2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-8033 | — | — | 25.7% | Dec 13, 2018 | In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles re... |
| CVE-2018-20129 | — | — | 8.2% | Dec 13, 2018 | An issue was discovered in DedeCMS V5.7 SP2. uploads/include/dialog/select_images_post.php allows remote attackers to up... |
| CVE-2018-20128 | — | — | 1.5% | Dec 13, 2018 | An issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to delete arbitrary files v... |
| CVE-2018-15719 | — | — | 1.1% | Dec 12, 2018 | Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank passwo... |
| CVE-2018-15718 | — | — | 1.4% | Dec 12, 2018 | Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user a... |
| CVE-2018-15717 | — | — | 0.5% | Dec 12, 2018 | Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes. |
| CVE-2018-20103 | — | — | 6.6% | Dec 12, 2018 | An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can tr... |
| CVE-2018-20102 | — | — | 4.3% | Dec 12, 2018 | An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due to a missing c... |
| CVE-2018-20101 | — | — | 0.8% | Dec 12, 2018 | The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell. |
| CVE-2018-13816 | — | — | 2.8% | Dec 12, 2018 | A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication ... |
| CVE-2018-11466 | — | — | 4.0% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11465 | — | — | 0.4% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11464 | — | — | 1.9% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All ve... |
| CVE-2018-11463 | — | — | 0.5% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11462 | — | — | 3.7% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11461 | — | — | 0.4% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11460 | — | — | 0.4% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11459 | — | — | 0.4% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11458 | — | — | 4.6% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All ve... |
| CVE-2018-11457 | — | — | 4.6% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All ve... |
| CVE-2018-17952 | — | — | 0.6% | Dec 12, 2018 | Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 |
| CVE-2018-17950 | — | — | 0.8% | Dec 12, 2018 | Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2 |
| CVE-2018-17949 | — | — | 0.6% | Dec 12, 2018 | Cross site scripting vulnerability in iManager prior to 3.1 SP2. |
| CVE-2018-15328 | — | — | 2.3% | Dec 12, 2018 | On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passp... |
| CVE-2018-20099 | — | — | 2.3% | Dec 12, 2018 | There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will le... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now