# Vulnerabilities published in 2018


- [CVE-2018-16364](https://insights.sbomify.com/CVE-2018-16364/): Deserialization in zohocorp:manageengine applications manager (high 8.1)
- [CVE-2018-16363](https://insights.sbomify.com/CVE-2018-16363/): Cross-site scripting in filemanagerpro:file manager (medium 5.4)
- [CVE-2018-16362](https://insights.sbomify.com/CVE-2018-16362/): Cross-site scripting in mantisbt:source integration (medium 6.1)
- [CVE-2018-16361](https://insights.sbomify.com/CVE-2018-16361/): Cross-site scripting in btiteam:xbtit (medium 6.1)
- [CVE-2018-1636](https://insights.sbomify.com/CVE-2018-1636/): Memory corruption in Informix Dynamic Server Enterprise Edition (high 8.2)
- [CVE-2018-16359](https://insights.sbomify.com/CVE-2018-16359/): Security feature bypass in google:gvisor (medium 6.8)
- [CVE-2018-16358](https://insights.sbomify.com/CVE-2018-16358/): Cross-site scripting in dotclear:dotclear (medium 5.4)
- [CVE-2018-16357](https://insights.sbomify.com/CVE-2018-16357/): SQL injection in pbootcms:pbootcms (critical 9.8)
- [CVE-2018-16356](https://insights.sbomify.com/CVE-2018-16356/): SQL injection in pbootcms:pbootcms (critical 9.8)
- [CVE-2018-16354](https://insights.sbomify.com/CVE-2018-16354/): SQL injection in fhcrm project:fhcrm (critical 9.8)
- [CVE-2018-16353](https://insights.sbomify.com/CVE-2018-16353/): SQL injection in fhcrm project:fhcrm (critical 9.8)
- [CVE-2018-16352](https://insights.sbomify.com/CVE-2018-16352/): File upload in weaselcms project:weaselcms (critical 9.8)
- [CVE-2018-16350](https://insights.sbomify.com/CVE-2018-16350/): Cross-site scripting in wuzhi cms project:wuzhi cms (medium 6.1)
- [CVE-2018-1635](https://insights.sbomify.com/CVE-2018-1635/): Memory corruption in Informix Dynamic Server Enterprise Edition (high 8.2)
- [CVE-2018-16349](https://insights.sbomify.com/CVE-2018-16349/): Cross-site scripting in wuzhi cms project:wuzhi cms (medium 6.1)
- [CVE-2018-16348](https://insights.sbomify.com/CVE-2018-16348/): Cross-site scripting in seacms:seacms (medium 4.8)
- [CVE-2018-16347](https://insights.sbomify.com/CVE-2018-16347/): Gleez CMS Vulnerable to Cross-site Scripting in media/imagecache/resize (medium 6.1)
- [CVE-2018-16346](https://insights.sbomify.com/CVE-2018-16346/): Cross-site scripting in chemcms project:chemcms (medium 4.8)
- [CVE-2018-16345](https://insights.sbomify.com/CVE-2018-16345/): Cross-site request forgery in easycms:easycms (high 8.8)
- [CVE-2018-16344](https://insights.sbomify.com/CVE-2018-16344/): Path traversal in zzcms:zzcms (high 7.5)
- [CVE-2018-16343](https://insights.sbomify.com/CVE-2018-16343/): Code injection in seacms:seacms (high 7.2)
- [CVE-2018-16342](https://insights.sbomify.com/CVE-2018-16342/): Showdoc XSS Vulnerability (medium 5.4)
- [CVE-2018-1634](https://insights.sbomify.com/CVE-2018-1634/): Privilege escalation in Informix Dynamic Server Enterprise Edition (high 8.2)
- [CVE-2018-16339](https://insights.sbomify.com/CVE-2018-16339/): Cross-site request forgery in phome:empirecms (high 8.8)
- [CVE-2018-16338](https://insights.sbomify.com/CVE-2018-16338/): Cross-site request forgery in auracms:auracms (high 8.8)
- [CVE-2018-16337](https://insights.sbomify.com/CVE-2018-16337/): Cross-site request forgery in chshcms:cscms (medium 6.5)
- [CVE-2018-16336](https://insights.sbomify.com/CVE-2018-16336/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-16335](https://insights.sbomify.com/CVE-2018-16335/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2018-16334](https://insights.sbomify.com/CVE-2018-16334/): Command injection in tendacn:ac10 firmware (high 8.8)
- [CVE-2018-16333](https://insights.sbomify.com/CVE-2018-16333/): Memory corruption in tendacn:ac10 firmware (high 7.5)
- [CVE-2018-16332](https://insights.sbomify.com/CVE-2018-16332/): Cross-site request forgery in idreamsoft:icms (high 8.8)
- [CVE-2018-16331](https://insights.sbomify.com/CVE-2018-16331/): Cross-site request forgery in damicms:damicms (high 8.8)
- [CVE-2018-16330](https://insights.sbomify.com/CVE-2018-16330/): Pandao editor.md vulnerable to XSS in IMG attributes (medium 6.1)
