2018 CVEs (page 2)
Page 2 of 179 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-25337 | Medium | 4.3 | 2026-05-17 | Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated user… |
CVE-2018-25336 | Medium | 5.3 | 2026-05-17 | jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication… |
CVE-2018-25335 | Critical | 9.8 | 2026-05-17 | WordPress Plugin Peugeot Music 1.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending P… |
CVE-2018-25334 | Medium | 5.4 | 2026-05-17 | Zechat 1.5 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections… |
CVE-2018-25333 | High | 8.2 | 2026-05-17 | Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries… |
CVE-2018-25332 | Critical | 9.8 | 2026-05-17 | GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret… |
CVE-2018-25331 | Medium | 6.1 | 2026-05-17 | Zenar Content Management System contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating… |
CVE-2018-25330 | High | 8.2 | 2026-05-17 | Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabilities that allow attackers to inject malicious code throug… |
CVE-2018-25329 | High | 7.5 | 2026-05-17 | WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting f… |
CVE-2018-25328 | High | 8.4 | 2026-05-17 | VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in… |
CVE-2018-25327 | Medium | 5.3 | 2026-05-17 | Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token valid… |
CVE-2018-25326 | High | 7.5 | 2026-05-17 | Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by injecting directory tra… |
CVE-2018-25325 | High | 7.5 | 2026-05-17 | Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered user to delete arbitrary files by submitting unescaped filena… |
CVE-2018-25324 | Medium | 6.2 | 2026-05-17 | Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by… |
CVE-2018-25323 | High | 8.4 | 2026-05-17 | Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbi… |
CVE-2018-25322 | High | 8.4 | 2026-05-17 | Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a mali… |
CVE-2018-25321 | Medium | 4.3 | 2026-05-17 | TP-Link TL-WR720N wireless router contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by c… |
CVE-2018-25320 | Critical | 9.8 | 2026-05-17 | ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability that allows attackers to execute arbitrary commands by leverag… |
CVE-2018-25319 | High | 7.1 | 2026-05-17 | Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL cod… |
CVE-2018-25318 | Critical | 9.8 | 2026-04-29 | Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insu… |
CVE-2018-25317 | Critical | 9.8 | 2026-04-29 | Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DN… |
CVE-2018-25316 | Critical | 9.8 | 2026-04-29 | Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficien… |
CVE-2018-25315 | High | 8.4 | 2026-04-29 | Alloksoft Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string… |
CVE-2018-25314 | High | 8.4 | 2026-04-29 | Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplyi… |
CVE-2018-25313 | Medium | 6.2 | 2026-04-29 | SysGauge 4.5.18 contains a buffer overflow vulnerability in the proxy configuration handler that allows local attackers to cause a denial of service by supplyi… |
CVE-2018-25312 | Medium | 6.5 | 2026-04-29 | LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and upload arbitrary files by manipulating… |
CVE-2018-25311 | Medium | 6.5 | 2026-04-29 | VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclos… |
CVE-2018-25310 | Medium | 4.3 | 2026-04-29 | VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitr… |
CVE-2018-25309 | High | 7.2 | 2026-04-29 | MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with cr… |
CVE-2018-25308 | High | 8.8 | 2026-04-29 | BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated users to delete arbitrary files by manipu… |
CVE-2018-25307 | High | 8.4 | 2026-04-29 | SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception h… |
CVE-2018-25306 | Medium | 6.2 | 2026-04-29 | PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge op… |
CVE-2018-25305 | Medium | 6.2 | 2026-04-29 | librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service by processing malformed SVG files. Attac… |
CVE-2018-25304 | High | 8.4 | 2026-04-29 | Free Download Manager 2.0 Build 417 contains a local buffer overflow vulnerability in the URL import functionality that allows attackers to trigger a structure… |
CVE-2018-25303 | High | 8.4 | 2026-04-29 | Allok Video to DVD Burner 2.6.1217 contains a stack-based buffer overflow vulnerability in the License Name field that allows local attackers to execute arbitr… |
CVE-2018-25302 | High | 7.8 | 2026-04-29 | Allok AVI to DVD SVCD VCD Converter 4.0.1217 contains a structured exception handling (SEH) based buffer overflow vulnerability that allows local attackers to… |
CVE-2018-25301 | High | 8.4 | 2026-04-29 | Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer overflow vulnerability that allows local attackers to execute arbitr… |
CVE-2018-25300 | High | 8.2 | 2026-04-29 | XATABoost CMS 1.0.0 contains a union-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL co… |
CVE-2018-25299 | High | 8.4 | 2026-04-29 | Prime95 29.4b8 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling (SEH)… |
CVE-2018-25298 | Medium | 5.3 | 2026-04-29 | Merge PACS 7.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by crafting malicious HTML forms targe… |
CVE-2018-25297 | Medium | 6.2 | 2026-04-26 | Wansview 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers ca… |
CVE-2018-25296 | Medium | 5.5 | 2026-04-26 | P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the applicatio… |
CVE-2018-25295 | Medium | 6.2 | 2026-04-26 | ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long… |
CVE-2018-25294 | High | 7.5 | 2026-04-26 | CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input… |
CVE-2018-25293 | Medium | 6.2 | 2026-04-26 | Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an… |
CVE-2018-25292 | Medium | 6.2 | 2026-04-26 | Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in t… |
CVE-2018-25291 | Medium | 6.2 | 2026-04-26 | Project64 2.3.2 contains a buffer overflow vulnerability in the Plugin Directory settings field that allows local attackers to crash the application by supplyi… |
CVE-2018-25290 | Medium | 6.2 | 2026-04-26 | Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to crash the application by supplying an overs… |
CVE-2018-25289 | Medium | 6.2 | 2026-04-26 | Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an ov… |
