| Critical |
3 Jul 2018 |
3 Jun 2026 |
CPAI-2023-3948 |
|
CVE-2013-6720
CVE-2018-12809
CVE-2019-25065
CVE-2020-15320
CVE-2020-26728
CVE-2020-8958
CVE-2022-2487
CVE-2022-30105
CVE-2022-43973
CVE-2022-45699
CVE-2023-2573
CVE-2023-2574
CVE-2023-31729
CVE-2023-47565 |
Command Injection Over HTTP Payload (CVE-2013-6720; CVE-2018-12809; CVE-2019-25065; CVE-2020-15320; CVE-2020-26728; CVE-2020-8958; CVE-2022-2487; CVE-2022-30105; CVE-2022-43973; CVE-2022-45699; CVE-2023-2573; CVE-2023-2574; CVE-2023-47565) |
| High |
1 Jul 2018 |
5 Apr 2026 |
CPAI-2025-13025 |
|
CVE-2018-0296
CVE-2025-20362 |
Cisco Multiple Products Authentication Bypass (CVE-2018-0296; CVE-2025-20362) |
| Critical |
29 Mar 2018 |
26 Feb 2026 |
CPAI-2026-1030 |
|
|
Suspicious Exploit Kit Website Redirection |
| Critical |
29 Mar 2018 |
9 Feb 2026 |
CPAI-2018-0188 |
|
|
Suspicious Exploit Kit Website Redirection |
| High |
2 Oct 2018 |
9 Feb 2026 |
CPAI-2018-0985 |
|
CVE-2018-16946 |
LG Smart IP Camera Authentication Bypass (CVE-2018-16946) |
| Medium |
5 Jul 2018 |
9 Feb 2026 |
CPAI-2018-0571 |
|
|
Multiple Browsers Download Bomb Trick |
| Medium |
8 Jan 2018 |
9 Feb 2026 |
CPAI-2018-0020 |
Metasploit |
|
OrientDB Server Remote Code Execution |
| Critical |
1 Jul 2018 |
26 Jan 2026 |
CPAI-2025-2374 |
|
CVE-2018-0296
CVE-2025-20362 |
Cisco Multiple Products Authentication Bypass (CVE-2018-0296; CVE-2025-20362) |
| High |
31 Dec 2018 |
20 Jan 2026 |
CPAI-2019-0017 |
|
CVE-2018-4233 |
Apple WebKit Memory Corruption (CVE-2018-4233) |
| High |
7 Oct 2018 |
20 Jan 2026 |
CPAI-2018-1009 |
|
CVE-2018-16076 |
Google PDFium Out-of-bounds read (CVE-2018-16076) |
| High |
30 Jul 2018 |
20 Jan 2026 |
CPAI-2018-0768 |
Project zero |
CVE-2018-4222 |
Apple WebKit Out Of Bounds Read (CVE-2018-4222) |
| High |
25 Jul 2018 |
20 Jan 2026 |
CPAI-2018-0767 |
Project zero |
CVE-2018-4218 |
Apple WebKit Use-after-free (CVE-2018-4218) |
| Critical |
19 Jun 2018 |
1 Jan 2026 |
CPAI-2018-0558 |
|
CVE-2018-10658
CVE-2018-10659
CVE-2018-10660
CVE-2018-10661
CVE-2018-10662
CVE-2018-10663
CVE-2018-10664 |
VDOO Axis Camera Authentication Bypass (CVE-2018-10658; CVE-2018-10659; CVE-2018-10660; CVE-2018-10661; CVE-2018-10662; CVE-2018-10663; CVE-2018-10664) |
| High |
10 Oct 2018 |
25 Dec 2025 |
CPAI-2018-1025 |
Project zero |
CVE-2018-16083 |
WebRTC FEC Out Of Bounds Read (CVE-2018-16083) |
| High |
10 Oct 2018 |
25 Dec 2025 |
CPAI-2018-1024 |
Project zero |
CVE-2018-16071 |
WebRTC Use After Free Code Execution (CVE-2018-16071) |
| High |
9 Jul 2018 |
25 Dec 2025 |
CPAI-2018-0697 |
|
CVE-2018-11311 |
mySCADA myPRO 7 Authentication Bypass (CVE-2018-11311) |
| High |
21 Jun 2018 |
