2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1000846 | — | — | 0.6% | Dec 20, 2018 | FreshDNS version 1.0.3 and earlier contains a Cross ite Request Forgery (CSRF) vulnerability in All (authenticated) API ... |
| CVE-2018-1000845 | — | — | — | Dec 20, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of ... |
| CVE-2018-1000844 | — | — | 2.2% | Dec 20, 2018 | Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Ent... |
| CVE-2018-1000843 | — | — | 0.8% | Dec 20, 2018 | Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aaeb; after GitHub PR spotify/lui... |
| CVE-2018-1000841 | — | — | 0.7% | Dec 20, 2018 | Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.php page that can resu... |
| CVE-2018-1000840 | — | — | 2.2% | Dec 20, 2018 | Processing Foundation Processing version 3.4 and earlier contains a XML External Entity (XXE) vulnerability in loadXML()... |
| CVE-2018-1000839 | — | — | 3.1% | Dec 20, 2018 | LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Rem... |
| CVE-2018-1000838 | — | — | 2.5% | Dec 20, 2018 | autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result i... |
| CVE-2018-1000836 | — | — | 1.1% | Dec 20, 2018 | bw-calendar-engine version <= bw-calendar-engine-3.12.0 contains a XML External Entity (XXE) vulnerability in IscheduleC... |
| CVE-2018-1000834 | — | — | 1.4% | Dec 20, 2018 | runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runsc... |
| CVE-2018-1000833 | — | — | 3.2% | Dec 20, 2018 | ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disc... |
| CVE-2018-1000832 | — | — | 6.4% | Dec 20, 2018 | ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disc... |
| CVE-2018-1000831 | — | — | 1.9% | Dec 20, 2018 | K9Mail version <= v5.600 contains a XML External Entity (XXE) vulnerability in WebDAV response parser that can result in... |
| CVE-2018-1000830 | — | — | 1.5% | Dec 20, 2018 | XR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in Playlist parser that can result in Dis... |
| CVE-2018-1000829 | — | — | 1.3% | Dec 20, 2018 | Anyplace version before commit 80359b4 contains a XML External Entity (XXE) vulnerability in Man in the middle on map AP... |
| CVE-2018-1000827 | — | — | 3.6% | Dec 20, 2018 | Ubilling version <= 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclos... |
| CVE-2018-1000826 | — | — | 1.3% | Dec 20, 2018 | Microweber version <= 1.0.7 contains a Cross Site Scripting (XSS) vulnerability in Admin login form template that can re... |
| CVE-2018-1000825 | — | — | 1.9% | Dec 20, 2018 | FreeCol version <= nightly-2018-08-22 contains a XML External Entity (XXE) vulnerability in FreeColXMLReader parser that... |
| CVE-2018-1000824 | — | — | 3.2% | Dec 20, 2018 | MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosu... |
| CVE-2018-1000822 | — | — | 1.9% | Dec 20, 2018 | codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser th... |
| CVE-2018-1000821 | — | — | 1.9% | Dec 20, 2018 | MicroMathematics version before commit 5c05ac8 contains a XML External Entity (XXE) vulnerability in SMathStudio files t... |
| CVE-2018-1000820 | — | — | 1.9% | Dec 20, 2018 | neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in ... |
| CVE-2018-1000817 | — | — | 2.5% | Dec 20, 2018 | Asset Pipeline Grails Plugin Asset-pipeline plugin version Prior to 2.14.1.1, 2.15.1 and 3.0.6 contains a Incorrect Acce... |
| CVE-2018-1000816 | — | — | 0.7% | Dec 20, 2018 | Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphi... |
| CVE-2018-1000815 | — | — | 1.1% | Dec 20, 2018 | Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentS... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now