2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-18985 | — | — | 1.0% | Jan 29, 2019 | Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.... |
| CVE-2018-1733 | MEDIUM | 5.3 | 1.7% | Jan 29, 2019 | IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that has control-plane impl... |
| CVE-2018-16880 | HIGH | 7 | 0.6% | Jan 29, 2019 | A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under ... |
| CVE-2018-1668 | MEDIUM | 5.3 | 1.4% | Jan 29, 2019 | IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through ... |
| CVE-2018-10612 | — | — | 1.3% | Jan 29, 2019 | In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and co... |
| CVE-2018-19723 | — | — | 3.6% | Jan 28, 2019 | Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier... |
| CVE-2018-19721 | — | — | 2.6% | Jan 28, 2019 | Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier... |
| CVE-2018-19014 | — | — | 0.8% | Jan 28, 2019 | Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C... |
| CVE-2018-19010 | — | — | 0.8% | Jan 28, 2019 | Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C... |
| CVE-2018-19012 | — | — | 0.4% | Jan 28, 2019 | Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C... |
| CVE-2018-19015 | HIGH | 7.3 | 1.5% | Jan 28, 2019 | An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 a... |
| CVE-2018-19728 | — | — | 3.0% | Jan 28, 2019 | Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20... |
| CVE-2018-19727 | — | — | 1.9% | Jan 28, 2019 | Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Succe... |
| CVE-2018-19726 | — | — | 1.9% | Jan 28, 2019 | Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successf... |
| CVE-2018-19724 | — | — | 1.9% | Jan 28, 2019 | Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful ex... |
| CVE-2018-10910 | MEDIUM | 4.5 | 0.5% | Jan 28, 2019 | A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with... |
| CVE-2018-16889 | MEDIUM | 5.5 | 0.5% | Jan 28, 2019 | Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption ... |
| CVE-2018-20745 | — | — | 0.5% | Jan 28, 2019 | Yii 2.x through 2.0.15.1 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, whic... |
| CVE-2018-20744 | — | — | 0.7% | Jan 28, 2019 | The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary ... |
| CVE-2018-19023 | — | — | 0.8% | Jan 25, 2019 | Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can le... |
| CVE-2018-19021 | MEDIUM | 6.5 | 0.7% | Jan 25, 2019 | A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, ... |
| CVE-2018-19009 | HIGH | 7.8 | 0.2% | Jan 25, 2019 | Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system conta... |
| CVE-2018-16881 | HIGH | 7.5 | 2.2% | Jan 25, 2019 | A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted ... |
| CVE-2018-20743 | — | — | 3.6% | Jan 25, 2019 | murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the data... |
| CVE-2018-16098 | — | — | 0.4% | Jan 24, 2019 | In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now