2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-20448 | — | — | 1.7% | Dec 25, 2018 | Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI. |
| CVE-2018-20444 | — | — | 1.3% | Dec 25, 2018 | Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi cred... |
| CVE-2018-20443 | — | — | 1.4% | Dec 25, 2018 | Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to discover Wi-Fi credentia... |
| CVE-2018-20442 | — | — | 1.4% | Dec 25, 2018 | Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.... |
| CVE-2018-20441 | — | — | 1.4% | Dec 25, 2018 | Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.... |
| CVE-2018-20440 | — | — | 1.4% | Dec 25, 2018 | Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via... |
| CVE-2018-20439 | — | — | 1.3% | Dec 25, 2018 | Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credenti... |
| CVE-2018-20438 | — | — | 1.4% | Dec 25, 2018 | Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205... |
| CVE-2018-20436 | — | — | 1.6% | Dec 24, 2018 | The "secret chat" feature in Telegram 4.9.1 for Android has a "side channel" in which Telegram servers send GET requests... |
| CVE-2018-20249 | — | — | 1.4% | Dec 24, 2018 | In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing in... |
| CVE-2018-20248 | — | — | 1.7% | Dec 24, 2018 | In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing in... |
| CVE-2018-19248 | — | — | 1.5% | Dec 24, 2018 | The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA d... |
| CVE-2018-19232 | — | — | 1.4% | Dec 24, 2018 | The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA d... |
| CVE-2018-18960 | — | — | 0.9% | Dec 24, 2018 | An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to... |
| CVE-2018-18959 | — | — | 1.2% | Dec 24, 2018 | An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. On the 'Air Prin... |
| CVE-2018-18698 | — | — | 1.1% | Dec 24, 2018 | An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store clearte... |
| CVE-2018-7837 | — | — | 1.2% | Dec 24, 2018 | An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Mo... |
| CVE-2018-7836 | — | — | 32.0% | Dec 24, 2018 | An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 s... |
| CVE-2018-7835 | — | — | 1.8% | Dec 24, 2018 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3... |
| CVE-2018-7832 | — | — | 2.2% | Dec 24, 2018 | An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause th... |
| CVE-2018-7802 | — | — | 2.3% | Dec 24, 2018 | A SQL Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could give access to the web int... |
| CVE-2018-7800 | — | — | 3.9% | Dec 24, 2018 | A Hard-coded Credentials vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable an attacke... |
| CVE-2018-7796 | — | — | 0.7% | Dec 24, 2018 | A Buffer Error vulnerability exists in PowerSuite 2, all released versions (VW3A8104 & Patches), which could cause an ov... |
| CVE-2018-7793 | — | — | 0.3% | Dec 24, 2018 | A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions ... |
| CVE-2018-17197 | — | — | 5.9% | Dec 24, 2018 | A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.1... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now