- [CVE-2018-1633](https://insights.sbomify.com/CVE-2018-1633/): Privilege escalation in Informix Dynamic Server Enterprise Edition (high 8.2)
- [CVE-2018-16329](https://insights.sbomify.com/CVE-2018-16329/): Null dereference in imagemagick:imagemagick (critical 9.8)
- [CVE-2018-16328](https://insights.sbomify.com/CVE-2018-16328/): Null dereference in imagemagick:imagemagick (critical 9.8)
- [CVE-2018-16327](https://insights.sbomify.com/CVE-2018-16327/): Subrion Cross-site Scripting (XSS) (medium 4.8)
- [CVE-2018-16326](https://insights.sbomify.com/CVE-2018-16326/): Cross-site scripting in phpscriptsmall:olx clone (medium 6.1)
- [CVE-2018-16325](https://insights.sbomify.com/CVE-2018-16325/): Cross-site scripting in get-simple:getsimple cms (medium 6.1)
- [CVE-2018-16324](https://insights.sbomify.com/CVE-2018-16324/): Cross-site scripting in icewarp:mail server (medium 6.1)
- [CVE-2018-16323](https://insights.sbomify.com/CVE-2018-16323/): Information disclosure in canonical:ubuntu linux (medium 6.5)
- [CVE-2018-16320](https://insights.sbomify.com/CVE-2018-16320/): Path traversal in idreamsoft:icms (high 7.2)
- [CVE-2018-1632](https://insights.sbomify.com/CVE-2018-1632/): Privilege escalation in Informix Dynamic Server Enterprise Edition (high 8.2)
- [CVE-2018-16316](https://insights.sbomify.com/CVE-2018-16316/): Cross-site scripting in portainer:portainer (medium 5.4)
- [CVE-2018-16315](https://insights.sbomify.com/CVE-2018-16315/): Cross-site request forgery in bijiadao:waimai super cms (medium 6.5)
- [CVE-2018-16314](https://insights.sbomify.com/CVE-2018-16314/): Cross-site request forgery in icmsdev:icms (high 8.8)
- [CVE-2018-16313](https://insights.sbomify.com/CVE-2018-16313/): Bludit 2.3.4 allows XSS via a user name. (medium 6.1)
- [CVE-2018-16310](https://insights.sbomify.com/CVE-2018-16310/): Denial of service in technicolor:tg588v firmware (medium 6.5)
- [CVE-2018-1631](https://insights.sbomify.com/CVE-2018-1631/): Privilege escalation in Informix Dynamic Server Enterprise Edition (high 8.2)
- [CVE-2018-16308](https://insights.sbomify.com/CVE-2018-16308/): Code injection in ninjaforms:ninja forms (high 8.6)
- [CVE-2018-16307](https://insights.sbomify.com/CVE-2018-16307/): Server-side request forgery in mi:xiaomi miwifi xiaomi 55dd firmware (high 7.5)
- [CVE-2018-16303](https://insights.sbomify.com/CVE-2018-16303/): XML external entity in pdf-xchange:pdf-xchange editor (high 7.5)
- [CVE-2018-16302](https://insights.sbomify.com/CVE-2018-16302/): Memory corruption in mc1soft:zip-n-go (high 7.8)
- [CVE-2018-16301](https://insights.sbomify.com/CVE-2018-16301/): Memory corruption in tcpdump (high 7.8)
- [CVE-2018-16300](https://insights.sbomify.com/CVE-2018-16300/): Denial of service in tcpdump:tcpdump (high 7.5)
- [CVE-2018-1630](https://insights.sbomify.com/CVE-2018-1630/): Privilege escalation in Informix Dynamic Server Enterprise Edition (high 8.2)
- [CVE-2018-16299](https://insights.sbomify.com/CVE-2018-16299/): Path traversal in localize my post project:localize my post (high 7.5)
- [CVE-2018-16298](https://insights.sbomify.com/CVE-2018-16298/): Cross-site scripting in 1234n:minicms (medium 6.1)
- [CVE-2018-16297](https://insights.sbomify.com/CVE-2018-16297/): Use after free in foxitsoftware:phantompdf (high 7.8)
- [CVE-2018-16296](https://insights.sbomify.com/CVE-2018-16296/): Use after free in foxitsoftware:phantompdf (high 7.8)
- [CVE-2018-16295](https://insights.sbomify.com/CVE-2018-16295/): Use after free in foxitsoftware:phantompdf (high 7.8)
- [CVE-2018-16294](https://insights.sbomify.com/CVE-2018-16294/): Use after free in foxitsoftware:phantompdf (high 7.8)
- [CVE-2018-16293](https://insights.sbomify.com/CVE-2018-16293/): Use after free in foxitsoftware:phantompdf (high 7.8)
- [CVE-2018-16292](https://insights.sbomify.com/CVE-2018-16292/): Use after free in foxitsoftware:phantompdf (high 7.8)
- [CVE-2018-16291](https://insights.sbomify.com/CVE-2018-16291/): Use after free in foxitsoftware:phantompdf (high 7.8)
- [CVE-2018-16288](https://insights.sbomify.com/CVE-2018-16288/): Path traversal in lg:supersign cms (high 8.6)
