2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-6378 | — | — | 1.4% | May 22, 2018 | In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the m... |
| CVE-2018-11369 | — | — | 1.1% | May 22, 2018 | An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the databas... |
| CVE-2018-11328 | — | — | 1.4% | May 22, 2018 | An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances (a redirect issued with a URI contain... |
| CVE-2018-11327 | — | — | 1.4% | May 22, 2018 | An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were... |
| CVE-2018-11326 | — | — | 1.1% | May 22, 2018 | An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities... |
| CVE-2018-11325 | — | — | 3.8% | May 22, 2018 | An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after e... |
| CVE-2018-11324 | — | — | 1.3% | May 22, 2018 | An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as remote checks for core ... |
| CVE-2018-11323 | — | — | 3.2% | May 22, 2018 | An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to modify the access levels of use... |
| CVE-2018-11322 | — | — | 2.1% | May 22, 2018 | An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR files might be handled... |
| CVE-2018-11321 | — | — | 2.0% | May 22, 2018 | An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to crea... |
| CVE-2018-6963 | — | — | 0.4% | May 22, 2018 | VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabiliti... |
| CVE-2018-6962 | — | — | 0.4% | May 22, 2018 | VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalat... |
| CVE-2018-1583 | — | — | 0.8% | May 22, 2018 | IBM StoredIQ 7.6 could allow an authenticated attacker to bypass certain security restrictions. By sending a specially-c... |
| CVE-2018-11367 | — | — | 1.1% | May 22, 2018 | An issue was discovered in CppCMS before 1.2.1. There is a denial of service in the JSON parser module. |
| CVE-2018-11366 | — | — | 2.2% | May 22, 2018 | init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS)... |
| CVE-2018-3640 | — | — | 7.6% | May 22, 2018 | Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may ... |
| CVE-2018-3639 | MEDIUM | 5.5 | 60.6% | May 22, 2018 | Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres... |
| CVE-2018-11329 | HIGH | 7.5 | 0.9% | May 22, 2018 | The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take ... |
| CVE-2018-11365 | — | — | 1.2% | May 22, 2018 | sas/readstat_sas7bcat_read.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop. |
| CVE-2018-11364 | — | — | 1.2% | May 22, 2018 | sav_parse_machine_integer_info_record in spss/readstat_sav_read.c in libreadstat.a in ReadStat 0.1.1 has a memory leak r... |
| CVE-2018-11363 | — | — | 1.9% | May 22, 2018 | jpeg_size in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read. |
| CVE-2018-11346 | — | — | 1.3% | May 22, 2018 | An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability t... |
| CVE-2018-11345 | — | — | 1.9% | May 22, 2018 | An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload sup... |
| CVE-2018-11344 | — | — | 1.5% | May 22, 2018 | A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify... |
| CVE-2018-11343 | — | — | 0.9% | May 22, 2018 | A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows attac... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now