2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-4474 | HIGH | 7.5 | 1.7% | Oct 27, 2020 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, w... |
| CVE-2018-4467 | HIGH | 7.8 | 0.8% | Oct 27, 2020 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.3, Sec... |
| CVE-2018-4452 | HIGH | 7.8 | 1.2% | Oct 27, 2020 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.3, Sec... |
| CVE-2018-4451 | HIGH | 7.8 | 0.9% | Oct 27, 2020 | This issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved input validation. |
| CVE-2018-4428 | HIGH | 7.1 | 0.3% | Oct 27, 2020 | A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting opt... |
| CVE-2018-11764 | HIGH | 8.8 | 2.4% | Oct 21, 2020 | Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0. Authenticated users m... |
| CVE-2018-20243 | HIGH | 7.5 | 2.6% | Oct 13, 2020 | The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomratio... |
| CVE-2018-5354 | HIGH | 8.8 | 2.7% | Sep 30, 2020 | The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code an... |
| CVE-2018-11765 | HIGH | 7.5 | 5.2% | Sep 30, 2020 | In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets with... |
| CVE-2018-6448 | HIGH | 7.5 | 1.4% | Sep 25, 2020 | A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 could allow a ... |
| CVE-2018-10585 | HIGH | 7.5 | 1.4% | Sep 25, 2020 | Pexip Infinity before 18 allows remote Denial of Service (XML parsing). |
| CVE-2018-10432 | HIGH | 7.5 | 1.4% | Sep 25, 2020 | Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP). |
| CVE-2018-17145 | HIGH | 7.5 | 3.4% | Sep 10, 2020 | Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of m... |
| CVE-2018-13903 | HIGH | 8.1 | 0.6% | Sep 8, 2020 | u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, S... |
| CVE-2018-1501 | HIGH | 7.5 | 1.1% | Aug 26, 2020 | IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to missi... |
| CVE-2018-21036 | HIGH | 7.5 | 1.8% | Jul 21, 2020 | Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error ... |
| CVE-2018-12371 | HIGH | 8.8 | 1.4% | Jul 9, 2020 | An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at l... |
| CVE-2018-21264 | HIGH | 8.8 | 1.1% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. It did not enforce the expiration date of a... |
| CVE-2018-21263 | HIGH | 8.8 | 0.9% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. An attacker could authenticate to a differe... |
| CVE-2018-21262 | HIGH | 7.5 | 1.1% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service (application... |
| CVE-2018-21258 | HIGH | 7.5 | 1.2% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.1. It allows attackers to cause a denial of service via the invite... |
| CVE-2018-21248 | HIGH | 7.5 | 1.2% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of superfluous authentication creden... |
| CVE-2018-21247 | HIGH | 7.5 | 2.4% | Jun 17, 2020 | An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) i... |
| CVE-2018-21241 | HIGH | 7.8 | 0.8% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute r... |
| CVE-2018-21240 | HIGH | 7.5 | 1.0% | Jun 4, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfff... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now