2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1622 | MEDIUM | 4.3 | 0.5% | Apr 2, 2019 | IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery which could... |
| CVE-2018-3979 | MEDIUM | 6.5 | 1.4% | Apr 1, 2019 | A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display... |
| CVE-2018-13299 | MEDIUM | 4.3 | 1.4% | Apr 1, 2019 | Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authen... |
| CVE-2018-13298 | MEDIUM | 4.2 | 0.9% | Apr 1, 2019 | Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man... |
| CVE-2018-13297 | MEDIUM | 5.3 | 1.5% | Apr 1, 2019 | Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attack... |
| CVE-2018-13295 | MEDIUM | 4.3 | 1.3% | Apr 1, 2019 | Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 a... |
| CVE-2018-13294 | MEDIUM | 4.3 | 1.3% | Apr 1, 2019 | Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows rem... |
| CVE-2018-13293 | MEDIUM | 5.9 | 0.8% | Apr 1, 2019 | Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.... |
| CVE-2018-13292 | MEDIUM | 4.3 | 1.3% | Apr 1, 2019 | Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 allo... |
| CVE-2018-13291 | MEDIUM | 4.3 | 1.2% | Apr 1, 2019 | Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824 ... |
| CVE-2018-13290 | MEDIUM | 4.3 | 1.3% | Apr 1, 2019 | Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote a... |
| CVE-2018-13289 | MEDIUM | 5.3 | 1.6% | Apr 1, 2019 | Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allow... |
| CVE-2018-13288 | MEDIUM | 5.3 | 1.5% | Apr 1, 2019 | Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.... |
| CVE-2018-13287 | MEDIUM | 6.5 | 1.3% | Apr 1, 2019 | Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allows... |
| CVE-2018-13286 | MEDIUM | 6.5 | 1.3% | Apr 1, 2019 | Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 al... |
| CVE-2018-19644 | MEDIUM | 5 | 0.5% | Mar 27, 2019 | Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM... |
| CVE-2018-19643 | MEDIUM | 4.7 | 0.8% | Mar 27, 2019 | Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versi... |
| CVE-2018-12546 | MEDIUM | 6.5 | 0.8% | Mar 27, 2019 | In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has it... |
| CVE-2018-19642 | MEDIUM | 5.1 | 0.7% | Mar 27, 2019 | Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) version... |
| CVE-2018-19641 | MEDIUM | 6.1 | 1.5% | Mar 27, 2019 | Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Ma... |
| CVE-2018-10934 | MEDIUM | 5.4 | 1.0% | Mar 27, 2019 | A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA... |
| CVE-2018-16856 | MEDIUM | 5.5 | 0.9% | Mar 26, 2019 | In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2... |
| CVE-2018-15583 | MEDIUM | 6.1 | 1.1% | Mar 25, 2019 | Cross-Site Scripting (XSS) vulnerability in point_list.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject... |
| CVE-2018-16838 | MEDIUM | 5.4 | 1.1% | Mar 25, 2019 | A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict p... |
| CVE-2018-1992 | MEDIUM | 6.4 | 0.4% | Mar 21, 2019 | The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now