2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-17890 | CRITICAL | 9.8 | 3.3% | Oct 12, 2018 | NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, w... |
| CVE-2018-9206 | CRITICAL | 9.8 | 97.1% | Oct 11, 2018 | Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0 |
| CVE-2018-12410 | CRITICAL | 9.8 | 4.0% | Oct 10, 2018 | The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may... |
| CVE-2018-0044 | CRITICAL | 9.8 | 1.3% | Oct 10, 2018 | An insecure SSHD configuration in Juniper Device Manager (JDM) and host OS on Juniper NFX Series devices may allow remot... |
| CVE-2018-17963 | CRITICAL | 9.8 | 4.8% | Oct 9, 2018 | qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause ... |
| CVE-2018-18084 | CRITICAL | 9.8 | 1.3% | Oct 9, 2018 | An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter... |
| CVE-2018-14649 | CRITICAL | 9.8 | 11.6% | Oct 9, 2018 | It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug she... |
| CVE-2018-5402 | CRITICAL | 9.1 | 0.9% | Oct 8, 2018 | The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted p... |
| CVE-2018-5401 | CRITICAL | 9.1 | 0.9% | Oct 8, 2018 | The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in c... |
| CVE-2018-5400 | CRITICAL | 9.1 | 0.7% | Oct 8, 2018 | The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices with... |
| CVE-2018-5399 | CRITICAL | 9.4 | 2.1% | Oct 8, 2018 | The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 2... |
| CVE-2018-1000804 | CRITICAL | 9.8 | 6.3% | Oct 8, 2018 | contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query Language) database engine that can ... |
| CVE-2018-14818 | CRITICAL | 9.8 | 3.5% | Oct 8, 2018 | WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-b... |
| CVE-2018-15763 | CRITICAL | 9 | 1.0% | Oct 5, 2018 | Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS ... |
| CVE-2018-1264 | CRITICAL | 9.1 | 1.8% | Oct 5, 2018 | Cloud Foundry Log Cache, versions prior to 1.1.1, logs its UAA client secret on startup as part of its envstruct report.... |
| CVE-2018-15387 | CRITICAL | 9.8 | 1.1% | Oct 5, 2018 | A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate valid... |
| CVE-2018-15386 | CRITICAL | 9.8 | 3.4% | Oct 5, 2018 | A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to by... |
| CVE-2018-0448 | CRITICAL | 9.8 | 2.1% | Oct 5, 2018 | A vulnerability in the identity management service of Cisco Digital Network Architecture (DNA) Center could allow an una... |
| CVE-2018-12470 | CRITICAL | 9.8 | 2.0% | Oct 4, 2018 | A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary S... |
| CVE-2018-17825 | CRITICAL | 9.8 | 2.3% | Oct 1, 2018 | An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cp... |
| CVE-2018-15764 | CRITICAL | 9.8 | 5.3% | Sep 28, 2018 | Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper config... |
| CVE-2018-16659 | CRITICAL | 9.8 | 2.7% | Sep 28, 2018 | An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked q... |
| CVE-2018-17410 | CRITICAL | 9.8 | 1.7% | Sep 26, 2018 | Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI. |
| CVE-2018-14823 | CRITICAL | 9.8 | 3.9% | Sep 26, 2018 | Fuji Electric V-Server 4.0.3.0 and prior, A stack-based buffer overflow vulnerability has been identified, which may all... |
| CVE-2018-14813 | CRITICAL | 9.8 | 3.9% | Sep 26, 2018 | Fuji Electric V-Server 4.0.3.0 and prior, A heap-based buffer overflow vulnerability has been identified, which may allo... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now