|
cve-2018-4939
|
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
9.8
|
62.08%
|
cvelistv5 |
2021-11-03 |
|
cve-2018-4878
|
Adobe Flash Player Use-After-Free Vulnerability |
CRITICAL
|
N/A
|
89.53%
|
cvelistv5 |
2021-11-03 |
|
cve-2018-4344
|
Apple Multiple Products Memory Corruption Vulnerability |
HIGH
|
7.8
|
2.91%
|
cvelistv5 |
2022-06-27 |
|
cve-2018-4063
|
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability |
HIGH
|
8.8
|
27.06%
|
cvelistv5 |
2025-12-12 |
|
cve-2018-3810
|
Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. The saveGoogleCode() function in smartgooglecode.php does not check if the current request is made by an authorized user, thus allowing any unauthenticated user to successfully update the inserted code. |
CRITICAL
|
9.8
|
91.14%
|
cvelistv5 |
2026-06-17 |
|
cve-2018-3760
|
rubygem-sprockets: Path traversal in forbidden_request?() can allow remote attackers to read arbitrary files |
HIGH
|
7.5
|
26.72%
|
cvelistv5 |
2026-06-28 |
|
cve-2018-2894
|
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). |
CRITICAL
|
9.8
|
50.22%
|
cvelistv5 |
2026-06-17 |
|
cve-2018-2628
|
Oracle WebLogic Server Unspecified Vulnerability |
CRITICAL
|
9.8
|
99.45%
|
cvelistv5 |
2022-09-08 |
|
cve-2018-25126
|
CVE-2018-25126 |
CRITICAL
|
9.3
|
4.07%
|
cvelistv5 |
|
|
cve-2018-25124
|
CVE-2018-25124 |
HIGH
|
8.7
|
0.92%
|
cvelistv5 |
|
|
cve-2018-25120
|
CVE-2018-25120 |
CRITICAL
|
9.3
|
9.81%
|
cvelistv5 |
|
|
cve-2018-25118
|
GeoVision Command Injection RCE via /PictureCatch.cgi |
CRITICAL
|
10.0
|
1.27%
|
cvelistv5 |
2026-06-17 |
|
cve-2018-25114
|
osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution |
CRITICAL
|
9.3
|
4.15%
|
cvelistv5 |
2026-06-17 |
|
cve-2018-2380
|
SAP Customer Relationship Management (CRM) Path Traversal Vulnerability |
MEDIUM
|
6.6
|
28.93%
|
cvelistv5 |
2021-11-03 |
|
cve-2018-20841
|
HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mac_table request. |
CRITICAL
|
9.8
|
47.90%
|
cvelistv5 |
2026-06-17 |
|
cve-2018-20753
|
Kaseya VSA Remote Code Execution Vulnerability |
CRITICAL
|
9.8
|
29.34%
|
cvelistv5 |
2022-04-13 |
|
cve-2018-20470
|
CVE-2018-20470 |
HIGH
|
N/A
|
46.06%
|
cvelistv5 |
|
|
cve-2018-20334
|
CVE-2018-20334 |
HIGH
|
N/A
|
3.93%
|
cvelistv5 |
|
|
cve-2018-20250
|
WinRAR Absolute Path Traversal Vulnerability |
HIGH
|
7.8
|
96.27%
|
cvelistv5 |
2022-02-15 |
|
cve-2018-20062
|
ThinkPHP "noneCms" Remote Code Execution Vulnerability |
CRITICAL
|
9.8
|
99.53%
|
cvelistv5 |
2021-11-03 |
|
cve-2018-19953
|
QNAP NAS File Station Cross-Site Scripting Vulnerability |
MEDIUM
|
6.1
|
23.89%
|
cvelistv5 |
2022-05-24 |
|
cve-2018-19949
|
QNAP NAS File Station Command Injection Vulnerability |
CRITICAL
|
9.8
|
24.45%
|
cvelistv5 |
2022-05-24 |
|
cve-2018-19943
|
QNAP NAS File Station Cross-Site Scripting Vulnerability |
HIGH
|
8.0
|
17.71%
|
cvelistv5 |
2022-05-24 |
|
cve-2018-19410
|
Paessler PRTG Network Monitor Local File Inclusion Vulnerability |
HIGH
|
N/A
|
97.94%
|
cvelistv5 |
2025-02-04 |
|
cve-2018-19365
|
CVE-2018-19365 |
HIGH
|
N/A
|
22.29%
|
cvelistv5 |
|
|
cve-2018-19323
|
GIGABYTE Multiple Products Privilege Escalation Vulnerability |
CRITICAL
|
9.8
|
7.83%
|
cvelistv5 |
2022-10-24 |
|
cve-2018-19322
|
GIGABYTE Multiple Products Code Execution Vulnerability |
HIGH
|
7.8
|
1.80%
|
cvelistv5 |
2022-10-24 |
|
cve-2018-19321
|
GIGABYTE Multiple Products Privilege Escalation Vulnerability |
HIGH
|
7.8
|
3.67%
|
cvelistv5 |
2022-10-24 |
|
cve-2018-19320
|
GIGABYTE Multiple Products Unspecified Vulnerability |
HIGH
|
7.8
|
3.60%
|
cvelistv5 |
2022-10-24 |
|
cve-2018-19276
|
CVE-2018-19276 |
CRITICAL
|
10.0
|
98.71%
|
cvelistv5 |
|
ndaal KEV