2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1000553 | — | — | 1.1% | Jun 26, 2018 | Trovebox version <= 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook component that can result ... |
| CVE-2018-1000552 | — | — | 1.0% | Jun 26, 2018 | Trovebox version <= 4.0.0-rc6 contains a SQL Injection vulnerability in album component that can result in SQL code inje... |
| CVE-2018-1000551 | — | — | 1.3% | Jun 26, 2018 | Trovebox version <= 4.0.0-rc6 contains a PHP Type juggling vulnerability in album view component that can result in Auth... |
| CVE-2018-1000550 | — | — | 2.6% | Jun 26, 2018 | The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi t... |
| CVE-2018-1000549 | — | — | 1.3% | Jun 26, 2018 | Wekan version 1.04.0 contains a Email / Username Enumeration vulnerability in Register' and 'Forgot your password?' page... |
| CVE-2018-1000548 | — | — | 1.3% | Jun 26, 2018 | Umlet version < 14.3 contains a XML External Entity (XXE) vulnerability in File parsing that can result in disclosure of... |
| CVE-2018-1000546 | — | — | 2.6% | Jun 26, 2018 | Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can resu... |
| CVE-2018-1000543 | — | — | 1.2% | Jun 26, 2018 | Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Detail... |
| CVE-2018-1000542 | — | — | 2.7% | Jun 26, 2018 | netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD file import that can resu... |
| CVE-2018-1000540 | — | — | 1.2% | Jun 26, 2018 | LoboEvolution version < 9b75694cedfa4825d4a2330abf2719d470c654cd contains a XML External Entity (XXE) vulnerability in X... |
| CVE-2018-1000539 | — | — | 0.8% | Jun 26, 2018 | Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerabil... |
| CVE-2018-1000538 | — | — | 1.5% | Jun 26, 2018 | Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits ... |
| CVE-2018-1000537 | — | — | 3.4% | Jun 26, 2018 | Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending o... |
| CVE-2018-1000536 | — | — | 1.3% | Jun 26, 2018 | Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration... |
| CVE-2018-1000534 | — | — | 1.5% | Jun 26, 2018 | Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that parti... |
| CVE-2018-1000532 | — | — | 0.4% | Jun 26, 2018 | beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can resul... |
| CVE-2018-1000531 | — | — | 1.6% | Jun 26, 2018 | inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in ... |
| CVE-2018-1000529 | — | — | 1.2% | Jun 26, 2018 | Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can... |
| CVE-2018-1000528 | — | — | 46.3% | Jun 26, 2018 | GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulner... |
| CVE-2018-1000527 | — | — | 2.6% | Jun 26, 2018 | Froxlor version <= 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possibl... |
| CVE-2018-1000526 | — | — | 2.1% | Jun 26, 2018 | Openpsa contains a XML Injection vulnerability in RSS file upload feature that can result in Remote denial of service. T... |
| CVE-2018-1000525 | — | — | 4.1% | Jun 26, 2018 | openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Po... |
| CVE-2018-1000524 | — | — | 1.2% | Jun 26, 2018 | miniSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize() function in map_engine.... |
| CVE-2018-1000523 | — | — | 1.2% | Jun 26, 2018 | topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat... |
| CVE-2018-1000521 | — | — | 0.9% | Jun 26, 2018 | BigTree-CMS contains a Cross Site Scripting (XSS) vulnerability in /users/create that can result in The low-privileged u... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now