2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-21010 | HIGH | 8.8 | 2.1% | Sep 5, 2019 | OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c. |
| CVE-2018-21009 | — | — | 2.0% | Sep 5, 2019 | Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc. |
| CVE-2018-21008 | — | — | 0.6% | Sep 4, 2019 | An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_d... |
| CVE-2018-11989 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11978 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11977 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11975 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11974 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11973 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11972 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11969 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11959 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11941 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11933 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-11825 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2018-18371 | — | — | 0.6% | Aug 30, 2019 | The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:... |
| CVE-2018-18370 | — | — | 0.8% | Aug 30, 2019 | The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:... |
| CVE-2018-15513 | — | — | 1.0% | Aug 30, 2019 | Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a ... |
| CVE-2018-15512 | — | — | 1.0% | Aug 30, 2019 | Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows rem... |
| CVE-2018-15511 | — | — | 1.0% | Aug 30, 2019 | Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows rem... |
| CVE-2018-15510 | — | — | 0.6% | Aug 30, 2019 | Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attack... |
| CVE-2018-21007 | — | — | 2.0% | Aug 29, 2019 | The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders i... |
| CVE-2018-21006 | — | — | 0.7% | Aug 27, 2019 | The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF. |
| CVE-2018-21005 | — | — | 2.1% | Aug 27, 2019 | The bbp-move-topics plugin before 1.1.6 for WordPress has code injection. |
| CVE-2018-21004 | — | — | 2.2% | Aug 27, 2019 | The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection. |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now