CVE-2018-25288 | Medium | 6.2 | 2026-04-26 | StyleWriter 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string. Attacker… |
CVE-2018-25287 | Medium | 5.5 | 2026-04-26 | Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string… |
CVE-2018-25286 | Medium | 6.2 | 2026-04-26 | Easy PhotoResQ 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the… |
CVE-2018-25285 | Medium | 5.5 | 2026-04-26 | Fathom 2.4 contains a buffer overflow vulnerability in the Authorization Code field that allows local attackers to crash the application by submitting an overs… |
CVE-2018-25284 | Medium | 6.2 | 2026-04-26 | HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the f… |
CVE-2018-25283 | High | 8.4 | 2026-04-26 | iSmartViewPro 1.5 contains a structured exception handling (SEH) buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allow… |
CVE-2018-25282 | Medium | 6.2 | 2026-04-26 | Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential en… |
CVE-2018-25281 | Medium | 5.5 | 2026-04-26 | iCash 7.6.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload through the Connect… |
CVE-2018-25280 | Medium | 5.5 | 2026-04-26 | Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversize… |
CVE-2018-25279 | Medium | 6.2 | 2026-04-26 | jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file… |
CVE-2018-25278 | Medium | 6.2 | 2026-04-26 | PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration… |
CVE-2018-25277 | Medium | 6.2 | 2026-04-26 | PixGPS 1.1.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string to the folder path… |
CVE-2018-25276 | Medium | 5.5 | 2026-04-26 | RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registrati… |
CVE-2018-25275 | Medium | 6.2 | 2026-04-26 | Faleemi Plus 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attacker… |
CVE-2018-25274 | Medium | 6.2 | 2026-04-26 | InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file… |
CVE-2018-25273 | Medium | 6.2 | 2026-04-26 | CrossFont 7.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by submitting an oversized payload in the License K… |
CVE-2018-25264 | Medium | 6.2 | 2026-04-26 | TransMac 12.2 contains a buffer overflow vulnerability in the license key input field that allows local attackers to crash the application by submitting an ove… |
CVE-2018-25263 | High | 8.4 | 2026-04-26 | Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exc… |
CVE-2018-25272 | Critical | 9.8 | 2026-04-22 | ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM leve… |
CVE-2018-25271 | Medium | 6.2 | 2026-04-22 | Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string th… |
CVE-2018-25270 | Critical | 9.8 | 2026-04-22 | ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions throug… |
CVE-2018-25269 | Medium | 6.1 | 2026-04-22 | ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base… |
CVE-2018-25268 | High | 8.4 | 2026-04-22 | LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the… |
CVE-2018-25267 | Medium | 6.2 | 2026-04-22 | UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwr… |
CVE-2018-25266 | Medium | 6.2 | 2026-04-22 | Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an… |
CVE-2018-25265 | High | 8.4 | 2026-04-22 | LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structu… |
CVE-2018-25262 | Medium | 6.2 | 2026-04-22 | Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input t… |
CVE-2018-25261 | High | 8.4 | 2026-04-22 | Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute… |
CVE-2018-25260 | High | 8.4 | 2026-04-22 | MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exp… |
CVE-2018-25259 | High | 8.4 | 2026-04-22 | Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary… |
CVE-2018-25258 | High | 8.4 | 2026-04-12 | RGui 3.5.0 contains a local buffer overflow vulnerability in the GUI preferences dialog that allows attackers to bypass DEP protections through structured exce… |
CVE-2018-25257 | High | 7.1 | 2026-04-12 | Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code… |
CVE-2018-25256 | Medium | 5.5 | 2026-04-05 | IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying ov… |
CVE-2018-25246 | High | 7.5 | 2026-04-04 | Wikipedia 12.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through… |
CVE-2018-25255 | High | 8.4 | 2026-04-04 | 10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by… |
CVE-2018-25254 | Critical | 9.8 | 2026-04-04 | NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending craft… |
CVE-2018-25253 | Medium | 6.2 | 2026-04-04 | Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field that allows local attackers to cause a denial of service by… |
CVE-2018-25252 | Medium | 6.2 | 2026-04-04 | FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the… |
CVE-2018-25251 | High | 8.4 | 2026-04-04 | Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception ha… |
CVE-2018-25250 | High | 7.2 | 2026-04-04 | MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by cr… |
CVE-2018-25249 | Medium | 6.4 | 2026-04-04 | MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade g… |
CVE-2018-25248 | High | 7.2 | 2026-04-04 | MyBB Downloads Plugin 2.0.3 contains a persistent cross-site scripting vulnerability that allows regular members to inject malicious scripts through the downlo… |
CVE-2018-25247 | Medium | 6.1 | 2026-04-04 | MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject script payloads into post or thread subjects; w… |
CVE-2018-25245 | High | 7.5 | 2026-04-04 | 7 Tik 1.0.1.0 contains a denial of service vulnerability that allows attackers to crash the application by submitting excessively long input strings to the sea… |
CVE-2018-25244 | Medium | 6.2 | 2026-04-04 | Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to… |
CVE-2018-25243 | Medium | 6.2 | 2026-04-04 | FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to th… |
CVE-2018-25242 | Medium | 6.2 | 2026-04-04 | One Search 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting excessively long input strings… |
CVE-2018-25241 | High | 7.5 | 2026-04-04 | VPN Browser+ 1.1.0.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input th… |
CVE-2018-25240 | Medium | 6.2 | 2026-04-04 | Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the… |
CVE-2018-25239 | Medium | 6.2 | 2026-04-04 | Smart VPN 1.1.3.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the sea… |
CVE-2018-25238 | Medium | 6.2 | 2026-04-04 | VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through t… |