Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2018-15811 CVE-2018-15811 HIGH N/A N/A cvelistv5
cve-2018-15517 D-Link central_wifimanager Server-Side Request Forgery HIGH N/A N/A cvelistv5 2024-01-04
cve-2018-15138 ericssonlg ipecs_nms Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2023-11-26
cve-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2023-03-17
cve-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2019-06-13
cve-2018-14918 loytec lgate-902_firmware Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2023-11-26
cve-2018-14912 cgit: directory traversal vulnerability in cgit < 1.2.1 HIGH 7.5 N/A cvelistv5 2026-01-13
cve-2018-14847 MikroTik Router OS Directory Traversal Vulnerability HIGH N/A N/A cvelistv5 2020-12-01
cve-2018-14839 LG N1A1 NAS Remote Command Execution Vulnerability HIGH N/A N/A cvelistv5 2022-03-25
cve-2018-14667 RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution CRITICAL 9.8 N/A cvelistv5 2025-11-21
cve-2018-14634 kernel: Integer overflow in Linux's create_elf_tables function HIGH 7.8 N/A cvelistv5 2026-06-30
cve-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability HIGH N/A N/A cvelistv5 2021-04-13
cve-2018-14013 Synacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2026-08-06
cve-2018-13980 CVE-2018-13980 HIGH N/A N/A cvelistv5
cve-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write CRITICAL N/A N/A cvelistv5 2019-10-02
cve-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization CRITICAL 9.1 N/A cvelistv5 2019-10-02
cve-2018-13379 Fortinet FortiOS SSL VPN Path Traversal Vulnerability CRITICAL 9.1 N/A cvelistv5 2019-10-02
cve-2018-13374 Fortinet FortiOS and FortiADC Improper Access Control Vulnerability MEDIUM 4.3 N/A cvelistv5 2021-02-16
cve-2018-13350 TerraMaster TerraMaster OS Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2025-07-21
cve-2018-1335 tika: Command injection in tika-server can allow remote attackers to execute arbitrary commands via crafted headers HIGH 8.8 N/A cvelistv5 2026-08-04
cve-2018-13315 TOTOLINK a3002ru Improper Input Validation HIGH N/A N/A cvelistv5 2024-02-05
cve-2018-13307 TOTOLINK a3002ru Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2024-05-22
cve-2018-1273 spring-data-commons: Improper neutralization of special elements allow remote attackers to execute code via crafted requests CRITICAL 9.8 N/A cvelistv5 2026-08-04
cve-2018-12296 seagate nas_os Incorrect Permission Assignment for Critical Resource HIGH N/A N/A cvelistv5 2024-01-03
cve-2018-1217 Dell emc_avamar Missing Authorization HIGH N/A N/A cvelistv5 2025-02-11
cve-2018-1207 CVE-2018-1207 HIGH N/A N/A cvelistv5
cve-2018-12031 eaton intelligent_power_manager Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2023-11-26
cve-2018-11776 struts2: Using specific results and namespaces can result in a remote code execution CRITICAL 9.8 N/A cvelistv5 2025-11-21
cve-2018-11759 mod_jk: connector path traversal due to mishandled HTTP requests in httpd HIGH 7.5 N/A cvelistv5 2026-06-28
cve-2018-11714 TP-Link tl-wr840n_firmware Session Fixation HIGH N/A N/A cvelistv5 2025-10-09