2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-18814 | HIGH | 8.8 | 3.1% | Jan 16, 2019 | The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketpla... |
| CVE-2018-18813 | HIGH | 8.8 | 1.5% | Jan 16, 2019 | The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TI... |
| CVE-2018-5740 | HIGH | 7.5 | 59.4% | Jan 16, 2019 | "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS... |
| CVE-2018-5734 | HIGH | 7.5 | 6.2% | Jan 16, 2019 | While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcod... |
| CVE-2018-5733 | HIGH | 7.5 | 20.2% | Jan 16, 2019 | A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eve... |
| CVE-2018-15782 | HIGH | 7.7 | 0.4% | Jan 16, 2019 | The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal... |
| CVE-2018-16886 | HIGH | 8.1 | 4.0% | Jan 14, 2019 | etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-b... |
| CVE-2018-16865 | HIGH | 7.8 | 3.0% | Jan 11, 2019 | An allocation of memory without limits, that could result in the stack clashing with another memory region, was discover... |
| CVE-2018-16864 | HIGH | 7.8 | 0.7% | Jan 11, 2019 | An allocation of memory without limits, that could result in the stack clashing with another memory region, was discover... |
| CVE-2018-4404 | HIGH | 8.8 | 13.9% | Jan 11, 2019 | In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improve... |
| CVE-2018-15460 | HIGH | 8.6 | 2.5% | Jan 10, 2019 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ES... |
| CVE-2018-15453 | HIGH | 8.6 | 2.3% | Jan 10, 2019 | A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Publi... |
| CVE-2018-0474 | HIGH | 8.8 | 1.5% | Jan 10, 2019 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticat... |
| CVE-2018-0181 | HIGH | 7.3 | 2.2% | Jan 10, 2019 | A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Ro... |
| CVE-2018-16202 | HIGH | 8.6 | 3.3% | Jan 9, 2019 | Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2... |
| CVE-2018-16177 | HIGH | 7.8 | 0.4% | Jan 9, 2019 | Untrusted search path vulnerability in The installer of Windows 10 Fall Creators Update Modify module for Security Measu... |
| CVE-2018-1000412 | HIGH | 8.8 | 1.2% | Jan 9, 2019 | An improper authorization vulnerability exists in Jenkins Jira Plugin 3.0.1 and earlier in JiraSite.java that allows att... |
| CVE-2018-20679 | HIGH | 7.5 | 7.9% | Jan 9, 2019 | An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server... |
| CVE-2018-2484 | HIGH | 8.8 | 1.4% | Jan 8, 2019 | SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.... |
| CVE-2018-1320 | HIGH | 7.5 | 8.2% | Jan 7, 2019 | Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the... |
| CVE-2018-5410 | HIGH | 7.8 | 1.6% | Jan 7, 2019 | Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys dri... |
| CVE-2018-16882 | HIGH | 8.8 | 0.4% | Jan 3, 2019 | A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=1... |
| CVE-2018-6347 | HIGH | 7.5 | 1.4% | Dec 31, 2018 | An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affe... |
| CVE-2018-6346 | HIGH | 7.5 | 1.4% | Dec 31, 2018 | A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular... |
| CVE-2018-6344 | HIGH | 7.5 | 1.9% | Dec 31, 2018 | A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulner... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now