2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-11845 | — | — | 0.2% | Feb 25, 2019 | Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdra... |
| CVE-2018-11820 | — | — | 0.2% | Feb 25, 2019 | Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues i... |
| CVE-2018-11289 | — | — | 0.2% | Feb 25, 2019 | Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a bu... |
| CVE-2018-20033 | CRITICAL | 9.8 | 3.7% | Feb 25, 2019 | A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and e... |
| CVE-2018-20795 | — | — | 3.5% | Feb 25, 2019 | tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path p... |
| CVE-2018-20794 | — | — | 4.0% | Feb 25, 2019 | tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file (jpg/jpeg/png) via pat... |
| CVE-2018-20793 | — | — | 5.0% | Feb 25, 2019 | tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths[... |
| CVE-2018-20792 | — | — | 3.5% | Feb 25, 2019 | tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path pa... |
| CVE-2018-20791 | — | — | 0.8% | Feb 25, 2019 | tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mis... |
| CVE-2018-20790 | — | — | 3.6% | Feb 25, 2019 | tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0]... |
| CVE-2018-20789 | — | — | 3.6% | Feb 25, 2019 | tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a pat... |
| CVE-2018-20788 | — | — | 0.8% | Feb 25, 2019 | drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has sev... |
| CVE-2018-20787 | — | — | 0.8% | Feb 25, 2019 | The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has a... |
| CVE-2018-20786 | HIGH | 7.5 | 2.9% | Feb 24, 2019 | libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a ... |
| CVE-2018-20785 | — | — | 0.5% | Feb 23, 2019 | Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. During startup, the AM... |
| CVE-2018-18692 | — | — | 1.0% | Feb 23, 2019 | A reflected Cross-Site scripting (XSS) vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary ... |
| CVE-2018-20784 | CRITICAL | 9.8 | 4.2% | Feb 22, 2019 | In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denia... |
| CVE-2018-20783 | — | — | 5.7% | Feb 21, 2019 | In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR readin... |
| CVE-2018-2006 | MEDIUM | 4.9 | 2.5% | Feb 21, 2019 | IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the ... |
| CVE-2018-1950 | MEDIUM | 4.3 | 1.0% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message that ... |
| CVE-2018-1949 | MEDIUM | 4.3 | 1.0% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance discloses sensitive information ... |
| CVE-2018-1948 | MEDIUM | 4.3 | 1.1% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not set the secure attribut... |
| CVE-2018-1947 | MEDIUM | 6.1 | 0.9% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scri... |
| CVE-2018-1946 | MEDIUM | 5.9 | 0.7% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance supports interaction between mul... |
| CVE-2018-1945 | MEDIUM | 6.1 | 1.2% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance could allow a remote attacker to... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now