25 Dec 2025 |
CPAI-2018-0552 |
|
CVE-2018-8235 |
Multiple Web Browsers Security Feature Bypass Information Disclosure (CVE-2018-8235) |
| Critical |
25 Jan 2018 |
25 Dec 2025 |
CPAI-2018-0043 |
|
CVE-2018-1000006 |
Electron Protocol Handler Remote Code Execution (CVE-2018-1000006) |
| Critical |
29 May 2018 |
14 Dec 2025 |
CPAI-2018-0496 |
|
CVE-2016-20017 |
D-Link DSL-2750B Command Injection (CVE-2016-20017) |
| Critical |
3 Oct 2018 |
11 Dec 2025 |
CPAI-2018-0988 |
|
CVE-2015-2051
CVE-2019-10891
CVE-2022-37056
CVE-2024-33112 |
D-Link Multiple Products Remote Code Execution (CVE-2015-2051; CVE-2019-10891; CVE-2022-37056; CVE-2024-33112) |
| Critical |
12 Apr 2018 |
4 Dec 2025 |
CPAI-2018-3183 |
|
CVE-2018-1270
CVE-2018-1275 |
VMware Spring Framework Remote Code Execution (CVE-2018-1270; CVE-2018-1275) |
| Critical |
29 Mar 2018 |
3 Dec 2025 |
CPAI-2018-0192 |
|
CVE-2018-7600 |
Drupal Core Remote Code Execution (CVE-2018-7600) |
| High |
17 Dec 2018 |
16 Oct 2025 |
CPAI-2025-2711 |
|
|
Magellan SQLite SQL Injection |
| High |
12 Jul 2018 |
8 Oct 2025 |
CPAI-2018-3004 |
Project zero |
CVE-2018-8145 |
Microsoft Multiple Products Buffer Overflow (CVE-2018-8145) |
| Critical |
15 Feb 2018 |
5 Oct 2025 |
CPAI-2017-1991 |
|
CVE-2017-1000353 |
Jenkins CI Unauthenticated Remote Code Execution (CVE-2017-1000353) |
| Critical |
15 Feb 2018 |
5 Oct 2025 |
CPAI-2017-1993 |
|
CVE-2017-1000353 |
Jenkins CI Unauthenticated Remote Code Execution (CVE-2017-1000353) |
| Critical |
3 Jul 2018 |
17 Sep 2025 |
CPAI-2023-2287 |
|
CVE-2013-6720
CVE-2018-12809
CVE-2019-25065
CVE-2020-15320
CVE-2020-26728
CVE-2020-8958
CVE-2022-2487
CVE-2022-30105
CVE-2022-43973
CVE-2022-45699
CVE-2023-2573
CVE-2023-2574
CVE-2023-47565 |
Command Injection Over HTTP Payload (CVE-2013-6720; CVE-2018-12809; CVE-2019-25065; CVE-2020-15320; CVE-2020-26728; CVE-2020-8958; CVE-2022-2487; CVE-2022-30105; CVE-2022-43973; CVE-2022-45699; CVE-2023-2573; CVE-2023-2574; CVE-2023-47565) |
| Critical |
3 Jul 2018 |
27 Aug 2025 |
CPAI-2004-0240 |
|
CVE-2004-0899
CVE-2004-0900 |
Microsoft Windows NT Denial of Service (CVE-2004-0899; CVE-2004-0900) |
| Critical |
27 Sep 2018 |
14 Aug 2025 |
CPAI-2018-0983 |
|
CVE-2018-9866 |
SonicWall Global Management System Remote Code Execution (CVE-2018-9866) |
| High |
23 Aug 2018 |
14 Aug 2025 |
CPAI-2018-0849 |
|
CVE-2018-11776 |
Apache Struts Remote Code Execution (CVE-2018-11776) |
| Critical |
24 Jul 2018 |
14 Aug 2025 |
CPAI-2018-0769 |
|
CVE-2018-2894 |
Oracle WebLogic WLS Server Component Arbitrary File Upload (CVE-2018-2894) |
| High |
25 Jun 2018 |
14 Aug 2025 |
CPAI-2018-0553 |
|
CVE-2018-12254 |
