2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-13813 | — | — | 1.7% | Dec 13, 2018 | A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Co... |
| CVE-2018-13812 | — | — | 3.6% | Dec 13, 2018 | A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Co... |
| CVE-2018-13811 | — | — | 0.2% | Dec 13, 2018 | A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insuffic... |
| CVE-2018-13804 | — | — | 2.7% | Dec 13, 2018 | A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 < V7.1 ... |
| CVE-2018-8033 | — | — | 25.7% | Dec 13, 2018 | In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles re... |
| CVE-2018-20129 | — | — | 8.2% | Dec 13, 2018 | An issue was discovered in DedeCMS V5.7 SP2. uploads/include/dialog/select_images_post.php allows remote attackers to up... |
| CVE-2018-20128 | — | — | 1.5% | Dec 13, 2018 | An issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to delete arbitrary files v... |
| CVE-2018-15719 | — | — | 1.1% | Dec 12, 2018 | Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank passwo... |
| CVE-2018-15718 | — | — | 1.4% | Dec 12, 2018 | Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user a... |
| CVE-2018-15717 | — | — | 0.5% | Dec 12, 2018 | Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes. |
| CVE-2018-20103 | — | — | 6.6% | Dec 12, 2018 | An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can tr... |
| CVE-2018-20102 | — | — | 4.3% | Dec 12, 2018 | An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due to a missing c... |
| CVE-2018-20101 | — | — | 0.8% | Dec 12, 2018 | The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell. |
| CVE-2018-13816 | — | — | 2.8% | Dec 12, 2018 | A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication ... |
| CVE-2018-11466 | — | — | 4.0% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11465 | — | — | 0.4% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11464 | — | — | 1.9% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All ve... |
| CVE-2018-11463 | — | — | 0.5% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11462 | — | — | 3.7% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11461 | — | — | 0.4% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11460 | — | — | 0.4% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11459 | — | — | 0.4% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK... |
| CVE-2018-11458 | — | — | 4.6% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All ve... |
| CVE-2018-11457 | — | — | 4.6% | Dec 12, 2018 | A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All ve... |
| CVE-2018-17952 | — | — | 0.6% | Dec 12, 2018 | Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now