2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-20393 | — | — | 1.6% | Dec 23, 2018 | Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928... |
| CVE-2018-20392 | — | — | 1.6% | Dec 23, 2018 | S-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4... |
| CVE-2018-20391 | — | — | 1.5% | Dec 23, 2018 | TEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4... |
| CVE-2018-20390 | — | — | 1.5% | Dec 23, 2018 | Kaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote attackers to discover cred... |
| CVE-2018-20389 | — | — | 2.0% | Dec 23, 2018 | D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover cr... |
| CVE-2018-20388 | — | — | 1.5% | Dec 23, 2018 | Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via is... |
| CVE-2018-20387 | — | — | 1.5% | Dec 23, 2018 | Bnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to discover credentials via i... |
| CVE-2018-20385 | — | — | 1.5% | Dec 23, 2018 | CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, a... |
| CVE-2018-20384 | — | — | 1.5% | Dec 23, 2018 | iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow... |
| CVE-2018-20382 | — | — | 1.5% | Dec 23, 2018 | Jiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso... |
| CVE-2018-20381 | — | — | 1.6% | Dec 23, 2018 | Technicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover credentials via iso.3.6... |
| CVE-2018-20380 | — | — | 1.6% | Dec 23, 2018 | Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to... |
| CVE-2018-20379 | — | — | 0.6% | Dec 23, 2018 | Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack w... |
| CVE-2018-20377 | — | — | 7.7% | Dec 23, 2018 | Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /get_getnetworkconf.cgi on po... |
| CVE-2018-20376 | — | — | 0.7% | Dec 23, 2018 | An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byt... |
| CVE-2018-20375 | — | — | 0.7% | Dec 23, 2018 | An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byt... |
| CVE-2018-20374 | — | — | 0.7% | Dec 23, 2018 | An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byt... |
| CVE-2018-20373 | — | — | 0.6% | Dec 23, 2018 | Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client. |
| CVE-2018-20372 | — | — | 0.6% | Dec 23, 2018 | TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client. |
| CVE-2018-20371 | — | — | 1.6% | Dec 23, 2018 | PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers... |
| CVE-2018-20370 | — | — | 0.5% | Dec 23, 2018 | SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to ... |
| CVE-2018-20369 | — | — | 0.7% | Dec 23, 2018 | Barracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the ldap_user parameter to the cgi... |
| CVE-2018-20368 | — | — | 0.6% | Dec 23, 2018 | The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the M... |
| CVE-2018-20331 | — | — | 0.6% | Dec 23, 2018 | Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain th... |
| CVE-2018-20367 | — | — | 0.7% | Dec 22, 2018 | The "mall some commodity details: commodity consultation" component in WSTMart 2.0.8_181212 has stored XSS via the consu... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now