2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-13990 | HIGH | 8.6 | 2.3% | May 6, 2019 | The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, bec... |
| CVE-2018-15462 | HIGH | 7.5 | 2.1% | May 3, 2019 | A vulnerability in the TCP ingress handler for the data interfaces that are configured with management access to Cisco F... |
| CVE-2018-15388 | HIGH | 8.6 | 2.0% | May 3, 2019 | A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Thre... |
| CVE-2018-16877 | HIGH | 7.8 | 0.4% | Apr 18, 2019 | A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0... |
| CVE-2018-7340 | HIGH | 7.5 | 1.0% | Apr 17, 2019 | Duo Network Gateway 1.2.9 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs... |
| CVE-2018-4007 | HIGH | 7.1 | 0.4% | Apr 17, 2019 | An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig fun... |
| CVE-2018-4006 | HIGH | 7.8 | 0.7% | Apr 17, 2019 | An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig func... |
| CVE-2018-4005 | HIGH | 7.8 | 0.7% | Apr 17, 2019 | An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the configureRouting... |
| CVE-2018-16561 | HIGH | 7.5 | 1.4% | Apr 17, 2019 | A vulnerability has been identified in SIMATIC S7-300 CPUs (All versions < V3.X.16). The affected CPUs improperly valida... |
| CVE-2018-4009 | HIGH | 7.8 | 0.4% | Apr 15, 2019 | An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of c... |
| CVE-2018-4008 | HIGH | 7.8 | 0.4% | Apr 15, 2019 | An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript co... |
| CVE-2018-19453 | HIGH | 8.8 | 1.4% | Apr 10, 2019 | Kentico CMS before 11.0.45 allows unrestricted upload of a file with a dangerous type. |
| CVE-2018-15640 | HIGH | 8.8 | 7.9% | Apr 9, 2019 | Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers t... |
| CVE-2018-4344 | HIGH | 7.8 | 2.9% | Apr 3, 2019 | A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, mac... |
| CVE-2018-1936 | HIGH | 8.4 | 0.5% | Apr 3, 2019 | IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds... |
| CVE-2018-4049 | HIGH | 7.8 | 0.3% | Apr 2, 2019 | An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” dir... |
| CVE-2018-3974 | HIGH | 7.8 | 0.5% | Apr 2, 2019 | An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install dir... |
| CVE-2018-1640 | HIGH | 8.8 | 3.7% | Apr 2, 2019 | IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute ... |
| CVE-2018-1618 | HIGH | 7.7 | 3.4% | Apr 2, 2019 | IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories o... |
| CVE-2018-4050 | HIGH | 7.8 | 0.4% | Apr 1, 2019 | An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, vers... |
| CVE-2018-8913 | HIGH | 7.1 | 1.1% | Apr 1, 2019 | Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phi... |
| CVE-2018-13296 | HIGH | 7.5 | 1.8% | Apr 1, 2019 | Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allow... |
| CVE-2018-13285 | HIGH | 7.5 | 2.3% | Apr 1, 2019 | Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated... |
| CVE-2018-13284 | HIGH | 7.5 | 2.3% | Apr 1, 2019 | Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authentic... |
| CVE-2018-13283 | HIGH | 8.8 | 1.4% | Apr 1, 2019 | Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 all... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now