2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-19660 | — | — | 30.9% | Dec 6, 2018 | An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A... |
| CVE-2018-19659 | — | — | 4.3% | Dec 6, 2018 | An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A... |
| CVE-2018-16603 | — | — | 1.8% | Dec 6, 2018 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP),... |
| CVE-2018-16602 | — | — | 1.8% | Dec 6, 2018 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP),... |
| CVE-2018-16601 | — | — | 4.2% | Dec 6, 2018 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP),... |
| CVE-2018-16600 | — | — | 1.8% | Dec 6, 2018 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP),... |
| CVE-2018-16599 | — | — | 1.8% | Dec 6, 2018 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP),... |
| CVE-2018-16598 | — | — | 1.5% | Dec 6, 2018 | An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP),... |
| CVE-2018-16528 | — | — | 3.3% | Dec 6, 2018 | Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS co... |
| CVE-2018-16527 | — | — | 1.8% | Dec 6, 2018 | Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Conne... |
| CVE-2018-16526 | — | — | 4.5% | Dec 6, 2018 | Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Conne... |
| CVE-2018-16525 | — | — | 4.5% | Dec 6, 2018 | Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Conne... |
| CVE-2018-16524 | — | — | 1.8% | Dec 6, 2018 | Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Conne... |
| CVE-2018-16523 | — | — | 2.1% | Dec 6, 2018 | Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Conne... |
| CVE-2018-16522 | — | — | 2.1% | Dec 6, 2018 | Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt. |
| CVE-2018-19922 | — | — | 0.8% | Dec 6, 2018 | Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C... |
| CVE-2018-19921 | — | — | 1.9% | Dec 6, 2018 | Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller. |
| CVE-2018-19919 | — | — | 0.7% | Dec 6, 2018 | Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload... |
| CVE-2018-19915 | — | — | 4.0% | Dec 6, 2018 | DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field. |
| CVE-2018-19914 | — | — | 3.3% | Dec 6, 2018 | DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field. |
| CVE-2018-19913 | — | — | 1.8% | Dec 6, 2018 | DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field. |
| CVE-2018-18362 | — | — | 0.9% | Dec 6, 2018 | Norton Password Manager for Android (formerly Norton Identity Safe) may be susceptible to a cross site scripting (XSS) e... |
| CVE-2018-19911 | — | — | 2.7% | Dec 6, 2018 | FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api... |
| CVE-2018-1000859 | — | — | — | Dec 6, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19518. Reason: This candidate is a reservation... |
| CVE-2018-1000853 | — | — | — | Dec 6, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-18925. Reason: This candidate is a reservation... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now