2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-0624 | — | — | 1.2% | Sep 7, 2018 | Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier,... |
| CVE-2018-0623 | — | — | 1.0% | Sep 7, 2018 | Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier,... |
| CVE-2018-16655 | — | — | 0.7% | Sep 7, 2018 | Gxlcms 1.0 has XSS via the PATH_INFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php. |
| CVE-2018-16654 | — | — | 0.8% | Sep 7, 2018 | Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1. |
| CVE-2018-16653 | — | — | 0.7% | Sep 7, 2018 | rejucms 2.1 has XSS via the ucenter/cms_user_add.php u_name parameter. |
| CVE-2018-16651 | — | — | 1.4% | Sep 7, 2018 | The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports. |
| CVE-2018-16650 | — | — | 0.5% | Sep 7, 2018 | phpMyFAQ before 2.9.11 allows CSRF. |
| CVE-2018-6320 | — | — | 4.1% | Sep 6, 2018 | A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3R... |
| CVE-2018-16648 | — | — | 1.5% | Sep 6, 2018 | In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of servi... |
| CVE-2018-16647 | — | — | 1.5% | Sep 6, 2018 | In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of ... |
| CVE-2018-16646 | — | — | 2.9% | Sep 6, 2018 | In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote ... |
| CVE-2018-16590 | — | — | 2.4% | Sep 6, 2018 | FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication. |
| CVE-2018-16310 | — | — | 1.2% | Sep 6, 2018 | Technicolor TG588V V2 devices allow remote attackers to cause a denial of service (networking outage) via a flood of ran... |
| CVE-2018-16285 | — | — | 1.3% | Sep 6, 2018 | The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro_shortcode_template a... |
| CVE-2018-16261 | — | — | 0.2% | Sep 6, 2018 | In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dy... |
| CVE-2018-15865 | — | — | 0.3% | Sep 6, 2018 | The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability. |
| CVE-2018-15749 | — | — | 0.3% | Sep 6, 2018 | The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability. |
| CVE-2018-15726 | — | — | 0.3% | Sep 6, 2018 | The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability. |
| CVE-2018-14366 | — | — | 1.5% | Sep 6, 2018 | download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure thr... |
| CVE-2018-12234 | — | — | 2.9% | Sep 6, 2018 | A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied ... |
| CVE-2018-16645 | — | — | 3.2% | Sep 6, 2018 | There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/d... |
| CVE-2018-16644 | — | — | 3.6% | Sep 6, 2018 | There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ... |
| CVE-2018-16643 | — | — | 3.1% | Sep 6, 2018 | The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTIm... |
| CVE-2018-16642 | — | — | 3.0% | Sep 6, 2018 | The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via ... |
| CVE-2018-16641 | — | — | 2.0% | Sep 6, 2018 | ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c. |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now