2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-10910 | MEDIUM | 4.5 | 0.5% | Jan 28, 2019 | A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with... |
| CVE-2018-16889 | MEDIUM | 5.5 | 0.5% | Jan 28, 2019 | Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption ... |
| CVE-2018-19021 | MEDIUM | 6.5 | 0.7% | Jan 25, 2019 | A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, ... |
| CVE-2018-1959 | MEDIUM | 5.1 | 0.2% | Jan 24, 2019 | IBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptograph... |
| CVE-2018-17699 | MEDIUM | 6.5 | 4.1% | Jan 24, 2019 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-17686 | MEDIUM | 6.5 | 24.4% | Jan 24, 2019 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-15459 | MEDIUM | 6.5 | 1.7% | Jan 23, 2019 | A vulnerability in the administrative web interface of Cisco Identity Services Engine (ISE) could allow an authenticated... |
| CVE-2018-15455 | MEDIUM | 6.1 | 1.1% | Jan 23, 2019 | A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated, remote attack... |
| CVE-2018-0187 | MEDIUM | 6.5 | 1.5% | Jan 23, 2019 | A vulnerability in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacke... |
| CVE-2018-15614 | MEDIUM | 6.8 | 0.6% | Jan 23, 2019 | A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross sit... |
| CVE-2018-2026 | MEDIUM | 4.3 | 1.4% | Jan 23, 2019 | IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to obtain a directory lis... |
| CVE-2018-1751 | MEDIUM | 5.9 | 1.3% | Jan 23, 2019 | IBM Security Key Lifecycle Manager 3.0 through 3.0.0.2 uses weaker than expected cryptographic algorithms that could all... |
| CVE-2018-14666 | MEDIUM | 6.8 | 1.0% | Jan 22, 2019 | An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configu... |
| CVE-2018-13374 | MEDIUM | 4.3 | 37.8% | Jan 22, 2019 | A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 al... |
| CVE-2018-16042 | MEDIUM | 6.5 | 82.4% | Jan 18, 2019 | Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20... |
| CVE-2018-18812 | MEDIUM | 6.5 | 1.2% | Jan 16, 2019 | The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO... |
| CVE-2018-5741 | MEDIUM | 6.5 | 3.5% | Jan 16, 2019 | To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides... |
| CVE-2018-5739 | MEDIUM | 6.5 | 1.9% | Jan 16, 2019 | An extension to hooks capabilities which debuted in Kea 1.4.0 introduced a memory leak for operators who are using certa... |
| CVE-2018-5738 | MEDIUM | 5.3 | 11.1% | Jan 16, 2019 | Change #4777 (introduced in October 2017) introduced an unforeseen issue in releases which were issued after that date, ... |
| CVE-2018-5737 | MEDIUM | 5.9 | 10.4% | Jan 16, 2019 | A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.... |
| CVE-2018-14662 | MEDIUM | 5.7 | 0.4% | Jan 15, 2019 | It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt e... |
| CVE-2018-15463 | MEDIUM | 6.1 | 1.2% | Jan 15, 2019 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic... |
| CVE-2018-15440 | MEDIUM | 6.1 | 1.3% | Jan 15, 2019 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic... |
| CVE-2018-16846 | MEDIUM | 6.5 | 2.1% | Jan 15, 2019 | It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAP... |
| CVE-2018-16888 | MEDIUM | 4.7 | 0.3% | Jan 14, 2019 | It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now