2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1858 | HIGH | 8.8 | 0.9% | Jun 25, 2019 | IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to exe... |
| CVE-2018-20843 | HIGH | 7.5 | 7.1% | Jun 24, 2019 | In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XM... |
| CVE-2018-15735 | — | — | 0.4% | Jun 21, 2019 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulner... |
| CVE-2018-15734 | — | — | 0.4% | Jun 21, 2019 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulner... |
| CVE-2018-15733 | — | — | 0.4% | Jun 21, 2019 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a NULL Pointer Dereferenc... |
| CVE-2018-15732 | — | — | 0.5% | Jun 21, 2019 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulner... |
| CVE-2018-15731 | — | — | 0.4% | Jun 21, 2019 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulne... |
| CVE-2018-15730 | — | — | 0.4% | Jun 21, 2019 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulne... |
| CVE-2018-15729 | — | — | 0.4% | Jun 21, 2019 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulne... |
| CVE-2018-15665 | — | — | 1.2% | Jun 21, 2019 | An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0. Unauthenticated users can get a l... |
| CVE-2018-15868 | — | — | 1.8% | Jun 21, 2019 | SQL injection vulnerability in ChronoScan version 1.5.4.3 and earlier allows an unauthenticated attacker to execute arbi... |
| CVE-2018-15747 | — | — | 3.5% | Jun 21, 2019 | The default configuration of glot-www through 2018-05-19 allows remote attackers to execute arbitrary code because glot-... |
| CVE-2018-15737 | — | — | 0.4% | Jun 21, 2019 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulne... |
| CVE-2018-15736 | — | — | 0.4% | Jun 21, 2019 | An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulne... |
| CVE-2018-15913 | MEDIUM | 6.1 | 0.6% | Jun 20, 2019 | An issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera Manager uses a 'returnUrl' ... |
| CVE-2018-15879 | — | — | — | Jun 20, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation du... |
| CVE-2018-15878 | — | — | — | Jun 20, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation du... |
| CVE-2018-16118 | — | — | 3.7% | Jun 20, 2019 | A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.... |
| CVE-2018-16117 | HIGH | 8.8 | 44.3% | Jun 20, 2019 | A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote au... |
| CVE-2018-16116 | — | — | 1.9% | Jun 20, 2019 | SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenti... |
| CVE-2018-15892 | — | — | 0.5% | Jun 20, 2019 | FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&vie... |
| CVE-2018-15891 | — | — | 0.6% | Jun 20, 2019 | An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding ... |
| CVE-2018-15890 | — | — | 3.0% | Jun 20, 2019 | An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization in ois.readObject in mine/Ethash.java and de... |
| CVE-2018-16248 | — | — | 1.0% | Jun 20, 2019 | b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of "articleTags" stored in the "... |
| CVE-2018-16247 | — | — | 0.6% | Jun 20, 2019 | YzmCMS 5.1 has XSS via the admin/system_manage/user_config_add.html title parameter. |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now