2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-15005 | — | — | 0.5% | Dec 28, 2018 | The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/relea... |
| CVE-2018-15004 | — | — | 1.1% | Dec 28, 2018 | The Coolpad Canvas device with a build fingerprint of Coolpad/cp3636a/cp3636a:7.0/NRD90M/093031423:user/release-keys con... |
| CVE-2018-15002 | — | — | 0.3% | Dec 28, 2018 | The Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys allows any a... |
| CVE-2018-15001 | — | — | 0.4% | Dec 28, 2018 | The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys cont... |
| CVE-2018-14998 | — | — | 0.7% | Dec 28, 2018 | The Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/... |
| CVE-2018-14995 | — | — | 0.4% | Dec 28, 2018 | The ZTE Blade Vantage Android device with a build fingerprint of ZTE/Z839/sweet:7.1.1/NMF26V/20180120.095344:user/releas... |
| CVE-2018-14992 | — | — | 0.4% | Dec 28, 2018 | The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.17... |
| CVE-2018-14988 | — | — | 1.2% | Dec 28, 2018 | The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201_N/m201_N:4.4.2/KOT49H/20160106:user/test-keys c... |
| CVE-2018-14987 | — | — | 0.3% | Dec 28, 2018 | The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201_N/m201_N:4.4.2/KOT49H/20160106:user/test-keys c... |
| CVE-2018-14986 | — | — | 1.2% | Dec 28, 2018 | The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user... |
| CVE-2018-14985 | — | — | 0.3% | Dec 28, 2018 | The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user... |
| CVE-2018-14984 | — | — | 1.0% | Dec 28, 2018 | The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user... |
| CVE-2018-14979 | — | — | 0.4% | Dec 28, 2018 | The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.17... |
| CVE-2018-20579 | — | — | 0.3% | Dec 28, 2018 | Contiki-NG before 4.2 has a stack-based buffer overflow in the push function in os/lib/json/jsonparse.c that allows an o... |
| CVE-2018-20578 | — | — | 1.6% | Dec 28, 2018 | An issue was discovered in NuttX before 7.27. The function netlib_parsehttpurl() in apps/netutils/netlib/netlib_parsehtt... |
| CVE-2018-20577 | — | — | 0.6% | Dec 28, 2018 | Orange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewall_SPI.exe, cgi-bin/setup_remote_mgmt.exe, cg... |
| CVE-2018-20576 | — | — | 0.4% | Dec 28, 2018 | Orange Livebox 00.96.320S devices allow cgi-bin/autodialing.exe and cgi-bin/phone_test.exe CSRF, leading to arbitrary ou... |
| CVE-2018-20575 | — | — | 1.0% | Dec 28, 2018 | Orange Livebox 00.96.320S devices have an undocumented /system_firmwarel.stm URI for manual firmware update. This is rel... |
| CVE-2018-18696 | — | — | 0.8% | Dec 28, 2018 | main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF. NOTE: The vendor claims that documentation for... |
| CVE-2018-18667 | — | — | 1.4% | Dec 28, 2018 | The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner... |
| CVE-2018-18666 | — | — | 1.4% | Dec 28, 2018 | The mintToken function of SwftCoin (SWFTC) aka SwftCoin, an Ethereum token, has an integer overflow that allows the owne... |
| CVE-2018-18665 | — | — | 1.5% | Dec 28, 2018 | The mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner... |
| CVE-2018-16638 | — | — | 0.6% | Dec 28, 2018 | Evolution CMS 1.4.x allows XSS via the manager/ search parameter. |
| CVE-2018-16637 | — | — | 0.6% | Dec 28, 2018 | Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI. |
| CVE-2018-16632 | — | — | 0.6% | Dec 28, 2018 | Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title parameter at admin/blo... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now