2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1000519 | MEDIUM | 6.5 | 1.2% | Jun 26, 2018 | aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https... |
| CVE-2018-1000518 | HIGH | 7.5 | 1.8% | Jun 26, 2018 | aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vuln... |
| CVE-2018-1000517 | CRITICAL | 9.8 | 32.4% | Jun 26, 2018 | BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow... |
| CVE-2018-1000516 | — | — | 1.0% | Jun 26, 2018 | The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation ... |
| CVE-2018-1000515 | — | — | 1.4% | Jun 26, 2018 | ventrian News-Articles version NewsArticles.00.09.11 contains a XML External Entity (XXE) vulnerability in News-Articles... |
| CVE-2018-1000514 | — | — | 0.3% | Jun 26, 2018 | LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Boxes that can result... |
| CVE-2018-1000513 | — | — | 0.7% | Jun 26, 2018 | LimeSurvey version 3.0.0-beta.3+17110 contains a Cross Site Scripting (XSS) vulnerability in Boxes that can result in JS... |
| CVE-2018-1000512 | — | — | 0.8% | Jun 26, 2018 | Tooltipy Tooltipy (tooltips for WP) version 5 contains a Cross Site Scripting (XSS) vulnerability in Glossary shortcode ... |
| CVE-2018-1000511 | — | — | 0.8% | Jun 26, 2018 | WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody ... |
| CVE-2018-1000510 | — | — | 1.0% | Jun 26, 2018 | WP Image Zoom version 1.23 contains a Incorrect Access Control vulnerability in AJAX settings that can result in allows ... |
| CVE-2018-1000509 | — | — | 2.1% | Jun 26, 2018 | Redirection version 2.7.1 contains a Serialisation vulnerability possibly allowing ACE vulnerability in Settings page AJ... |
| CVE-2018-1000508 | — | — | 0.6% | Jun 26, 2018 | WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in Settings screen that can result in al... |
| CVE-2018-1000507 | — | — | 0.4% | Jun 26, 2018 | WP User Groups version 2.0.0 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page that can result ... |
| CVE-2018-1000506 | — | — | 0.6% | Jun 26, 2018 | Metronet Tag Manager version 1.2.7 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page /wp-admin/... |
| CVE-2018-1000505 | — | — | 0.5% | Jun 26, 2018 | Tooltipy (tooltips for WP) version 5 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page that can... |
| CVE-2018-1000504 | — | — | 2.0% | Jun 26, 2018 | Redirection version 2.7.3 contains a ACE via file inclusion vulnerability in Pass-through mode that can result in allows... |
| CVE-2018-1000503 | — | — | 0.6% | Jun 26, 2018 | MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view po... |
| CVE-2018-1000502 | — | — | 1.3% | Jun 26, 2018 | MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel (Tools and Maintenance -> Task Manager -> Add New... |
| CVE-2018-1000501 | — | — | 1.6% | Jun 26, 2018 | Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/a... |
| CVE-2018-1000500 | HIGH | 8.1 | 2.5% | Jun 26, 2018 | Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbi... |
| CVE-2018-1000205 | MEDIUM | 5.5 | 0.7% | Jun 26, 2018 | U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result ... |
| CVE-2018-10852 | LOW | 3.8 | 1.5% | Jun 26, 2018 | The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, whic... |
| CVE-2018-1000204 | — | — | 1.9% | Jun 26, 2018 | Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_IO ioctl on /dev/sg0 with dxfer_direction=SG_DXFER_FROM_DEV ... |
| CVE-2018-0612 | MEDIUM | 6.1 | 0.8% | Jun 26, 2018 | Cross-site scripting vulnerability in 5000 trillion yen converter v1.0.6 allows remote attackers to inject arbitrary web... |
| CVE-2018-0611 | — | — | 0.5% | Jun 26, 2018 | The ANA App for iOS version 4.0.22 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now