Joomla Ek Rishta Component SQL Injection (CVE-2018-12254) |
| Critical |
26 Apr 2018 |
14 Aug 2025 |
CPAI-2018-0355 |
|
CVE-2018-7602 |
Drupal Remote Code Execution (CVE-2018-7602) |
| Critical |
22 Apr 2018 |
14 Aug 2025 |
CPAI-2018-0337 |
|
CVE-2018-2628
CVE-2018-2893 |
Oracle WebLogic WLS Core Component Remote Code Execution (CVE-2018-2628; CVE-2018-2893) |
| Critical |
29 Mar 2018 |
6 Aug 2025 |
CPAI-2018-0189 |
|
|
Cobalt Strike Beacon Suspicious Communication |
| Critical |
23 Jan 2018 |
14 Jul 2025 |
CPAI-2018-0132 |
|
CVE-2009-2765
CVE-2025-5441
CVE-2025-5442 |
Multiple IoT Command Injection (CVE-2009-2765; CVE-2025-5441; CVE-2025-5442) |
| High |
22 Nov 2018 |
27 Jun 2025 |
CPAI-2018-1299 |
|
CVE-2017-6343 |
Dahuasecurity Smartpss Firmware Authentication Bypass (CVE-2017-6343) |
| Critical |
17 Apr 2018 |
27 Jun 2025 |
CPAI-2018-0323 |
|
CVE-2018-1273 |
Pivotal Spring Commons Remote Code Execution (CVE-2018-1273) |
| Critical |
9 Dec 2018 |
26 Jun 2025 |
CPAI-2018-1274 |
|
CVE-2018-1002105 |
Kubernetes API server Authentication Bypass (CVE-2018-1002105) |
| Critical |
8 Oct 2018 |
26 Jun 2025 |
CPAI-2018-1017 |
|
CVE-2018-1156 |
MikroTik RouterOS Buffer Overflow (CVE-2018-1156) |
| High |
2 Oct 2018 |
26 Jun 2025 |
CPAI-2018-2929 |
|
CVE-2018-12015 |
Perl Archive Tar Arbitrary File Overwrite (CVE-2018-12015) |
| High |
15 Aug 2018 |
26 Jun 2025 |
CPAI-2018-0845 |
|
CVE-2013-2618 |
Network Weathermap Persistent Cross-Site Scripting (CVE-2013-2618) |
| Critical |
31 Jul 2018 |
26 Jun 2025 |
CPAI-2018-0802 |
|
CVE-2009-3364
CVE-2017-6465
CVE-2018-7573 |
FTPShell Client Buffer Overflow (CVE-2009-3364; CVE-2017-6465; CVE-2018-7573) |
| High |
9 Jul 2018 |
26 Jun 2025 |
CPAI-2018-0696 |
|
CVE-2018-1000094 |
CMS Made Simple File Manager Remote Code Execution (CVE-2018-1000094) |
| Critical |
25 Jun 2018 |
26 Jun 2025 |
CPAI-2018-0738 |
|
CVE-2012-5960 |
Portable SDK for UPnP Root Device Buffer Overflow - Ver2 (CVE-2012-5960) |
| Medium |
30 May 2018 |
26 Jun 2025 |
CPAI-2017-1964 |
Quagga |
CVE-2017-16227 |
Quagga aspath_put BGP Session Drop Denial of Service (CVE-2017-16227) |
| Critical |
27 May 2018 |
26 Jun 2025 |
CPAI-2018-0488 |
|
CVE-2013-0143 |
QNAP QTS Remote Command Injection (CVE-2013-0143) |
| Medium |
14 May 2018 |
26 Jun 2025 |
CPAI-2018-0486 |
|
CVE-2018-9846 |
Roundcube Webmail archive.php IMAP Command Injection (CVE-2018-9846) |
| Medium |
14 May 2018 |
26 Jun 2025 |
CPAI-2018-0502 |
|
CVE-2017-14919 |
Node.js Foundation Node.js zlib windowBits Denial of Service (CVE-2017-14919) |
| Critical |
13 May 2018 |
26 Jun 2025 |
CPAI-2018-0458 |
|
CVE-2018-10562 |
Dasan GPON Router Remote Command Injection (CVE-2018-10562) |