2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-4035 | MEDIUM | 5.5 | 0.3% | Jan 10, 2019 | The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input v... |
| CVE-2018-4034 | MEDIUM | 5.5 | 0.3% | Jan 10, 2019 | The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input v... |
| CVE-2018-4033 | MEDIUM | 5.5 | 0.3% | Jan 10, 2019 | The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. A... |
| CVE-2018-4032 | MEDIUM | 5.5 | 0.3% | Jan 10, 2019 | An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates input... |
| CVE-2018-0282 | MEDIUM | 6.8 | 2.0% | Jan 10, 2019 | A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker ... |
| CVE-2018-16204 | MEDIUM | 4.8 | 0.7% | Jan 9, 2019 | Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attacker... |
| CVE-2018-1000426 | MEDIUM | 6.1 | 1.0% | Jan 9, 2019 | A cross-site scripting vulnerability exists in Jenkins Git Changelog Plugin 2.6 and earlier in GitChangelogSummaryDecora... |
| CVE-2018-1000413 | MEDIUM | 5.4 | 0.9% | Jan 9, 2019 | A cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in configfiles.jelly,... |
| CVE-2018-1993 | MEDIUM | 4 | 0.4% | Jan 8, 2019 | IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is ... |
| CVE-2018-1932 | MEDIUM | 4.9 | 3.2% | Jan 8, 2019 | IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the managemen... |
| CVE-2018-1918 | MEDIUM | 5.4 | 1.0% | Jan 8, 2019 | IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerabilit... |
| CVE-2018-1951 | MEDIUM | 5.4 | 1.0% | Jan 4, 2019 | IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to ... |
| CVE-2018-1888 | MEDIUM | 5.3 | 1.2% | Jan 4, 2019 | An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitra... |
| CVE-2018-1859 | MEDIUM | 4.3 | 1.0% | Jan 4, 2019 | IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an administrator with limited rights to esca... |
| CVE-2018-1657 | MEDIUM | 5.4 | 1.0% | Jan 4, 2019 | IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to ... |
| CVE-2018-3986 | MEDIUM | 5.5 | 0.4% | Jan 3, 2019 | An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android m... |
| CVE-2018-15780 | MEDIUM | 4.3 | 1.2% | Jan 3, 2019 | RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could pot... |
| CVE-2018-16885 | MEDIUM | 4.7 | 0.4% | Jan 3, 2019 | A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with ... |
| CVE-2018-16876 | MEDIUM | 5.3 | 2.5% | Jan 3, 2019 | ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on... |
| CVE-2018-20662 | MEDIUM | 6.5 | 2.2% | Jan 3, 2019 | In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by... |
| CVE-2018-20650 | MEDIUM | 6.5 | 2.7% | Jan 1, 2019 | A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack... |
| CVE-2018-6341 | MEDIUM | 6.1 | 3.4% | Dec 31, 2018 | React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names a... |
| CVE-2018-20623 | MEDIUM | 5.5 | 1.8% | Dec 31, 2018 | In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archiv... |
| CVE-2018-20622 | MEDIUM | 6.5 | 2.9% | Dec 31, 2018 | JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used. |
| CVE-2018-6668 | MEDIUM | 6.1 | 0.4% | Dec 31, 2018 | A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now