2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1000548 | — | — | 1.3% | Jun 26, 2018 | Umlet version < 14.3 contains a XML External Entity (XXE) vulnerability in File parsing that can result in disclosure of... |
| CVE-2018-1000547 | MEDIUM | 5.3 | 0.8% | Jun 26, 2018 | coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in... |
| CVE-2018-1000546 | — | — | 2.6% | Jun 26, 2018 | Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can resu... |
| CVE-2018-1000544 | CRITICAL | 9.8 | 4.5% | Jun 26, 2018 | rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that c... |
| CVE-2018-1000543 | — | — | 1.2% | Jun 26, 2018 | Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Detail... |
| CVE-2018-1000542 | — | — | 2.7% | Jun 26, 2018 | netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD file import that can resu... |
| CVE-2018-1000540 | — | — | 1.2% | Jun 26, 2018 | LoboEvolution version < 9b75694cedfa4825d4a2330abf2719d470c654cd contains a XML External Entity (XXE) vulnerability in X... |
| CVE-2018-1000539 | — | — | 0.8% | Jun 26, 2018 | Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerabil... |
| CVE-2018-1000538 | — | — | 1.5% | Jun 26, 2018 | Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits ... |
| CVE-2018-1000537 | — | — | 3.4% | Jun 26, 2018 | Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending o... |
| CVE-2018-1000536 | — | — | 1.3% | Jun 26, 2018 | Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration... |
| CVE-2018-1000535 | HIGH | 7.5 | 1.8% | Jun 26, 2018 | lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module tha... |
| CVE-2018-1000534 | — | — | 1.5% | Jun 26, 2018 | Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that parti... |
| CVE-2018-1000533 | CRITICAL | 9.8 | 75.9% | Jun 26, 2018 | klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in ... |
| CVE-2018-1000532 | — | — | 0.4% | Jun 26, 2018 | beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can resul... |
| CVE-2018-1000531 | — | — | 1.6% | Jun 26, 2018 | inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in ... |
| CVE-2018-1000529 | — | — | 1.2% | Jun 26, 2018 | Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can... |
| CVE-2018-1000528 | — | — | 46.3% | Jun 26, 2018 | GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulner... |
| CVE-2018-1000527 | — | — | 2.6% | Jun 26, 2018 | Froxlor version <= 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possibl... |
| CVE-2018-1000526 | — | — | 2.1% | Jun 26, 2018 | Openpsa contains a XML Injection vulnerability in RSS file upload feature that can result in Remote denial of service. T... |
| CVE-2018-1000525 | — | — | 4.1% | Jun 26, 2018 | openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Po... |
| CVE-2018-1000524 | — | — | 1.2% | Jun 26, 2018 | miniSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize() function in map_engine.... |
| CVE-2018-1000523 | — | — | 1.2% | Jun 26, 2018 | topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat... |
| CVE-2018-1000521 | — | — | 0.9% | Jun 26, 2018 | BigTree-CMS contains a Cross Site Scripting (XSS) vulnerability in /users/create that can result in The low-privileged u... |
| CVE-2018-1000520 | — | — | 0.7% | Jun 26, 2018 | ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed Certificates vulnerability in mbe... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now