2018 CVE Vulnerabilities

17,819 CVEs published in 2018.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2018-1967MEDIUM6.1IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi...
CVE-2018-1956MEDIUM5.9IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it ...
CVE-2018-16887MEDIUM5.4A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/...
CVE-2018-15467MEDIUM6.1A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an unauth...
CVE-2018-15466MEDIUM5.3A vulnerability in the Graphite web interface of the Policy and Charging Rules Function (PCRF) of Cisco Policy Suite (CP...
CVE-2018-15464MEDIUM5.8A vulnerability in Cisco 900 Series Aggregation Services Router (ASR) software could allow an unauthenticated, remote at...
CVE-2018-15461MEDIUM6.1A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker t...
CVE-2018-20685MEDIUM5.3In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filenam...
CVE-2018-15458MEDIUM5.3A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC), when used in conjunction ...
CVE-2018-15457MEDIUM6.1A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remo...
CVE-2018-15456MEDIUM4.3A vulnerability in the Admin Portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacke...
CVE-2018-0484MEDIUM5.3A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow ...
CVE-2018-0483MEDIUM4.6A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-...
CVE-2018-0482MEDIUM5.4A vulnerability in the web-based management interface of Cisco Prime Network Control System could allow an authenticated...
CVE-2018-0461MEDIUM6.5A vulnerability in the Cisco IP Phone 8800 Series Software could allow an unauthenticated, remote attacker to conduct an...
CVE-2018-0449MEDIUM4.2A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac clien...
CVE-2018-4047MEDIUM5.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i...
CVE-2018-4046MEDIUM5.5An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to impr...
CVE-2018-4045MEDIUM5.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i...
CVE-2018-4044MEDIUM5.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i...
CVE-2018-4043MEDIUM5.5An exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to impr...
CVE-2018-4042MEDIUM5.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i...
CVE-2018-4041MEDIUM5.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i...
CVE-2018-4037MEDIUM5.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. A...
CVE-2018-4036MEDIUM5.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. A...

Check if your code is affected by 2018 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now