2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-14667 | CRITICAL | 9.8 | 74.2% | Nov 6, 2018 | The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resou... |
| CVE-2018-15762 | CRITICAL | 9 | 1.1% | Nov 2, 2018 | Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.... |
| CVE-2018-3934 | CRITICAL | 9.8 | 2.6% | Nov 2, 2018 | An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.... |
| CVE-2018-17916 | CRITICAL | 9.8 | 3.7% | Nov 2, 2018 | InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to... |
| CVE-2018-17914 | CRITICAL | 9.8 | 4.6% | Nov 2, 2018 | InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to... |
| CVE-2018-16840 | CRITICAL | 9.8 | 3.3% | Oct 31, 2018 | A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy ... |
| CVE-2018-16462 | CRITICAL | 10 | 7.0% | Oct 30, 2018 | A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shel... |
| CVE-2018-14558 | CRITICAL | 9.8 | 8.7% | Oct 30, 2018 | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware throu... |
| CVE-2018-17903 | CRITICAL | 9.1 | 1.6% | Oct 24, 2018 | SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery. |
| CVE-2018-14816 | CRITICAL | 9.8 | 4.1% | Oct 23, 2018 | Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified,... |
| CVE-2018-4013 | CRITICAL | 9.8 | 9.7% | Oct 19, 2018 | An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server l... |
| CVE-2018-15758 | CRITICAL | 9.6 | 2.2% | Oct 18, 2018 | Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0... |
| CVE-2018-14807 | CRITICAL | 9.8 | 3.1% | Oct 18, 2018 | A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a an... |
| CVE-2018-1822 | CRITICAL | 9.8 | 3.4% | Oct 18, 2018 | IBM FlashSystem 900 product GUI allows a specially crafted attack to bypass the authentication requirements of the syste... |
| CVE-2018-15616 | CRITICAL | 9 | 3.3% | Oct 17, 2018 | A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perf... |
| CVE-2018-10824 | CRITICAL | 9.8 | 12.5% | Oct 17, 2018 | An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.... |
| CVE-2018-10933 | CRITICAL | 9.1 | 91.8% | Oct 17, 2018 | A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul... |
| CVE-2018-3183 | CRITICAL | 9 | 2.8% | Oct 17, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported... |
| CVE-2018-17890 | CRITICAL | 9.8 | 3.3% | Oct 12, 2018 | NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, w... |
| CVE-2018-9206 | CRITICAL | 9.8 | 97.1% | Oct 11, 2018 | Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0 |
| CVE-2018-12410 | CRITICAL | 9.8 | 4.0% | Oct 10, 2018 | The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may... |
| CVE-2018-0044 | CRITICAL | 9.8 | 1.3% | Oct 10, 2018 | An insecure SSHD configuration in Juniper Device Manager (JDM) and host OS on Juniper NFX Series devices may allow remot... |
| CVE-2018-17963 | CRITICAL | 9.8 | 4.8% | Oct 9, 2018 | qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause ... |
| CVE-2018-18084 | CRITICAL | 9.8 | 1.3% | Oct 9, 2018 | An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter... |
| CVE-2018-14649 | CRITICAL | 9.8 | 11.6% | Oct 9, 2018 | It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug she... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now