2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-20442 | — | — | 1.4% | Dec 25, 2018 | Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.... |
| CVE-2018-20441 | — | — | 1.4% | Dec 25, 2018 | Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.... |
| CVE-2018-20440 | — | — | 1.4% | Dec 25, 2018 | Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via... |
| CVE-2018-20439 | — | — | 1.3% | Dec 25, 2018 | Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credenti... |
| CVE-2018-20438 | — | — | 1.4% | Dec 25, 2018 | Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205... |
| CVE-2018-20436 | — | — | 1.6% | Dec 24, 2018 | The "secret chat" feature in Telegram 4.9.1 for Android has a "side channel" in which Telegram servers send GET requests... |
| CVE-2018-20249 | — | — | 1.4% | Dec 24, 2018 | In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing in... |
| CVE-2018-20248 | — | — | 1.7% | Dec 24, 2018 | In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing in... |
| CVE-2018-19248 | — | — | 1.5% | Dec 24, 2018 | The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA d... |
| CVE-2018-19232 | — | — | 1.4% | Dec 24, 2018 | The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA d... |
| CVE-2018-18960 | — | — | 0.9% | Dec 24, 2018 | An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to... |
| CVE-2018-18959 | — | — | 1.2% | Dec 24, 2018 | An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. On the 'Air Prin... |
| CVE-2018-18698 | — | — | 1.1% | Dec 24, 2018 | An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store clearte... |
| CVE-2018-7837 | — | — | 1.2% | Dec 24, 2018 | An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Mo... |
| CVE-2018-7836 | — | — | 32.0% | Dec 24, 2018 | An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 s... |
| CVE-2018-7835 | — | — | 1.8% | Dec 24, 2018 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3... |
| CVE-2018-7832 | — | — | 2.2% | Dec 24, 2018 | An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause th... |
| CVE-2018-7802 | — | — | 2.3% | Dec 24, 2018 | A SQL Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could give access to the web int... |
| CVE-2018-7800 | — | — | 3.9% | Dec 24, 2018 | A Hard-coded Credentials vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable an attacke... |
| CVE-2018-7796 | — | — | 0.7% | Dec 24, 2018 | A Buffer Error vulnerability exists in PowerSuite 2, all released versions (VW3A8104 & Patches), which could cause an ov... |
| CVE-2018-7793 | — | — | 0.3% | Dec 24, 2018 | A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions ... |
| CVE-2018-17197 | — | — | 5.9% | Dec 24, 2018 | A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.1... |
| CVE-2018-20433 | — | — | 4.5% | Dec 24, 2018 | c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during ini... |
| CVE-2018-19357 | — | — | 3.1% | Dec 24, 2018 | XMPlay 3.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow... |
| CVE-2018-20431 | — | — | 2.2% | Dec 24, 2018 | GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now