2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-5553 | CRITICAL | 9.8 | 2.5% | Jul 10, 2018 | The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and runn... |
| CVE-2018-13794 | CRITICAL | 9.8 | 1.5% | Jul 9, 2018 | A heap-based buffer overflow exists in stbi__bmp_load_cont in stb_image.h in catimg 2.4.0. |
| CVE-2018-1000620 | CRITICAL | 9.8 | 1.7% | Jul 9, 2018 | Eran Hammer cryptiles version 4.1.1 earlier contains a CWE-331: Insufficient Entropy vulnerability in randomDigits() met... |
| CVE-2018-1000613 | CRITICAL | 9.8 | 4.8% | Jul 9, 2018 | Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contain... |
| CVE-2018-13410 | CRITICAL | 9.8 | 4.0% | Jul 6, 2018 | Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (inva... |
| CVE-2018-11052 | CRITICAL | 9.8 | 4.2% | Jul 3, 2018 | Dell EMC ECS versions 3.2.0.0 and 3.2.0.1 contain an authentication bypass vulnerability. A remote unauthenticated attac... |
| CVE-2018-12465 | CRITICAL | 9.1 | 79.0% | Jun 29, 2018 | An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) ... |
| CVE-2018-12464 | CRITICAL | 10 | 80.5% | Jun 29, 2018 | A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gatewa... |
| CVE-2018-1457 | CRITICAL | 9.8 | 2.5% | Jun 27, 2018 | An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS a... |
| CVE-2018-12918 | CRITICAL | 9.8 | 1.4% | Jun 27, 2018 | In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcB_register_fields in bootstrap.c. |
| CVE-2018-5435 | CRITICAL | 9.6 | 3.2% | Jun 27, 2018 | The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analys... |
| CVE-2018-6667 | CRITICAL | 10 | 3.5% | Jun 26, 2018 | Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 a... |
| CVE-2018-1000544 | CRITICAL | 9.8 | 4.5% | Jun 26, 2018 | rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that c... |
| CVE-2018-1000533 | CRITICAL | 9.8 | 75.9% | Jun 26, 2018 | klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in ... |
| CVE-2018-1000517 | CRITICAL | 9.8 | 32.4% | Jun 26, 2018 | BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow... |
| CVE-2018-12714 | CRITICAL | 9.8 | 5.3% | Jun 24, 2018 | An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c cou... |
| CVE-2018-12713 | CRITICAL | 9.1 | 1.9% | Jun 24, 2018 | GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that alre... |
| CVE-2018-12640 | CRITICAL | 9.8 | 1.6% | Jun 23, 2018 | The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or us... |
| CVE-2018-11560 | CRITICAL | 9.8 | 1.6% | Jun 23, 2018 | The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Contro... |
| CVE-2018-12689 | CRITICAL | 9.8 | 1.8% | Jun 22, 2018 | phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd=login_form request, or a cra... |
| CVE-2018-12634 | CRITICAL | 9.8 | 57.7% | Jun 22, 2018 | CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/lo... |
| CVE-2018-6210 | CRITICAL | 9.8 | 3.1% | Jun 19, 2018 | D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which mak... |
| CVE-2018-9022 | CRITICAL | 9.8 | 20.4% | Jun 18, 2018 | An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exec... |
| CVE-2018-9021 | CRITICAL | 9.8 | 19.4% | Jun 18, 2018 | An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exec... |
| CVE-2018-1085 | CRITICAL | 9 | 2.2% | Jun 15, 2018 | openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes the SSL client certificat... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now