2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-11574 | CRITICAL | 9.8 | 1.9% | Jun 14, 2018 | Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a c... |
| CVE-2018-2424 | CRITICAL | 9.8 | 2.4% | Jun 12, 2018 | SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided Java... |
| CVE-2018-0315 | CRITICAL | 9.8 | 8.1% | Jun 7, 2018 | A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software co... |
| CVE-2018-11743 | CRITICAL | 9.8 | 2.2% | Jun 5, 2018 | The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attack... |
| CVE-2018-11682 | CRITICAL | 9.8 | 4.3% | Jun 2, 2018 | Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a ... |
| CVE-2018-11681 | CRITICAL | 9.8 | 4.3% | Jun 2, 2018 | Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of... |
| CVE-2018-3757 | CRITICAL | 9.8 | 4.6% | Jun 1, 2018 | Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter. |
| CVE-2018-3746 | CRITICAL | 9.8 | 4.9% | Jun 1, 2018 | The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbi... |
| CVE-2018-11138 | CRITICAL | 9.8 | 91.8% | May 31, 2018 | The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by... |
| CVE-2018-11544 | CRITICAL | 9.8 | 1.5% | May 29, 2018 | The Olive Tree Ftp Server application 1.32 for Android has Insecure Data Storage because a username and password are sto... |
| CVE-2018-3745 | CRITICAL | 9.1 | 2.2% | May 29, 2018 | atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below. |
| CVE-2018-3744 | CRITICAL | 9.8 | 2.3% | May 29, 2018 | The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the s... |
| CVE-2018-8871 | CRITICAL | 9.8 | 3.9% | May 25, 2018 | In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based bu... |
| CVE-2018-1000301 | CRITICAL | 9.1 | 6.0% | May 24, 2018 | curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of se... |
| CVE-2018-9019 | CRITICAL | 9.8 | 4.0% | May 22, 2018 | SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands v... |
| CVE-2018-4939 | CRITICAL | 9.8 | 63.3% | May 19, 2018 | Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deseria... |
| CVE-2018-4918 | CRITICAL | 9.8 | 12.2% | May 19, 2018 | Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier hav... |
| CVE-2018-4917 | CRITICAL | 9.8 | 17.8% | May 19, 2018 | Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier hav... |
| CVE-2018-8014 | CRITICAL | 9.8 | 21.3% | May 16, 2018 | The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0... |
| CVE-2018-10759 | CRITICAL | 9.8 | 1.9% | May 16, 2018 | PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attack... |
| CVE-2018-8845 | CRITICAL | 9.8 | 5.8% | May 15, 2018 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versio... |
| CVE-2018-7499 | CRITICAL | 9.8 | 3.8% | May 15, 2018 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versio... |
| CVE-2018-11091 | CRITICAL | 9.9 | 3.7% | May 14, 2018 | An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. I... |
| CVE-2018-1115 | CRITICAL | 9.1 | 3.9% | May 10, 2018 | postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() func... |
| CVE-2018-10683 | CRITICAL | 9.8 | 1.8% | May 9, 2018 | An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm referenc... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now