Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 97 of 163.
- CVE-2018-16477 Exposure of Sensitive Information to an Unauthorized Actor in activestorage
- CVE-2018-16476 Improper Access Control in activejob
- CVE-2018-16475 Path Traversal in knightjs
- CVE-2018-16474 Stored Cross-Site Scripting in tianma-static
- CVE-2018-16473 Path Traversal in takeapeek
- CVE-2018-16472 Prototype Pollution in cached-path-relative
- CVE-2018-16471 Rack vulnerable to Cross-site Scripting
- CVE-2018-16470 Rack vulnerable to Denial of Service
- CVE-2018-1647 Denial of service in QRadar Incident Forensics
- CVE-2018-16469 Prototype Pollution in merge
- CVE-2018-16468 Loofah Cross-site Scripting vulnerability
- CVE-2018-16467 Auth bypass in Nextcloud Server
- CVE-2018-16466 Security feature bypass in Nextcloud Server
- CVE-2018-16465 Auth bypass in Nextcloud Server
- CVE-2018-16464 Auth bypass in Nextcloud Server
- CVE-2018-16463 Auth bypass in Nextcloud Server
- CVE-2018-16462 Command Injection in apex-publish-static-files
- CVE-2018-16461 Command Injection in libnmap
- CVE-2018-16460 ps Enables OS Command Injection
- CVE-2018-16459 Cross-Site Scripting in exceljs
- CVE-2018-16458 Cross-site request forgery in baigo:baigo cms
- CVE-2018-16457 Information disclosure in open source real-estate script project:open source real-estate script
- CVE-2018-16456 Cross-site scripting in phpscriptsmall:website seller script
- CVE-2018-16455 Cross-site scripting in marketplace script project:marketplace script
- CVE-2018-16454 Denial of service in currency converter script project:currency converter script
- CVE-2018-16453 Cross-site scripting in domain lookup script project:domain lookup script
- CVE-2018-16452 Denial of service in tcpdump:tcpdump
- CVE-2018-16451 Memory corruption in apple:mac os x
- CVE-2018-16450 Cross-site scripting in craftedweb project:craftedweb
- CVE-2018-16449 Cross-site request forgery in onethink:onethink
- CVE-2018-16448 Cross-site request forgery in chshcms:cscms
- CVE-2018-16447 Cross-site request forgery in frogcms project:frogcms
- CVE-2018-16446 Path traversal in seamcms:seacms
- CVE-2018-16445 SQL injection in seacms:seacms
- CVE-2018-16444 Server-side request forgery in seacms:seacms
- CVE-2018-1644 Information disclosure in WebSphere Commerce
- CVE-2018-16438 Memory corruption in hdfgroup:hdf5
- CVE-2018-16437 Path traversal in gxlcms:gxlcms
- CVE-2018-16436 SQL injection in gxlcms:gxlcms
- CVE-2018-16435 Integer overflow in canonical:ubuntu linux
- CVE-2018-16432 SQL injection in bluecms project:bluecms
- CVE-2018-16431 Cross-site request forgery in yfcmf:yfcmf
- CVE-2018-16430 Memory corruption in debian:debian linux
- CVE-2018-1643 Cross-site scripting in WebSphere Application Server
- CVE-2018-16429 Memory corruption in canonical:ubuntu linux
- CVE-2018-16428 Null dereference in canonical:ubuntu linux
- CVE-2018-16427 Memory corruption in opensc project:opensc
- CVE-2018-16426 Denial of service in opensc project:opensc
- CVE-2018-16425 Memory corruption in opensc project:opensc
- CVE-2018-16424 Memory corruption in opensc project:opensc
- CVE-2018-16423 Memory corruption in opensc project:opensc
- CVE-2018-16422 Memory corruption in opensc project:opensc
- CVE-2018-16421 Memory corruption in opensc project:opensc
- CVE-2018-16420 Memory corruption in opensc project:opensc
- CVE-2018-16419 Memory corruption in opensc project:opensc
- CVE-2018-16418 Memory corruption in opensc project:opensc
- CVE-2018-16417 Command injection in arubanetworks:instant
- CVE-2018-16416 Cross-site request forgery in thedaylightstudio:fuel cms
- CVE-2018-16413 Memory corruption in imagemagick:imagemagick
- CVE-2018-16412 Memory corruption in imagemagick:imagemagick
- CVE-2018-16410 SQL injection in vanillaforums:vanilla
- CVE-2018-16409 Server-side request forgery in gogs:gogs
- CVE-2018-16408 Command injection in d-link:dir-846 firmware
- CVE-2018-16407 Moderate severity vulnerability that affects mayan-edms
- CVE-2018-16406 Moderate severity vulnerability that affects mayan-edms
- CVE-2018-16405 mayan-edms Cross-site Scripting vulnerability
- CVE-2018-16403 Memory corruption in elfutils project:elfutils
- CVE-2018-16402 Memory corruption in canonical:ubuntu linux
- CVE-2018-1640 Command injection in Security Privileged Identity Manager
- CVE-2018-16398 Security feature bypass in twistlock:authz broker
- CVE-2018-16397 Path traversal in limesurvey:limesurvey
- CVE-2018-16396 Security feature bypass in canonical:ubuntu linux
- CVE-2018-16395 Ruby Openssl Allows Incorrect Value Comparison
- CVE-2018-16393 Memory corruption in opensc project:opensc
- CVE-2018-16392 Memory corruption in opensc project:opensc
- CVE-2018-16391 Memory corruption in opensc project:opensc
- CVE-2018-1639 Information disclosure in Jazz Reporting Service
- CVE-2018-16389 SQL injection in e107:e107
- CVE-2018-16388 File upload in e107:e107
- CVE-2018-16387 Elefant CMS CSRF Vulnerability
- CVE-2018-16386 Other in swift:alliance web platform
- CVE-2018-16385 ThinkPHP SQL Injection vulnerability
- CVE-2018-16384 SQL injection in owasp:owasp modsecurity core rule set
- CVE-2018-16382 Memory corruption in nasm:netwide assembler
- CVE-2018-16381 Cross-site scripting in e107:e107
- CVE-2018-16380 Cross-site request forgery in digimute:ogma cms
- CVE-2018-1638 Auth bypass in API Connect
- CVE-2018-16379 Cross-site scripting in digimute:ogma cms
- CVE-2018-16376 Memory corruption in uclouvain:openjpeg
- CVE-2018-16375 Memory corruption in uclouvain:openjpeg
- CVE-2018-16374 Cross-site scripting in frog cms project:frog cms
- CVE-2018-16373 File upload in frog cms project:frog cms
- CVE-2018-16372 Cross-site scripting in ideacms:ideacms
- CVE-2018-16371 Cross-site scripting in pescms:pescms team
- CVE-2018-16370 File upload in pescms:pescms team
- CVE-2018-16369 Denial of service in xpdfreader:xpdf
- CVE-2018-16368 Memory corruption in xpdfreader:xpdf
- CVE-2018-16367 Path traversal in qduoj:onlinejudge
- CVE-2018-16366 Cross-site request forgery in idreamsoft:icms
- CVE-2018-16365 Cross-site request forgery in idreamsoft:icms