2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-7359 | CRITICAL | 9 | 1.9% | Nov 16, 2018 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which... |
| CVE-2018-16850 | CRITICAL | 9.8 | 5.1% | Nov 13, 2018 | postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER .... |
| CVE-2018-15439 | CRITICAL | 9.8 | 49.7% | Nov 8, 2018 | A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass ... |
| CVE-2018-15394 | CRITICAL | 9.8 | 4.0% | Nov 8, 2018 | A vulnerability in the Stealthwatch Management Console (SMC) of Cisco Stealthwatch Enterprise could allow an unauthentic... |
| CVE-2018-15381 | CRITICAL | 9.8 | 87.3% | Nov 8, 2018 | A Java deserialization vulnerability in Cisco Unity Express (CUE) could allow an unauthenticated, remote attacker to exe... |
| CVE-2018-18590 | CRITICAL | 9.6 | 1.0% | Nov 7, 2018 | A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge conta... |
| CVE-2018-14667 | CRITICAL | 9.8 | 74.2% | Nov 6, 2018 | The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resou... |
| CVE-2018-18928 | CRITICAL | 9.8 | 2.8% | Nov 4, 2018 | International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toSc... |
| CVE-2018-15762 | CRITICAL | 9 | 1.1% | Nov 2, 2018 | Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.... |
| CVE-2018-3934 | CRITICAL | 9.8 | 2.6% | Nov 2, 2018 | An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.... |
| CVE-2018-17916 | CRITICAL | 9.8 | 3.7% | Nov 2, 2018 | InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to... |
| CVE-2018-17914 | CRITICAL | 9.8 | 4.6% | Nov 2, 2018 | InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to... |
| CVE-2018-16840 | CRITICAL | 9.8 | 3.3% | Oct 31, 2018 | A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy ... |
| CVE-2018-16462 | CRITICAL | 10 | 7.0% | Oct 30, 2018 | A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shel... |
| CVE-2018-14558 | CRITICAL | 9.8 | 8.7% | Oct 30, 2018 | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware throu... |
| CVE-2018-17903 | CRITICAL | 9.1 | 1.6% | Oct 24, 2018 | SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery. |
| CVE-2018-14816 | CRITICAL | 9.8 | 4.1% | Oct 23, 2018 | Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified,... |
| CVE-2018-4013 | CRITICAL | 9.8 | 9.7% | Oct 19, 2018 | An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server l... |
| CVE-2018-15758 | CRITICAL | 9.6 | 2.2% | Oct 18, 2018 | Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0... |
| CVE-2018-14807 | CRITICAL | 9.8 | 3.1% | Oct 18, 2018 | A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a an... |
| CVE-2018-1822 | CRITICAL | 9.8 | 3.4% | Oct 18, 2018 | IBM FlashSystem 900 product GUI allows a specially crafted attack to bypass the authentication requirements of the syste... |
| CVE-2018-15616 | CRITICAL | 9 | 3.3% | Oct 17, 2018 | A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perf... |
| CVE-2018-10824 | CRITICAL | 9.8 | 12.5% | Oct 17, 2018 | An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.... |
| CVE-2018-10933 | CRITICAL | 9.1 | 91.8% | Oct 17, 2018 | A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul... |
| CVE-2018-3183 | CRITICAL | 9 | 2.8% | Oct 17, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now