2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-25023 | HIGH | 7.5 | 1.4% | Dec 27, 2021 | An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, ... |
| CVE-2018-4302 | HIGH | 7.8 | 0.9% | Dec 23, 2021 | A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iClou... |
| CVE-2018-25021 | HIGH | 7.5 | 2.3% | Dec 13, 2021 | The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows... |
| CVE-2018-25020 | HIGH | 7.8 | 0.5% | Dec 8, 2021 | The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence wh... |
| CVE-2018-6122 | HIGH | 8.8 | 0.7% | Nov 2, 2021 | Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker to potentially exploit h... |
| CVE-2018-25019 | HIGH | 7.5 | 1.5% | Nov 1, 2021 | The LearnDash LMS WordPress plugin before 2.5.4 does not have any authorisation and validation of the file to be uploade... |
| CVE-2018-16060 | HIGH | 7.5 | 19.6% | Oct 15, 2021 | Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listi... |
| CVE-2018-10790 | HIGH | 7.5 | 1.5% | Aug 25, 2021 | The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service (a... |
| CVE-2018-25018 | HIGH | 7.8 | 1.3% | Jul 1, 2021 | UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from ... |
| CVE-2018-25015 | HIGH | 7.8 | 0.6% | Jun 7, 2021 | An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lo... |
| CVE-2018-10195 | HIGH | 7.1 | 0.4% | Jun 2, 2021 | lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the funct... |
| CVE-2018-16497 | HIGH | 7.8 | 0.2% | May 26, 2021 | In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on the... |
| CVE-2018-16495 | HIGH | 8.8 | 0.9% | May 26, 2021 | In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not change... |
| CVE-2018-16494 | HIGH | 8.8 | 1.9% | May 26, 2021 | In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through in... |
| CVE-2018-10868 | HIGH | 7.5 | 1.1% | May 26, 2021 | redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allo... |
| CVE-2018-10865 | HIGH | 7.5 | 1.0% | May 26, 2021 | It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it ... |
| CVE-2018-10863 | HIGH | 7.5 | 1.1% | May 26, 2021 | It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /... |
| CVE-2018-1110 | HIGH | 7.5 | 1.1% | Mar 30, 2021 | A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service. |
| CVE-2018-9333 | HIGH | 7.8 | 0.4% | Jan 11, 2021 | K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code... |
| CVE-2018-9332 | HIGH | 7.8 | 0.3% | Jan 11, 2021 | K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Incorrect Access Control. The impact is: gain privil... |
| CVE-2018-8726 | HIGH | 7.8 | 0.5% | Jan 11, 2021 | K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code... |
| CVE-2018-8725 | HIGH | 7.8 | 0.5% | Jan 11, 2021 | K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Buffer Overflow. The impact is: execute arbitrary co... |
| CVE-2018-8724 | HIGH | 7.8 | 0.3% | Jan 11, 2021 | K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: gain privileg... |
| CVE-2018-8044 | HIGH | 7.8 | 0.3% | Jan 11, 2021 | K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: Local Process... |
| CVE-2018-11246 | HIGH | 7.5 | 1.1% | Jan 11, 2021 | K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak. |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now