2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-10544 | — | — | 1.2% | May 2, 2018 | Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface. |
| CVE-2018-6242 | — | — | 2.7% | May 1, 2018 | Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery M... |
| CVE-2018-10260 | — | — | 5.8% | May 1, 2018 | A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user. |
| CVE-2018-10259 | — | — | 1.6% | May 1, 2018 | An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged u... |
| CVE-2018-10258 | — | — | 7.6% | May 1, 2018 | A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to... |
| CVE-2018-10257 | — | — | 4.4% | May 1, 2018 | A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privile... |
| CVE-2018-10256 | — | — | 2.6% | May 1, 2018 | A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privile... |
| CVE-2018-9336 | — | — | 0.6% | May 1, 2018 | openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a do... |
| CVE-2018-9232 | — | — | 1.2% | May 1, 2018 | Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can cr... |
| CVE-2018-8939 | — | — | 1.4% | May 1, 2018 | An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit speci... |
| CVE-2018-8938 | — | — | 2.3% | May 1, 2018 | A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious act... |
| CVE-2018-10583 | — | — | 78.9% | May 1, 2018 | An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically p... |
| CVE-2018-10365 | — | — | 1.6% | May 1, 2018 | An XSS issue was discovered in the Threads to Link plugin 1.3 for MyBB. When editing a thread, the user is given the opt... |
| CVE-2018-1502 | — | — | 1.0% | May 1, 2018 | IBM Content Manager Enterprise Edition Resource Manager 8.4.3 and 9.5 is vulnerable to cross-site scripting. This vulner... |
| CVE-2018-10581 | — | — | 0.7% | May 1, 2018 | In Octopus Deploy 3.4.x before 2018.4.7, an authenticated user is able to view/update/save variable values within the Te... |
| CVE-2018-10371 | — | — | 6.4% | May 1, 2018 | An issue was discovered in the wunderfarm WF Cookie Consent plugin 1.1.3 for WordPress. A persistent cross-site scriptin... |
| CVE-2018-1000166 | — | — | — | May 1, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-3848 and CVE-2018-3849. Reason: This candidate ... |
| CVE-2018-10576 | — | — | 1.5% | Apr 30, 2018 | An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentica... |
| CVE-2018-10575 | — | — | 8.7% | Apr 30, 2018 | An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentia... |
| CVE-2018-1000172 | — | — | 0.6% | Apr 30, 2018 | Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Ti... |
| CVE-2018-1194 | — | — | — | Apr 30, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2018-10364 | — | — | 0.8% | Apr 30, 2018 | BigTree before 4.2.22 has XSS in the Users management page via the name or company field. |
| CVE-2018-1277 | — | — | 1.1% | Apr 30, 2018 | Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A r... |
| CVE-2018-1183 | — | — | 2.1% | Apr 30, 2018 | In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance... |
| CVE-2018-10574 | — | — | 2.2% | Apr 30, 2018 | site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PH... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now