- [CVE-2018-16287](https://insights.sbomify.com/CVE-2018-16287/): File upload in lg:supersign cms (critical 9.8)
- [CVE-2018-16286](https://insights.sbomify.com/CVE-2018-16286/): Auth bypass in lg:supersign cms (critical 9.8)
- [CVE-2018-16285](https://insights.sbomify.com/CVE-2018-16285/): Cross-site scripting in userproplugin:userpro (medium 6.1)
- [CVE-2018-16283](https://insights.sbomify.com/CVE-2018-16283/): Path traversal in wechat brodcast project:wechat brodcast (critical 9.8)
- [CVE-2018-16282](https://insights.sbomify.com/CVE-2018-16282/): Command injection in moxa:edr-810 firmware (high 8.8)
- [CVE-2018-16281](https://insights.sbomify.com/CVE-2018-16281/): Missing authorization in deiser:profields-project custom fields (critical 9.8)
- [CVE-2018-16278](https://insights.sbomify.com/CVE-2018-16278/): SQL injection in phpkaiyuancms:phpopensourcecms (critical 9.8)
- [CVE-2018-16277](https://insights.sbomify.com/CVE-2018-16277/): XWiki XSS Vulnerability (medium 5.4)
- [CVE-2018-16276](https://insights.sbomify.com/CVE-2018-16276/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2018-16275](https://insights.sbomify.com/CVE-2018-16275/): Code injection in opswat:metadefender (high 7.8)
- [CVE-2018-16272](https://insights.sbomify.com/CVE-2018-16272/): Misconfiguration in samsung:galaxy gear firmware (critical 9.8)
- [CVE-2018-16271](https://insights.sbomify.com/CVE-2018-16271/): Misconfiguration in samsung:galaxy gear firmware (medium 6.5)
- [CVE-2018-16270](https://insights.sbomify.com/CVE-2018-16270/): Privilege escalation in samsung:galaxy gear firmware (high 7.5)
- [CVE-2018-16269](https://insights.sbomify.com/CVE-2018-16269/): Misconfiguration in samsung:galaxy gear firmware (high 7.5)
- [CVE-2018-16268](https://insights.sbomify.com/CVE-2018-16268/): Privilege escalation in linux:tizen (medium 4.3)
- [CVE-2018-16267](https://insights.sbomify.com/CVE-2018-16267/): Privilege escalation in linux:tizen (high 8.1)
- [CVE-2018-16266](https://insights.sbomify.com/CVE-2018-16266/): Misconfiguration in linux:tizen (high 8.1)
- [CVE-2018-16265](https://insights.sbomify.com/CVE-2018-16265/): Privilege escalation in linux:tizen (medium 6.5)
- [CVE-2018-16264](https://insights.sbomify.com/CVE-2018-16264/): Misconfiguration in linux:tizen (medium 6.5)
- [CVE-2018-16263](https://insights.sbomify.com/CVE-2018-16263/): Privilege escalation in linux:tizen (high 8.8)
- [CVE-2018-16262](https://insights.sbomify.com/CVE-2018-16262/): Privilege escalation in linux:tizen (high 8.8)
- [CVE-2018-16261](https://insights.sbomify.com/CVE-2018-16261/): Privilege escalation in pulsesecure:pulse secure desktop client (medium 6.8)
- [CVE-2018-1626](https://insights.sbomify.com/CVE-2018-1626/): Auth bypass in Security Privileged Identity Manager (low 3.1)
- [CVE-2018-16259](https://insights.sbomify.com/CVE-2018-16259/): Cross-site scripting in soflyy:wp all import (medium 6.1)
- [CVE-2018-16258](https://insights.sbomify.com/CVE-2018-16258/): Cross-site scripting in soflyy:wp all import (medium 6.1)
- [CVE-2018-16257](https://insights.sbomify.com/CVE-2018-16257/): Cross-site scripting in soflyy:wp all import (medium 6.1)
- [CVE-2018-16256](https://insights.sbomify.com/CVE-2018-16256/): Cross-site scripting in soflyy:wp all import (medium 6.1)
- [CVE-2018-16255](https://insights.sbomify.com/CVE-2018-16255/): Cross-site scripting in soflyy:wp all import (medium 6.1)
- [CVE-2018-16254](https://insights.sbomify.com/CVE-2018-16254/): Cross-site scripting in soflyy:wp all import (medium 6.1)
- [CVE-2018-16253](https://insights.sbomify.com/CVE-2018-16253/): Weak cryptography in axtls project:axtls (medium 5.9)
- [CVE-2018-16252](https://insights.sbomify.com/CVE-2018-16252/): XML external entity in fspro:event log explorer (low 3.3)
- [CVE-2018-16251](https://insights.sbomify.com/CVE-2018-16251/): SQL injection in creatiwity:witycms (medium 4.3)
- [CVE-2018-16250](https://insights.sbomify.com/CVE-2018-16250/): Cross-site scripting in creatiwity:witycms (medium 5.4)
- [CVE-2018-1625](https://insights.sbomify.com/CVE-2018-1625/): Information disclosure in Security Privileged Identity Manager (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/98/