2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-10125 | MEDIUM | 6.1 | 0.8% | Mar 16, 2020 | Contao before 4.5.7 has XSS in the system log. |
| CVE-2018-20586 | MEDIUM | 5.3 | 1.1% | Mar 12, 2020 | bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call. |
| CVE-2018-19516 | MEDIUM | 5.3 | 1.1% | Mar 12, 2020 | messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restric... |
| CVE-2018-10704 | MEDIUM | 6.1 | 0.9% | Mar 12, 2020 | yidashi yii2cmf 2.0 has XSS via the /search q parameter. |
| CVE-2018-18894 | HIGH | 7.5 | 1.7% | Mar 10, 2020 | Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the ... |
| CVE-2018-14502 | CRITICAL | 9.8 | 2.7% | Mar 10, 2020 | controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users... |
| CVE-2018-11838 | HIGH | 7.8 | 0.2% | Mar 5, 2020 | Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute... |
| CVE-2018-5951 | HIGH | 7.5 | 4.3% | Mar 2, 2020 | An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 addr... |
| CVE-2018-20347 | — | — | — | Mar 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2018-20343 | HIGH | 7.8 | 2.2% | Mar 2, 2020 | Multiple buffer overflow vulnerabilities have been found in Ken Silverman Build Engine 1. An attacker could craft a spec... |
| CVE-2018-19798 | HIGH | 8.8 | 3.1% | Mar 2, 2020 | Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the applicatio... |
| CVE-2018-19658 | MEDIUM | 5.4 | 0.5% | Mar 2, 2020 | The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote user... |
| CVE-2018-19599 | MEDIUM | 5.4 | 0.7% | Mar 2, 2020 | Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager&path=uploads/ URI. NOTE: ... |
| CVE-2018-19284 | — | — | — | Mar 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2018-18479 | — | — | — | Mar 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2018-17572 | MEDIUM | 4.8 | 0.7% | Mar 2, 2020 | InfluxDB 0.9.5 has Reflected XSS in the Write Data module. |
| CVE-2018-16357 | CRITICAL | 9.8 | 1.8% | Mar 2, 2020 | An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter. |
| CVE-2018-16356 | CRITICAL | 9.8 | 1.8% | Mar 2, 2020 | An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter. |
| CVE-2018-15820 | MEDIUM | 6.1 | 0.9% | Mar 2, 2020 | EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter. |
| CVE-2018-15819 | HIGH | 7.5 | 1.8% | Mar 2, 2020 | EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js. |
| CVE-2018-14384 | MEDIUM | 4.8 | 0.8% | Mar 2, 2020 | The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerabil... |
| CVE-2018-11675 | — | — | — | Mar 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2018-17058 | HIGH | 8.8 | 1.3% | Mar 2, 2020 | An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerabilit... |
| CVE-2018-21035 | HIGH | 7.5 | 2.3% | Feb 28, 2020 | In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits can... |
| CVE-2018-8878 | MEDIUM | 5.3 | 1.5% | Feb 27, 2020 | Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now