Missing authorization in furuno:felcom 250 firmware
- CVE-2018-16590 Auth bypass in furuno:felcom 250 firmware
- CVE-2018-1659 Cross-site scripting in Rational Engineering Lifecycle Manager
- CVE-2018-16588 Privilege escalation in suse:shadow
- CVE-2018-16587 Path traversal in debian:debian linux
- CVE-2018-16586 Other in debian:debian linux
- CVE-2018-16585 Memory corruption in artifex:ghostscript
- CVE-2018-1658 Other in Rational Collaborative Lifecycle Management
- CVE-2018-1657 Cross-site scripting in Rational Publishing Engine
- CVE-2018-16563 Denial of service in Firmware variant DNP3 TCP for EN100 Ethernet module
- CVE-2018-16561 Denial of service in SIMATIC S7-300 CPUs
- CVE-2018-1656 Path traversal in SDK, Java Technology Edition
- CVE-2018-16559 Denial of service in SIMATIC S7-1500 CPU
- CVE-2018-16558 Denial of service in SIMATIC S7-1500 CPU
- CVE-2018-16557 Denial of service in SIMATIC S7-400 CPU 412-1 DP V7
- CVE-2018-16556 Denial of service in SIMATIC S7-400 CPU 412-1 DP V7
- CVE-2018-16555 Cross-site scripting in SCALANCE S602, SCALANCE S612, SCALANCE S623, SCALANCE S627-2M
- CVE-2018-16554 Memory corruption in jhead project:jhead
- CVE-2018-16553 Code injection in jspxcms:jspxcms
- CVE-2018-16552 MicroPyramid Django-CRM CSRF
- CVE-2018-16551 Stored XSS in LavaLite 5.5
- CVE-2018-16550 Auth bypass in teamviewer:teamviewer
- CVE-2018-1655 Information disclosure in AIX
- CVE-2018-16549 Path traversal in php file browser script project:php file browser script
- CVE-2018-16548 Denial of service in gdraheim:zziplib
- CVE-2018-16546 Hardcoded credentials in amcrest:amcrest ipc-hx1x3x-lexus eng n amcrest
- CVE-2018-16545 Code injection in kzsoftware:asset manager
- CVE-2018-16543 Other in artifex:ghostscript
- CVE-2018-16542 Memory corruption in artifex:ghostscript
- CVE-2018-16541 Use after free in artifex:ghostscript
- CVE-2018-16540 Use after free in artifex:ghostscript
- CVE-2018-1654 Open redirect in Curam Social Program Management
- CVE-2018-16539 Information disclosure in artifex:ghostscript
- CVE-2018-16530 Memory corruption in Forcepoint Email Security
- CVE-2018-1653 Cross-site scripting in Security Access Manager Appliance
- CVE-2018-16529 Auth bypass in Forcepoint Email Security
- CVE-2018-16528 Memory corruption in amazon:amazon web services freertos
- CVE-2018-16527 Information disclosure in amazon:amazon web services freertos
- CVE-2018-16526 Memory corruption in amazon:amazon web services freertos
- CVE-2018-16525 Memory corruption in amazon:amazon web services freertos
- CVE-2018-16524 Information disclosure in amazon:amazon web services freertos
- CVE-2018-16523 Denial of service in amazon:amazon web services freertos
- CVE-2018-16522 Memory corruption in amazon:amazon web services freertos
- CVE-2018-16521 XML external entity in openmrs:html form entry
- CVE-2018-1652 Denial of service in DataPower Gateways
- CVE-2018-16519 Cross-site scripting in coyoapp:coyo
- CVE-2018-16518 Path traversal in primx:zed\!
- CVE-2018-16517 Null dereference in nasm:netwide assembler
- CVE-2018-16516 Flask-Admin Cross-site Scripting vulnerability
- CVE-2018-16515 Matrix Synapse Improper Signature Validation
- CVE-2018-16514 MantisBT cross-site scripting (XSS) vulnerability through crafted PATH_INFO
- CVE-2018-16513 Memory corruption in artifex:ghostscript
- CVE-2018-16511 Memory corruption in artifex:ghostscript
- CVE-2018-16510 Memory corruption in artifex:ghostscript
- CVE-2018-16509 Security feature bypass in artifex:ghostscript
- CVE-2018-1650 Hardcoded credentials in QRadar SIEM
- CVE-2018-16499 Weak cryptography in Versa VOS
- CVE-2018-16498 Information disclosure in Versa Director
- CVE-2018-16497 Privilege escalation in Versa Analytics
- CVE-2018-16496 Auth bypass in Versa Director
- CVE-2018-16495 Auth bypass in Versa VOS
- CVE-2018-16494 Misconfiguration in Versa VOS
- CVE-2018-16493 Path Traversal in simplehttpserver
- CVE-2018-16492 Prototype Pollution in extend
- CVE-2018-16491 Prototype Pollution in node.extend
- CVE-2018-16490 Prototype Pollution in mpath
- CVE-2018-1649 Path traversal in QRadar Incident Forensics
- CVE-2018-16489 Prototype Pollution in just-extend
- CVE-2018-16487 Prototype Pollution in lodash
- CVE-2018-16486 Prototype Pollution in defaults-deep
- CVE-2018-16485 m-server Vulnerable to Directory Traversal
- CVE-2018-16484 Cross-Site Scripting in m-server
- CVE-2018-16483 Authentication Bypass by Spoofing in express-cart
- CVE-2018-16482 mcstatic directory traversal vulnerability
- CVE-2018-16481 Cross-Site Scripting in html-pages
- CVE-2018-16480 Tnantoka/public XSS Vulnerability
- CVE-2018-1648 Weak cryptography in ibm:qradar incident forensics
- CVE-2018-16479 Path Traversal in http-live-simulator
- CVE-2018-16478 Path Traversal in simplehttpserver