2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-7910 | — | — | 0.3% | Nov 13, 2018 | Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.... |
| CVE-2018-6260 | — | — | 0.4% | Nov 13, 2018 | NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a... |
| CVE-2018-17187 | — | — | 2.5% | Nov 13, 2018 | The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.s... |
| CVE-2018-1293 | — | — | — | Nov 13, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2018-15772 | — | — | 0.4% | Nov 13, 2018 | Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontroll... |
| CVE-2018-15771 | — | — | 0.4% | Nov 13, 2018 | Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an informatio... |
| CVE-2018-19246 | — | — | 22.5% | Nov 13, 2018 | PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users w... |
| CVE-2018-19244 | — | — | 2.0% | Nov 13, 2018 | An XML External Entity (XXE) vulnerability exists in the Charles 4.2.7 import/export setup option. If a user imports a "... |
| CVE-2018-19229 | — | — | 0.6% | Nov 12, 2018 | An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter. |
| CVE-2018-19228 | — | — | 1.5% | Nov 12, 2018 | An issue was discovered in LAOBANCMS 2.0. It allows arbitrary file deletion via ../ directory traversal in the admin/pic... |
| CVE-2018-19227 | — | — | 0.6% | Nov 12, 2018 | An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/liuyan.php neirong[] parameter. |
| CVE-2018-19226 | — | — | 1.2% | Nov 12, 2018 | An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to list .txt files via a direct request for the /da... |
| CVE-2018-19225 | — | — | 0.5% | Nov 12, 2018 | An issue was discovered in LAOBANCMS 2.0. admin/mima.php has CSRF. |
| CVE-2018-19224 | — | — | 1.0% | Nov 12, 2018 | An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies. |
| CVE-2018-19223 | — | — | 0.6% | Nov 12, 2018 | An issue was discovered in LAOBANCMS 2.0. It allows XSS via the first input field to the admin/type.php?id=1 URI. |
| CVE-2018-19222 | — | — | 1.4% | Nov 12, 2018 | An issue was discovered in LAOBANCMS 2.0. It allows a /install/mysql_hy.php?riqi=0&i=0 attack to reset the admin passwor... |
| CVE-2018-19221 | — | — | 1.2% | Nov 12, 2018 | An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter. |
| CVE-2018-19220 | — | — | 1.7% | Nov 12, 2018 | An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host paramete... |
| CVE-2018-19219 | — | — | 1.1% | Nov 12, 2018 | In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack. |
| CVE-2018-19218 | — | — | 1.2% | Nov 12, 2018 | In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead... |
| CVE-2018-19216 | — | — | 1.3% | Nov 12, 2018 | Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c. |
| CVE-2018-19215 | — | — | 1.2% | Nov 12, 2018 | Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the speci... |
| CVE-2018-19214 | — | — | 1.3% | Nov 12, 2018 | Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insuffici... |
| CVE-2018-19213 | — | — | 0.8% | Nov 12, 2018 | Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/mallo... |
| CVE-2018-19212 | — | — | 0.9% | Nov 12, 2018 | In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS a... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now