2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1000520 | — | — | 0.7% | Jun 26, 2018 | ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed Certificates vulnerability in mbe... |
| CVE-2018-1000516 | — | — | 1.0% | Jun 26, 2018 | The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation ... |
| CVE-2018-1000515 | — | — | 1.4% | Jun 26, 2018 | ventrian News-Articles version NewsArticles.00.09.11 contains a XML External Entity (XXE) vulnerability in News-Articles... |
| CVE-2018-1000514 | — | — | 0.3% | Jun 26, 2018 | LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Boxes that can result... |
| CVE-2018-1000513 | — | — | 0.7% | Jun 26, 2018 | LimeSurvey version 3.0.0-beta.3+17110 contains a Cross Site Scripting (XSS) vulnerability in Boxes that can result in JS... |
| CVE-2018-1000512 | — | — | 0.8% | Jun 26, 2018 | Tooltipy Tooltipy (tooltips for WP) version 5 contains a Cross Site Scripting (XSS) vulnerability in Glossary shortcode ... |
| CVE-2018-1000511 | — | — | 0.8% | Jun 26, 2018 | WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody ... |
| CVE-2018-1000510 | — | — | 1.0% | Jun 26, 2018 | WP Image Zoom version 1.23 contains a Incorrect Access Control vulnerability in AJAX settings that can result in allows ... |
| CVE-2018-1000509 | — | — | 2.1% | Jun 26, 2018 | Redirection version 2.7.1 contains a Serialisation vulnerability possibly allowing ACE vulnerability in Settings page AJ... |
| CVE-2018-1000508 | — | — | 0.6% | Jun 26, 2018 | WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in Settings screen that can result in al... |
| CVE-2018-1000507 | — | — | 0.4% | Jun 26, 2018 | WP User Groups version 2.0.0 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page that can result ... |
| CVE-2018-1000506 | — | — | 0.6% | Jun 26, 2018 | Metronet Tag Manager version 1.2.7 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page /wp-admin/... |
| CVE-2018-1000505 | — | — | 0.5% | Jun 26, 2018 | Tooltipy (tooltips for WP) version 5 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page that can... |
| CVE-2018-1000504 | — | — | 2.0% | Jun 26, 2018 | Redirection version 2.7.3 contains a ACE via file inclusion vulnerability in Pass-through mode that can result in allows... |
| CVE-2018-1000503 | — | — | 0.6% | Jun 26, 2018 | MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view po... |
| CVE-2018-1000502 | — | — | 1.3% | Jun 26, 2018 | MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel (Tools and Maintenance -> Task Manager -> Add New... |
| CVE-2018-1000501 | — | — | 1.6% | Jun 26, 2018 | Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/a... |
| CVE-2018-1000204 | — | — | 1.9% | Jun 26, 2018 | Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_IO ioctl on /dev/sg0 with dxfer_direction=SG_DXFER_FROM_DEV ... |
| CVE-2018-0611 | — | — | 0.5% | Jun 26, 2018 | The ANA App for iOS version 4.0.22 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-... |
| CVE-2018-0610 | — | — | 1.8% | Jun 26, 2018 | Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privil... |
| CVE-2018-0609 | — | — | 0.8% | Jun 26, 2018 | Untrusted search path vulnerability in LINE for Windows versions before 5.8.0 allows an attacker to gain privileges via ... |
| CVE-2018-0608 | — | — | 3.8% | Jun 26, 2018 | Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of ... |
| CVE-2018-0606 | — | — | 1.1% | Jun 26, 2018 | SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitra... |
| CVE-2018-0605 | — | — | 0.8% | Jun 26, 2018 | Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web scrip... |
| CVE-2018-0604 | — | — | 1.8% | Jun 26, 2018 | Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors. |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now