2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-10682 | CRITICAL | 9.8 | 8.2% | May 9, 2018 | An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TC... |
| CVE-2018-10771 | CRITICAL | 9.8 | 3.1% | May 7, 2018 | Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cau... |
| CVE-2018-10753 | CRITICAL | 9.8 | 2.7% | May 5, 2018 | Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers... |
| CVE-2018-8865 | CRITICAL | 9.8 | 5.9% | May 4, 2018 | In Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been identified which may allow remot... |
| CVE-2018-10562 | CRITICAL | 9.8 | 100.0% | May 4, 2018 | An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_ac... |
| CVE-2018-10561 | CRITICAL | 9.8 | 93.3% | May 4, 2018 | An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images... |
| CVE-2018-2628 | CRITICAL | 9.8 | 99.4% | Apr 19, 2018 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S... |
| CVE-2018-10191 | CRITICAL | 9.8 | 2.6% | Apr 17, 2018 | In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_G... |
| CVE-2018-0016 | CRITICAL | 9.8 | 4.2% | Apr 11, 2018 | Receipt of a specially crafted Connectionless Network Protocol (CLNP) datagram destined to an interface of a Junos OS de... |
| CVE-2018-1275 | CRITICAL | 9.8 | 57.6% | Apr 11, 2018 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow app... |
| CVE-2018-1273 | CRITICAL | 9.8 | 95.6% | Apr 11, 2018 | Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property... |
| CVE-2018-9852 | CRITICAL | 9.8 | 1.4% | Apr 8, 2018 | In Gxlcms QY v1.0.0713, Lib\Lib\Action\Home\HitsAction.class.php allows remote attackers to read data from a database by... |
| CVE-2018-1270 | CRITICAL | 9.8 | 77.5% | Apr 6, 2018 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow app... |
| CVE-2018-9309 | CRITICAL | 9.8 | 1.9% | Apr 5, 2018 | An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dl_sendsms.php request. |
| CVE-2018-9284 | CRITICAL | 9.8 | 4.7% | Apr 4, 2018 | authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers... |
| CVE-2018-1469 | CRITICAL | 9.8 | 2.8% | Apr 4, 2018 | IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system comma... |
| CVE-2018-3822 | CRITICAL | 9.8 | 1.6% | Mar 30, 2018 | X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML canonic... |
| CVE-2018-4841 | CRITICAL | 9.8 | 4.9% | Mar 29, 2018 | A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port... |
| CVE-2018-7600 | CRITICAL | 9.8 | 100.0% | Mar 29, 2018 | Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi... |
| CVE-2018-0171 | CRITICAL | 9.8 | 99.5% | Mar 28, 2018 | A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentica... |
| CVE-2018-0151 | CRITICAL | 9.8 | 14.2% | Mar 28, 2018 | A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an... |
| CVE-2018-0150 | CRITICAL | 9.8 | 4.3% | Mar 28, 2018 | A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running a... |
| CVE-2018-9110 | CRITICAL | 9.1 | 2.9% | Mar 28, 2018 | Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function... |
| CVE-2018-9109 | CRITICAL | 9.1 | 3.0% | Mar 28, 2018 | Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function... |
| CVE-2018-9032 | CRITICAL | 9.8 | 28.8% | Mar 27, 2018 | An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Versi... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now