Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 99 of 163.
- CVE-2018-16249 Cross-site scripting in b3log:symphony
- CVE-2018-16248 Cross-site scripting in b3log:solo
- CVE-2018-16247 Cross-site scripting in yzmcms:yzmcms
- CVE-2018-16243 Cross-site scripting in solarwinds:database performance analyzer
- CVE-2018-16242 Weak cryptography in o.bike:obike-stationless bike sharing
- CVE-2018-16239 Weak cryptography in damicms:damicms
- CVE-2018-16238 File upload in damicms:damicms
- CVE-2018-16237 Path traversal in damicms:damicms
- CVE-2018-16236 Cross-site scripting in cpanel:cpanel
- CVE-2018-16235 Cross-site scripting in telligent:community
- CVE-2018-16234 Cross-site scripting in morningstarsecurity:whatweb
- CVE-2018-16233 Cross-site scripting in 1234n:minicms
- CVE-2018-16232 Command injection in ipfire:ipfire
- CVE-2018-16231 Denial of service in michael-roth-software:pftp
- CVE-2018-16230 Memory corruption in apple:mac os x
- CVE-2018-1623 Information disclosure in Security Privileged Identity Manager
- CVE-2018-16229 Memory corruption in apple:mac os x
- CVE-2018-16228 Memory corruption in apple:mac os x
- CVE-2018-16227 Memory corruption in apple:mac os x
- CVE-2018-16226 Cross-site scripting in mitel:mivoice office 400
- CVE-2018-16225 Auth bypass in qbeecam:qbee multi-sensor camera firmware
- CVE-2018-16224 Information disclosure in ismartalarm:cubeone firmware
- CVE-2018-16223 Information disclosure in qbeecam:qbeecam
- CVE-2018-16222 Information disclosure in ismartalarm:ismartalarm
- CVE-2018-16221 Path traversal in yealink:ultra-elegant ip phone sip-t41p firmware
- CVE-2018-16220 Cross-site scripting in audiocodes:405hd firmware
- CVE-2018-1622 Cross-site request forgery in Security Privileged Identity Manager
- CVE-2018-16219 Auth bypass in audiocodes:405hd firmware
- CVE-2018-16218 Cross-site request forgery in yealink:ultra-elegant ip phone sip-t41p firmware
- CVE-2018-16217 Command injection in yealink:ultra-elegant ip phone sip-t41p firmware
- CVE-2018-16216 Command injection in audiocodes:405hd firmware
- CVE-2018-16210 Cross-site scripting in wago:750-352 firmware
- CVE-2018-1621 Information disclosure in WebSphere Application Server
- CVE-2018-16207 Missing authorization in PowerAct Pro Master Agent for Windows
- CVE-2018-16206 Cross-site scripting in spam-byebye
- CVE-2018-16205 Cross-site scripting in GROWI
- CVE-2018-16204 Cross-site scripting in Google XML Sitemaps
- CVE-2018-16203 Auth bypass in PgpoolAdmin
- CVE-2018-16202 Path Traversal in cordova-plugin-ionic-webview
- CVE-2018-16201 Hardcoded credentials in Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A
- CVE-2018-16200 Command injection in Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A
- CVE-2018-16199 Cross-site scripting in Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A
- CVE-2018-16198 Auth bypass in Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A
- CVE-2018-16197 Auth bypass in Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A
- CVE-2018-16196 Denial of service in Multiple Yokogawa products that contain Vnet/IP Open Communication Driver
- CVE-2018-16195 Command injection in Aterm WF1200CR and Aterm WG1200CR
- CVE-2018-16194 Command injection in Aterm WF1200CR and Aterm WG1200CR
- CVE-2018-16193 Cross-site scripting in Aterm WF1200CR and Aterm WG1200CR
- CVE-2018-16192 Information disclosure in Aterm WF1200CR and Aterm WG1200CR
- CVE-2018-16191 EC-CUBE Open redirect vulnerability
- CVE-2018-16190 Other in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL
- CVE-2018-16189 Other in Self-Extracting Archives created by UNLHA32.DLL
- CVE-2018-16188 SQL injection in RICOH Interactive Whiteboard
- CVE-2018-16187 Security feature bypass in RICOH Interactive Whiteboard
- CVE-2018-16186 Hardcoded credentials in RICOH Interactive Whiteboard
- CVE-2018-16185 Code injection in RICOH Interactive Whiteboard
- CVE-2018-16184 Command injection in RICOH Interactive Whiteboard
- CVE-2018-16183 Privilege escalation in Some pre-installed applications on Panasonic PC
- CVE-2018-16182 Other in The installer of MARKET SPEED
- CVE-2018-16181 Other in i-FILTER
- CVE-2018-16180 Cross-site scripting in i-FILTER
- CVE-2018-1618 Path traversal in Security Privileged Identity Manager
- CVE-2018-16179 Security feature bypass in Mizuho Direct App for Android
- CVE-2018-16178 Auth bypass in Cybozu Garoon
- CVE-2018-16177 Privilege escalation in The installer of Windows10 Fall Creators Update Modify module for Security Measures tool
- CVE-2018-16176 Other in Installer of Mapping Tool
- CVE-2018-16175 SQL injection in LearnPress
- CVE-2018-16174 Open redirect in LearnPress
- CVE-2018-16173 Cross-site scripting in LearnPress
- CVE-2018-16172 Other in Cybozu Remote Service
- CVE-2018-16171 Path traversal in Cybozu Remote Service
- CVE-2018-16170 Path traversal in Cybozu Remote Service
- CVE-2018-16169 File upload in Cybozu Remote Service
- CVE-2018-16168 Code injection in LogonTracer
- CVE-2018-16167 Command injection in LogonTracer
- CVE-2018-16166 XML external entity in LogonTracer
- CVE-2018-16165 Cross-site scripting in LogonTracer
- CVE-2018-16164 Cross-site scripting in Event Calendar WD version
- CVE-2018-16163 Auth bypass in OpenDolphin
- CVE-2018-16162 Information disclosure in OpenDolphin
- CVE-2018-16161 Privilege escalation in OpenDolphin
- CVE-2018-16160 Auth bypass in SecureCore Standard Edition
- CVE-2018-16159 SQL injection in codemenschen:gift vouchers
- CVE-2018-16158 Hardcoded credentials in eaton:power xpert meter 4000 firmware
- CVE-2018-16157 Business logic in bijiadao:waimai super cms
- CVE-2018-16156 Privilege escalation in fujitsu:paperstream ip \(twain\)
- CVE-2018-16153 Opencast publishes global system account credentials
- CVE-2018-16152 Weak cryptography in canonical:ubuntu linux
- CVE-2018-16151 Weak cryptography in canonical:ubuntu linux
- CVE-2018-16150 Weak cryptography in axtls project:axtls
- CVE-2018-16149 Memory corruption in axtls project:axtls
- CVE-2018-16148 Cross-site scripting in opsview:opsview
- CVE-2018-16147 Cross-site scripting in opsview:opsview
- CVE-2018-16146 Command injection in opsview:opsview
- CVE-2018-16145 Privilege escalation in opsview:opsview
- CVE-2018-16144 Command injection in opsview:opsview
- CVE-2018-16142 Cross-site scripting in phpok:phpok
- CVE-2018-16141 Path traversal in thinkcmf:thinkcmfx
- CVE-2018-16140 Memory corruption in canonical:ubuntu linux
- CVE-2018-1614 Information disclosure in WebSphere Application Server