Skip to content
BackEsc
Sign in

No weakness recorded · 2018

No weakness recorded: 2018

1,866 CVEs · 11 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE whose record names no weakness (CWE), published in 2018. The named ones are the most at risk.

exploited in the wild
11
check available
8
likely to be exploited
155

Every one of the 1,866 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Apache Struts2 S2-057 - Remote Code ExecutionCVE-2018-11776Apache Software Foundation · CVSS 8.1 · 100% likely

    Apache

  2. ThinkPHP 5.0.23 - Remote Code ExecutionCVE-2018-20062ThinkPHP · CVSS 9.8 · 100% likely

    ThinkPHP

  3. PRTG Network Monitor - Local File InclusionCVE-2018-19410Paessler · CVSS 9.8 · 98% likely

    Paessler

  4. Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.CVE-2018-17463Google · CVSS 8.8 · 85% likely

    Google

  5. An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability."…CVE-2018-8453Microsoft · CVSS 7.8 · 70% likely

    Microsoft

  6. An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange…CVE-2018-8581Microsoft · CVSS 7.4 · 28% likely

    Microsoft

  7. An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerabilit…CVE-2018-8440Microsoft · CVSS 7.8 · 19% likely

    Microsoft

  8. The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functional…CVE-2018-19323GIGABYTE · CVSS 9.8 · 8.4% likely

    GIGABYTE

  9. The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memc…CVE-2018-19320GIGABYTE · CVSS 7.8 · 4.6% likely

    GIGABYTE

  10. The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expos…CVE-2018-19321GIGABYTE · CVSS 7.8 · 3.7% likely

    GIGABYTE

  11. An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows…CVE-2018-8589Microsoft · CVSS 7.8 · 3.0% likely

    Microsoft

  12. HPE Integrated Lights-out 4 (ILO4) <2.53 - Authentication BypassCVE-2017-12542Hewlett Packard Enterprise · 99% likely

    Hewlett Packard Enterprise

  13. Apache Tika < 1.1.8 - Header Command InjectionCVE-2018-1335Apache Software Foundation · 94% likely

    Apache

  14. TBK DVR4104/DVR4216 Devices - Authentication BypassCVE-2018-999582% likely
  15. Oracle WebLogic Server - Remote Code ExecutionCVE-2018-2893Oracle Corporation · 70% likely

    Oracle

  16. Oracle WebLogic Server - Remote Code ExecutionCVE-2018-2894Oracle Corporation · 50% likely

    Oracle

  17. Oracle Fusion Middleware WebCenter Sites - Cross-Site ScriptingCVE-2018-2791Oracle Corporation · 38% likely

    Oracle

  18. Oracle E-Business Suite - Blind SSRFCVE-2018-3167Oracle Corporation · 16% likely

    Oracle

  19. Oracle Fusion Middleware WebCenter Sites 11.1.1.8.0 - Cross-Site ScriptingCVE-2018-3238Oracle Corporation · 4.6% likely

    Oracle

  20. An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers a…CVE-2018-1650992% likely
  21. Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.CVE-2018-15708Nagios · 89% likely

    Nagios

  22. An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication f…CVE-2018-599988% likely
  23. A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers…CVE-2018-199900287% likely
  24. An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.CVE-2018-1066186% likely
  25. A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be ex…CVE-2017-2741HP Inc. · 82% likely

    HP

  26. An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.CVE-2018-1066279% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in