2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1948 | MEDIUM | 4.3 | 1.1% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not set the secure attribut... |
| CVE-2018-1947 | MEDIUM | 6.1 | 0.9% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scri... |
| CVE-2018-1946 | MEDIUM | 5.9 | 0.7% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance supports interaction between mul... |
| CVE-2018-1945 | MEDIUM | 6.1 | 1.2% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance could allow a remote attacker to... |
| CVE-2018-1944 | MEDIUM | 5.1 | 0.8% | Feb 21, 2019 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance contains hard-coded credentials,... |
| CVE-2018-6687 | MEDIUM | 5.5 | 0.8% | Feb 21, 2019 | Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 3.0.0.461 and earlier allows attacker... |
| CVE-2018-9867 | MEDIUM | 5.5 | 0.2% | Feb 19, 2019 | In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administra... |
| CVE-2018-1996 | MEDIUM | 5.3 | 1.1% | Feb 19, 2019 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the impro... |
| CVE-2018-1895 | MEDIUM | 5.4 | 0.7% | Feb 15, 2019 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows ... |
| CVE-2018-20237 | MEDIUM | 6.5 | 1.7% | Feb 13, 2019 | Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted pag... |
| CVE-2018-17542 | MEDIUM | 4.3 | 1.2% | Feb 11, 2019 | SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects ... |
| CVE-2018-1666 | MEDIUM | 4.3 | 0.8% | Feb 7, 2019 | IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0 ... |
| CVE-2018-20758 | MEDIUM | 5.4 | 0.6% | Feb 6, 2019 | MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description. |
| CVE-2018-3989 | MEDIUM | 4.3 | 0.6% | Feb 5, 2019 | An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTE... |
| CVE-2018-18506 | MEDIUM | 5.9 | 2.2% | Feb 5, 2019 | When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is l... |
| CVE-2018-1962 | MEDIUM | 4 | 0.4% | Feb 4, 2019 | IBM Security Identity Manager 7.0.1 Virtual Appliance does not invalidate session tokens when the logout button is press... |
| CVE-2018-1801 | MEDIUM | 5.3 | 2.5% | Feb 4, 2019 | IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.... |
| CVE-2018-1675 | MEDIUM | 6.8 | 1.6% | Feb 4, 2019 | IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memor... |
| CVE-2018-16487 | MEDIUM | 5.6 | 1.6% | Feb 1, 2019 | A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep ... |
| CVE-2018-15617 | MEDIUM | 6.5 | 2.2% | Feb 1, 2019 | A vulnerability in the "capro" (Call Processor) process component of Avaya Aura Communication Manager could allow a remo... |
| CVE-2018-17189 | MEDIUM | 5.3 | 19.4% | Jan 30, 2019 | In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h... |
| CVE-2018-19440 | MEDIUM | 5.3 | 1.4% | Jan 30, 2019 | ARM Trusted Firmware-A allows information disclosure. |
| CVE-2018-1976 | MEDIUM | 4.9 | 1.7% | Jan 29, 2019 | IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a REST API that could allow ... |
| CVE-2018-1733 | MEDIUM | 5.3 | 1.7% | Jan 29, 2019 | IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that has control-plane impl... |
| CVE-2018-1668 | MEDIUM | 5.3 | 1.4% | Jan 29, 2019 | IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now