2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-3904 | CRITICAL | 9.9 | 1.8% | Aug 27, 2018 | An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsun... |
| CVE-2018-11653 | CRITICAL | 9.8 | 2.1% | Aug 24, 2018 | Information disclosure in Netwave IP camera at //etc/RT2870STA.dat (via HTTP on port 8000) allows an unauthenticated att... |
| CVE-2018-3786 | CRITICAL | 9.8 | 12.3% | Aug 24, 2018 | A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously ... |
| CVE-2018-14599 | CRITICAL | 9.8 | 5.0% | Aug 24, 2018 | An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-on... |
| CVE-2018-11061 | CRITICAL | 9.1 | 5.0% | Aug 24, 2018 | RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to... |
| CVE-2018-1722 | CRITICAL | 10 | 9.0% | Aug 24, 2018 | IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control... |
| CVE-2018-3907 | CRITICAL | 10 | 1.4% | Aug 24, 2018 | An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ET... |
| CVE-2018-3880 | CRITICAL | 9.9 | 1.2% | Aug 23, 2018 | An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of vide... |
| CVE-2018-3872 | CRITICAL | 9.9 | 1.8% | Aug 23, 2018 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm... |
| CVE-2018-3866 | CRITICAL | 9.9 | 1.5% | Aug 23, 2018 | An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsun... |
| CVE-2018-3856 | CRITICAL | 9.9 | 3.4% | Aug 23, 2018 | An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 -... |
| CVE-2018-3919 | CRITICAL | 9.9 | 0.9% | Aug 23, 2018 | An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP... |
| CVE-2018-3917 | CRITICAL | 9.9 | 0.9% | Aug 23, 2018 | On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts... |
| CVE-2018-3905 | CRITICAL | 9.9 | 1.5% | Aug 23, 2018 | An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsun... |
| CVE-2018-3903 | CRITICAL | 9.9 | 1.8% | Aug 23, 2018 | On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extract... |
| CVE-2018-3902 | CRITICAL | 9.9 | 1.8% | Aug 23, 2018 | An exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP server of Samsu... |
| CVE-2018-3878 | CRITICAL | 9.9 | 1.5% | Aug 23, 2018 | Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Sam... |
| CVE-2018-3867 | CRITICAL | 9.9 | 2.0% | Aug 23, 2018 | An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-co... |
| CVE-2018-3863 | CRITICAL | 9.9 | 1.7% | Aug 23, 2018 | On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extract... |
| CVE-2018-3832 | CRITICAL | 9 | 1.7% | Aug 23, 2018 | An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows... |
| CVE-2018-6692 | CRITICAL | 10 | 3.7% | Aug 21, 2018 | Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers t... |
| CVE-2018-1000639 | CRITICAL | 9.6 | 1.6% | Aug 20, 2018 | LatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing functionality that can result ... |
| CVE-2018-3785 | CRITICAL | 9.8 | 4.0% | Aug 17, 2018 | A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter. |
| CVE-2018-3784 | CRITICAL | 9.8 | 3.3% | Aug 17, 2018 | A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserial... |
| CVE-2018-10511 | CRITICAL | 10 | 2.7% | Aug 15, 2018 | A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to conduct a server-side r... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now