2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-25347 | HIGH | 7.1 | 0.2% | May 23, 2026 | WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to... |
| CVE-2018-25346 | HIGH | 7.1 | 0.2% | May 23, 2026 | WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers ... |
| CVE-2018-25345 | HIGH | 8.6 | 0.2% | May 23, 2026 | 10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attacker... |
| CVE-2018-25344 | HIGH | 8.6 | 0.2% | May 23, 2026 | 10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key i... |
| CVE-2018-25342 | HIGH | 8.8 | 0.3% | May 23, 2026 | Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate ... |
| CVE-2018-25341 | HIGH | 8.8 | 0.3% | May 23, 2026 | Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL querie... |
| CVE-2018-25340 | HIGH | 8.8 | 0.3% | May 23, 2026 | Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL querie... |
| CVE-2018-25339 | HIGH | 8.8 | 0.3% | May 17, 2026 | Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract da... |
| CVE-2018-25338 | HIGH | 8.8 | 0.3% | May 17, 2026 | Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extr... |
| CVE-2018-25333 | HIGH | 8.8 | 0.3% | May 17, 2026 | Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated atta... |
| CVE-2018-25330 | HIGH | 8.8 | 0.3% | May 17, 2026 | Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabilities that allow at... |
| CVE-2018-25329 | HIGH | 8.7 | 0.4% | May 17, 2026 | WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers... |
| CVE-2018-25328 | HIGH | 8.6 | 0.1% | May 17, 2026 | VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction poin... |
| CVE-2018-25326 | HIGH | 8.7 | 0.6% | May 17, 2026 | Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arb... |
| CVE-2018-25325 | HIGH | 8.7 | 0.6% | May 17, 2026 | Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered user to delete arbitra... |
| CVE-2018-25323 | HIGH | 8.6 | 0.1% | May 17, 2026 | Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer overflow vulnerability that... |
| CVE-2018-25322 | HIGH | 8.6 | 0.1% | May 17, 2026 | Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers to exe... |
| CVE-2018-25319 | HIGH | 7.1 | 0.3% | May 17, 2026 | Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulat... |
| CVE-2018-25315 | HIGH | 8.6 | 0.2% | Apr 29, 2026 | Alloksoft Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrar... |
| CVE-2018-25314 | HIGH | 8.6 | 0.2% | Apr 29, 2026 | Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attacke... |
| CVE-2018-25312 | HIGH | 7.1 | 0.9% | Apr 29, 2026 | LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and ... |
| CVE-2018-25311 | HIGH | 7.1 | 0.6% | Apr 29, 2026 | VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows atta... |
| CVE-2018-25308 | HIGH | 8.8 | 0.7% | Apr 29, 2026 | BuddyPress Xprofile Custom Fields Type 2.6.3 contains an arbitrary file deletion vulnerability that allows authenticated... |
| CVE-2018-25307 | HIGH | 8.6 | 0.1% | Apr 29, 2026 | SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers ... |
| CVE-2018-25304 | HIGH | 8.6 | 0.2% | Apr 29, 2026 | Free Download Manager 2.0 Build 417 contains a local buffer overflow vulnerability in the URL import functionality that ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now