2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-20736 | — | — | 1.0% | Mar 21, 2019 | An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. A DOM-based XSS exists in the store part of the product. |
| CVE-2018-20669 | HIGH | 7.8 | 0.6% | Mar 21, 2019 | An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in driver... |
| CVE-2018-20648 | — | — | 0.6% | Mar 21, 2019 | PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php. |
| CVE-2018-20647 | — | — | 1.9% | Mar 21, 2019 | PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image director... |
| CVE-2018-20646 | — | — | 1.7% | Mar 21, 2019 | PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image direc... |
| CVE-2018-20645 | — | — | 0.7% | Mar 21, 2019 | PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field. |
| CVE-2018-20644 | — | — | 0.7% | Mar 21, 2019 | PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature. |
| CVE-2018-20643 | — | — | 1.7% | Mar 21, 2019 | PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an i... |
| CVE-2018-20642 | — | — | 1.6% | Mar 21, 2019 | PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of pr... |
| CVE-2018-20641 | — | — | 0.6% | Mar 21, 2019 | PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature... |
| CVE-2018-20640 | — | — | 0.7% | Mar 21, 2019 | PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field. |
| CVE-2018-20639 | — | — | 0.8% | Mar 21, 2019 | PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar. |
| CVE-2018-20638 | — | — | 1.5% | Mar 21, 2019 | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing... |
| CVE-2018-20637 | — | — | 1.6% | Mar 21, 2019 | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unre... |
| CVE-2018-20636 | — | — | 0.7% | Mar 21, 2019 | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field. |
| CVE-2018-20635 | — | — | 1.3% | Mar 21, 2019 | PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directo... |
| CVE-2018-20634 | — | — | 1.6% | Mar 21, 2019 | PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) ... |
| CVE-2018-20633 | — | — | 0.7% | Mar 21, 2019 | PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature. |
| CVE-2018-20632 | — | — | 0.7% | Mar 21, 2019 | PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field. |
| CVE-2018-20631 | — | — | 1.6% | Mar 21, 2019 | PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such a... |
| CVE-2018-20630 | — | — | 1.9% | Mar 21, 2019 | PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uplo... |
| CVE-2018-20629 | — | — | 1.9% | Mar 21, 2019 | PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing o... |
| CVE-2018-20628 | — | — | 2.2% | Mar 21, 2019 | PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of ... |
| CVE-2018-20627 | — | — | 0.7% | Mar 21, 2019 | PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box. |
| CVE-2018-20626 | — | — | 1.7% | Mar 21, 2019 | PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now