2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-7311 | HIGH | 8.8 | 2.3% | Feb 21, 2018 | PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability. The software installs a privileged h... |
| CVE-2018-7281 | — | — | 1.6% | Feb 21, 2018 | CactusVPN 5.3.6 for macOS contains a root privilege escalation vulnerability through a setuid root binary called runme. ... |
| CVE-2018-6936 | — | — | 2.3% | Feb 21, 2018 | Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account. |
| CVE-2018-7308 | — | — | 0.8% | Feb 21, 2018 | A CSRF issue was found in var/www/html/files.php in DanWin hosting through 2018-02-11 that allows arbitrary remote users... |
| CVE-2018-7305 | — | — | 0.4% | Feb 21, 2018 | MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts. |
| CVE-2018-7304 | — | — | 1.3% | Feb 21, 2018 | Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection attack can open a CMD.EXE o... |
| CVE-2018-7303 | — | — | 0.6% | Feb 21, 2018 | The Calendar component in Tiki 17.1 allows HTML injection. |
| CVE-2018-7302 | — | — | 0.6% | Feb 21, 2018 | Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS. |
| CVE-2018-7289 | — | — | 1.8% | Feb 21, 2018 | An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2. Malware with filenames cont... |
| CVE-2018-7280 | — | — | 0.8% | Feb 21, 2018 | The Ninja Forms plugin before 3.2.14 for WordPress has XSS. |
| CVE-2018-7261 | — | — | 0.6% | Feb 21, 2018 | There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Usern... |
| CVE-2018-7260 | — | — | 1.7% | Feb 21, 2018 | Cross-site scripting (XSS) vulnerability in db_central_columns.php in phpMyAdmin before 4.7.8 allows remote authenticate... |
| CVE-2018-5716 | HIGH | 8.1 | 1.8% | Feb 21, 2018 | An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by c... |
| CVE-2018-1168 | — | — | 0.3% | Feb 21, 2018 | This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with ... |
| CVE-2018-1166 | — | — | 0.4% | Feb 21, 2018 | This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-2... |
| CVE-2018-1165 | HIGH | 7 | 0.5% | Feb 21, 2018 | This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-2... |
| CVE-2018-1164 | — | — | 4.2% | Feb 21, 2018 | This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P... |
| CVE-2018-7278 | — | — | 0.8% | Feb 21, 2018 | An issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices. Persistent XSS exists in the web serve... |
| CVE-2018-7277 | — | — | 0.8% | Feb 21, 2018 | An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices. Persistent XSS exists in the web server. Remote attackers can ... |
| CVE-2018-7276 | — | — | 1.4% | Feb 21, 2018 | An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain... |
| CVE-2018-7274 | MEDIUM | 6.1 | 1.0% | Feb 21, 2018 | Yab Quarx through 2.4.3 is prone to multiple persistent cross-site scripting vulnerabilities: Blog (Title), FAQ (Questio... |
| CVE-2018-7273 | — | — | 1.8% | Feb 21, 2018 | In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables usi... |
| CVE-2018-7272 | — | — | 0.9% | Feb 21, 2018 | The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sen... |
| CVE-2018-7271 | — | — | 1.7% | Feb 21, 2018 | An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/config_db.php c... |
| CVE-2018-7265 | — | — | 0.9% | Feb 20, 2018 | Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS. |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now