2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-7489 | CRITICAL | 9.8 | 19.8% | Feb 26, 2018 | FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote co... |
| CVE-2018-0015 | CRITICAL | 9.8 | 1.1% | Feb 22, 2018 | A malicious user with unrestricted access to the AppFormix application management platform may be able to access a Pytho... |
| CVE-2018-7318 | CRITICAL | 9.8 | 9.0% | Feb 22, 2018 | SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, descrip... |
| CVE-2018-7300 | CRITICAL | 9.8 | 31.8% | Feb 22, 2018 | Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic C... |
| CVE-2018-6487 | CRITICAL | 9.8 | 1.9% | Feb 20, 2018 | Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20,... |
| CVE-2018-5475 | CRITICAL | 9.8 | 3.9% | Feb 19, 2018 | A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 a... |
| CVE-2018-5473 | CRITICAL | 9.8 | 5.9% | Feb 19, 2018 | An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in GE D60 Line Distance ... |
| CVE-2018-6373 | CRITICAL | 9.8 | 2.0% | Feb 17, 2018 | SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action. |
| CVE-2018-5989 | CRITICAL | 9.8 | 2.7% | Feb 17, 2018 | SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber actio... |
| CVE-2018-5440 | CRITICAL | 9.8 | 3.1% | Feb 15, 2018 | A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (... |
| CVE-2018-6789 | CRITICAL | 9.8 | 82.2% | Feb 8, 2018 | An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted mes... |
| CVE-2018-6180 | CRITICAL | 9.8 | 4.0% | Feb 8, 2018 | A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password fo... |
| CVE-2018-0127 | CRITICAL | 9.8 | 77.8% | Feb 8, 2018 | A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VP... |
| CVE-2018-0125 | CRITICAL | 9.8 | 54.8% | Feb 8, 2018 | A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers ... |
| CVE-2018-5442 | CRITICAL | 9.8 | 3.8% | Feb 5, 2018 | A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buff... |
| CVE-2018-0101 | CRITICAL | 10 | 86.8% | Jan 29, 2018 | A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Softw... |
| CVE-2018-6363 | CRITICAL | 9.8 | 3.0% | Jan 29, 2018 | SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter. |
| CVE-2018-1000007 | CRITICAL | 9.8 | 8.0% | Jan 24, 2018 | libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom heade... |
| CVE-2018-4834 | CRITICAL | 9.8 | 3.4% | Jan 24, 2018 | A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All ve... |
| CVE-2018-5986 | CRITICAL | 9.8 | 2.6% | Jan 24, 2018 | SQL Injection exists in Easy Car Script 2014 via the s_order or s_row parameter to site_search.php. |
| CVE-2018-5703 | CRITICAL | 9.8 | 2.6% | Jan 16, 2018 | The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.14.11 allows attackers to cause a... |
| CVE-2018-0001 | CRITICAL | 9.8 | 6.3% | Jan 10, 2018 | A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older vers... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now