Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 98 of 163.
- CVE-2018-16364 Deserialization in zohocorp:manageengine applications manager
- CVE-2018-16363 Cross-site scripting in filemanagerpro:file manager
- CVE-2018-16362 Cross-site scripting in mantisbt:source integration
- CVE-2018-16361 Cross-site scripting in btiteam:xbtit
- CVE-2018-1636 Memory corruption in Informix Dynamic Server Enterprise Edition
- CVE-2018-16359 Security feature bypass in google:gvisor
- CVE-2018-16358 Cross-site scripting in dotclear:dotclear
- CVE-2018-16357 SQL injection in pbootcms:pbootcms
- CVE-2018-16356 SQL injection in pbootcms:pbootcms
- CVE-2018-16354 SQL injection in fhcrm project:fhcrm
- CVE-2018-16353 SQL injection in fhcrm project:fhcrm
- CVE-2018-16352 File upload in weaselcms project:weaselcms
- CVE-2018-16350 Cross-site scripting in wuzhi cms project:wuzhi cms
- CVE-2018-1635 Memory corruption in Informix Dynamic Server Enterprise Edition
- CVE-2018-16349 Cross-site scripting in wuzhi cms project:wuzhi cms
- CVE-2018-16348 Cross-site scripting in seacms:seacms
- CVE-2018-16347 Gleez CMS Vulnerable to Cross-site Scripting in media/imagecache/resize
- CVE-2018-16346 Cross-site scripting in chemcms project:chemcms
- CVE-2018-16345 Cross-site request forgery in easycms:easycms
- CVE-2018-16344 Path traversal in zzcms:zzcms
- CVE-2018-16343 Code injection in seacms:seacms
- CVE-2018-16342 Showdoc XSS Vulnerability
- CVE-2018-1634 Privilege escalation in Informix Dynamic Server Enterprise Edition
- CVE-2018-16339 Cross-site request forgery in phome:empirecms
- CVE-2018-16338 Cross-site request forgery in auracms:auracms
- CVE-2018-16337 Cross-site request forgery in chshcms:cscms
- CVE-2018-16336 Memory corruption in canonical:ubuntu linux
- CVE-2018-16335 Memory corruption in debian:debian linux
- CVE-2018-16334 Command injection in tendacn:ac10 firmware
- CVE-2018-16333 Memory corruption in tendacn:ac10 firmware
- CVE-2018-16332 Cross-site request forgery in idreamsoft:icms
- CVE-2018-16331 Cross-site request forgery in damicms:damicms
- CVE-2018-16330 Pandao editor.md vulnerable to XSS in IMG attributes
- CVE-2018-1633 Privilege escalation in Informix Dynamic Server Enterprise Edition
- CVE-2018-16329 Null dereference in imagemagick:imagemagick
- CVE-2018-16328 Null dereference in imagemagick:imagemagick
- CVE-2018-16327 Subrion Cross-site Scripting (XSS)
- CVE-2018-16326 Cross-site scripting in phpscriptsmall:olx clone
- CVE-2018-16325 Cross-site scripting in get-simple:getsimple cms
- CVE-2018-16324 Cross-site scripting in icewarp:mail server
- CVE-2018-16323 Information disclosure in canonical:ubuntu linux
- CVE-2018-16320 Path traversal in idreamsoft:icms
- CVE-2018-1632 Privilege escalation in Informix Dynamic Server Enterprise Edition
- CVE-2018-16316 Cross-site scripting in portainer:portainer
- CVE-2018-16315 Cross-site request forgery in bijiadao:waimai super cms
- CVE-2018-16314 Cross-site request forgery in icmsdev:icms
- CVE-2018-16313 Bludit 2.3.4 allows XSS via a user name.
- CVE-2018-16310 Denial of service in technicolor:tg588v firmware
- CVE-2018-1631 Privilege escalation in Informix Dynamic Server Enterprise Edition
- CVE-2018-16308 Code injection in ninjaforms:ninja forms
- CVE-2018-16307 Server-side request forgery in mi:xiaomi miwifi xiaomi 55dd firmware
- CVE-2018-16303 XML external entity in pdf-xchange:pdf-xchange editor
- CVE-2018-16302 Memory corruption in mc1soft:zip-n-go
- CVE-2018-16301 Memory corruption in tcpdump
- CVE-2018-16300 Denial of service in tcpdump:tcpdump
- CVE-2018-1630 Privilege escalation in Informix Dynamic Server Enterprise Edition
- CVE-2018-16299 Path traversal in localize my post project:localize my post
- CVE-2018-16298 Cross-site scripting in 1234n:minicms
- CVE-2018-16297 Use after free in foxitsoftware:phantompdf
- CVE-2018-16296 Use after free in foxitsoftware:phantompdf
- CVE-2018-16295 Use after free in foxitsoftware:phantompdf
- CVE-2018-16294 Use after free in foxitsoftware:phantompdf
- CVE-2018-16293 Use after free in foxitsoftware:phantompdf
- CVE-2018-16292 Use after free in foxitsoftware:phantompdf
- CVE-2018-16291 Use after free in foxitsoftware:phantompdf
- CVE-2018-16288 Path traversal in lg:supersign cms
- CVE-2018-16287 File upload in lg:supersign cms
- CVE-2018-16286 Auth bypass in lg:supersign cms
- CVE-2018-16285 Cross-site scripting in userproplugin:userpro
- CVE-2018-16283 Path traversal in wechat brodcast project:wechat brodcast
- CVE-2018-16282 Command injection in moxa:edr-810 firmware
- CVE-2018-16281 Missing authorization in deiser:profields-project custom fields
- CVE-2018-16278 SQL injection in phpkaiyuancms:phpopensourcecms
- CVE-2018-16277 XWiki XSS Vulnerability
- CVE-2018-16276 Memory corruption in canonical:ubuntu linux
- CVE-2018-16275 Code injection in opswat:metadefender
- CVE-2018-16272 Misconfiguration in samsung:galaxy gear firmware
- CVE-2018-16271 Misconfiguration in samsung:galaxy gear firmware
- CVE-2018-16270 Privilege escalation in samsung:galaxy gear firmware
- CVE-2018-16269 Misconfiguration in samsung:galaxy gear firmware
- CVE-2018-16268 Privilege escalation in linux:tizen
- CVE-2018-16267 Privilege escalation in linux:tizen
- CVE-2018-16266 Misconfiguration in linux:tizen
- CVE-2018-16265 Privilege escalation in linux:tizen
- CVE-2018-16264 Misconfiguration in linux:tizen
- CVE-2018-16263 Privilege escalation in linux:tizen
- CVE-2018-16262 Privilege escalation in linux:tizen
- CVE-2018-16261 Privilege escalation in pulsesecure:pulse secure desktop client
- CVE-2018-1626 Auth bypass in Security Privileged Identity Manager
- CVE-2018-16259 Cross-site scripting in soflyy:wp all import
- CVE-2018-16258 Cross-site scripting in soflyy:wp all import
- CVE-2018-16257 Cross-site scripting in soflyy:wp all import
- CVE-2018-16256 Cross-site scripting in soflyy:wp all import
- CVE-2018-16255 Cross-site scripting in soflyy:wp all import
- CVE-2018-16254 Cross-site scripting in soflyy:wp all import
- CVE-2018-16253 Weak cryptography in axtls project:axtls
- CVE-2018-16252 XML external entity in fspro:event log explorer
- CVE-2018-16251 SQL injection in creatiwity:witycms
- CVE-2018-16250 Cross-site scripting in creatiwity:witycms
- CVE-2018-1625 Information disclosure in Security Privileged Identity Manager