2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-8273 | CRITICAL | 9.8 | 29.2% | Aug 15, 2018 | A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected... |
| CVE-2018-15152 | CRITICAL | 9.1 | 25.9% | Aug 15, 2018 | Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote... |
| CVE-2018-3938 | CRITICAL | 9.1 | 3.3% | Aug 14, 2018 | An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPEL... |
| CVE-2018-3937 | CRITICAL | 9.1 | 9.6% | Aug 14, 2018 | An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series... |
| CVE-2018-10931 | CRITICAL | 9.8 | 67.9% | Aug 9, 2018 | It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unaut... |
| CVE-2018-14933 | CRITICAL | 9.8 | 93.7% | Aug 4, 2018 | upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir par... |
| CVE-2018-9866 | CRITICAL | 9.8 | 4.5% | Aug 3, 2018 | A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management S... |
| CVE-2018-3777 | CRITICAL | 9.8 | 1.5% | Aug 3, 2018 | Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API r... |
| CVE-2018-14847 | CRITICAL | 9.1 | 96.1% | Aug 2, 2018 | MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated ... |
| CVE-2018-3881 | CRITICAL | 9.4 | 1.2% | Aug 1, 2018 | An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticate... |
| CVE-2018-12468 | CRITICAL | 9.1 | 2.2% | Aug 1, 2018 | A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attack... |
| CVE-2018-8859 | CRITICAL | 9.8 | 1.6% | Jul 24, 2018 | Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.... |
| CVE-2018-8855 | CRITICAL | 9.8 | 0.8% | Jul 24, 2018 | Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.... |
| CVE-2018-8851 | CRITICAL | 9.8 | 1.3% | Jul 24, 2018 | Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.... |
| CVE-2018-10627 | CRITICAL | 9.8 | 1.2% | Jul 24, 2018 | Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.... |
| CVE-2018-1999019 | CRITICAL | 9.8 | 3.4% | Jul 23, 2018 | Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint loca... |
| CVE-2018-6678 | CRITICAL | 9.1 | 1.2% | Jul 23, 2018 | Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8... |
| CVE-2018-6677 | CRITICAL | 9.1 | 2.1% | Jul 23, 2018 | Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows au... |
| CVE-2018-10870 | CRITICAL | 9.8 | 6.2% | Jul 19, 2018 | redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use t... |
| CVE-2018-10620 | CRITICAL | 9.8 | 4.3% | Jul 19, 2018 | AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could ... |
| CVE-2018-7602 | CRITICAL | 9.8 | 99.2% | Jul 19, 2018 | A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows a... |
| CVE-2018-0349 | CRITICAL | 9.8 | 3.0% | Jul 18, 2018 | A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files ... |
| CVE-2018-2938 | CRITICAL | 9 | 1.9% | Jul 18, 2018 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected a... |
| CVE-2018-14362 | CRITICAL | 9.8 | 3.7% | Jul 17, 2018 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may h... |
| CVE-2018-14361 | CRITICAL | 9.8 | 2.5% | Jul 17, 2018 | An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data. |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now