|
cve-2018-20470
|
CVE-2018-20470 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2018-20334
|
CVE-2018-20334 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2018-20250
|
WinRAR Absolute Path Traversal Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2022-02-15 |
|
cve-2018-20062
|
ThinkPHP "noneCms" Remote Code Execution Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2021-11-03 |
|
cve-2018-19953
|
QNAP NAS File Station Cross-Site Scripting Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2022-05-24 |
|
cve-2018-19949
|
QNAP NAS File Station Command Injection Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2022-05-24 |
|
cve-2018-19943
|
QNAP NAS File Station Cross-Site Scripting Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2022-05-24 |
|
cve-2018-19410
|
Paessler PRTG Network Monitor Local File Inclusion Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-02-04 |
|
cve-2018-19365
|
CVE-2018-19365 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2018-19323
|
GIGABYTE Multiple Products Privilege Escalation Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2022-10-24 |
|
cve-2018-19322
|
GIGABYTE Multiple Products Code Execution Vulnerability |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2022-10-24 |
|
cve-2018-19321
|
GIGABYTE Multiple Products Privilege Escalation Vulnerability |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2022-10-24 |
|
cve-2018-19320
|
GIGABYTE Multiple Products Unspecified Vulnerability |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2022-10-24 |
|
cve-2018-19276
|
CVE-2018-19276 |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
|
|
cve-2018-19207
|
The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited in the wild in November 2018. |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2018-18956
|
SUSE CVE CVE-2018-18956 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2025-02-18 |
|
cve-2018-18852
|
Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018. |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2018-18809
|
TIBCO JasperReports Library Directory Traversal Vulnerability |
CRITICAL
|
9.9
|
N/A
|
cvelistv5 |
2022-12-29 |
|
cve-2018-18325
|
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2021-11-03 |
|
cve-2018-17532
|
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges. |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2018-17480
|
Google Chromium V8 Out-of-Bounds Write Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2022-06-08 |
|
cve-2018-17463
|
Google Chromium V8 Remote Code Execution Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2022-06-08 |
|
cve-2018-17431
|
CVE-2018-17431 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2018-17283
|
Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL Injection attack via the /api/json/device/setManaged name parameter. |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2018-17246
|
SUSE CVE CVE-2018-17246 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2025-04-25 |
|
cve-2018-17173
|
LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail. |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2018-16763
|
CVE-2018-16763 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2018-16159
|
The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template request. |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2018-16059
|
Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter. |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2018-15982
|
Adobe Flash Player Use-After-Free Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2022-02-15 |
ndaal KEV