Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2018-9205 Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path. HIGH 7.5 55.08% cvelistv5 2026-06-17
cve-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability HIGH N/A 29.61% cvelistv5 2021-11-03
cve-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability HIGH 8.4 22.18% cvelistv5 2025-03-03
cve-2018-8611 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH 7.8 4.20% cvelistv5 2022-05-24
cve-2018-8589 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 3.02% cvelistv5 2022-05-23
cve-2018-8581 Microsoft Exchange Server Privilege Escalation Vulnerability HIGH 7.4 27.36% cvelistv5 2022-03-03
cve-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 70.04% cvelistv5 2022-01-21
cve-2018-8440 Microsoft Windows Privilege Escalation Vulnerability HIGH 7.8 18.39% cvelistv5 2022-03-28
cve-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability HIGH 8.8 73.97% cvelistv5 2022-03-25
cve-2018-8406 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability HIGH 7.8 3.44% cvelistv5 2022-03-28
cve-2018-8405 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability HIGH 7.8 3.44% cvelistv5 2022-03-28
cve-2018-8373 Microsoft Scripting Engine Memory Corruption Vulnerability HIGH 7.5 61.91% cvelistv5 2022-03-25
cve-2018-8298 ChakraCore Scripting Engine Type Confusion Vulnerability HIGH N/A 74.52% cvelistv5 2022-03-03
cve-2018-8174 Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability CRITICAL N/A 88.33% cvelistv5 2022-02-15
cve-2018-8120 Microsoft Win32k Privilege Escalation Vulnerability CRITICAL N/A 73.43% cvelistv5 2022-03-15
cve-2018-8006 activemq: Cross-site scripting (XSS) via QueueFilter parameter MEDIUM 6.1 57.23% cvelistv5 2025-11-21
cve-2018-7841 Schneider Electric U.motion Builder SQL Injection Vulnerability CRITICAL 9.8 72.67% cvelistv5 2022-04-15
cve-2018-7700 DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP code. HIGH 8.8 74.12% cvelistv5 2026-06-17
cve-2018-7602 drupal: Remote code execution vulnerability SA-CORE-2018-004 HIGH 8.8 99.20% cvelistv5 2025-11-21
cve-2018-7600 drupal: Unsanitized requests allow remote attackers to execute arbitrary code CRITICAL 9.8 99.99% cvelistv5 2025-11-21
cve-2018-7445 MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability CRITICAL 9.8 60.81% cvelistv5 2022-09-08
cve-2018-6961 VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability HIGH 8.1 86.25% cvelistv5 2022-03-25
cve-2018-6882 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 25.27% cvelistv5 2022-04-19
cve-2018-6789 exim: buffer overflow in b64decode() function, possibly leading to remote code execution HIGH 8.1 82.14% cvelistv5 2026-01-09
cve-2018-6605 SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request. CRITICAL 9.8 57.70% cvelistv5 2026-06-17
cve-2018-6530 D-Link Multiple Routers OS Command Injection Vulnerability CRITICAL 9.8 96.68% cvelistv5 2022-09-08
cve-2018-6065 chromium-browser: integer overflow in v8 HIGH 8.8 60.30% cvelistv5 2026-06-28
cve-2018-5430 jasperreports: read-only access to the contents of the web application for authenticated user MEDIUM 4.3 49.63% cvelistv5 2025-11-21
cve-2018-5002 flash-plugin: Arbitrary Code Execution vulnerability (APSB18-19) HIGH 8.8 25.06% cvelistv5 2026-06-28
cve-2018-4990 Adobe Acrobat and Reader Double Free Vulnerability HIGH N/A 36.23% cvelistv5 2022-06-08