2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-6343 | HIGH | 7.5 | 0.8% | Dec 31, 2018 | Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of serv... |
| CVE-2018-6340 | HIGH | 8.1 | 1.4% | Dec 31, 2018 | The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires con... |
| CVE-2018-6337 | HIGH | 7.5 | 1.8% | Dec 31, 2018 | folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in m... |
| CVE-2018-6336 | HIGH | 7.8 | 0.5% | Dec 31, 2018 | An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks... |
| CVE-2018-6335 | HIGH | 7.5 | 1.5% | Dec 31, 2018 | A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to ... |
| CVE-2018-18601 | HIGH | 8.1 | 1.2% | Dec 31, 2018 | The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmwa... |
| CVE-2018-18600 | HIGH | 8.1 | 1.6% | Dec 31, 2018 | The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parame... |
| CVE-2018-20618 | HIGH | 8.8 | 1.4% | Dec 31, 2018 | ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c. |
| CVE-2018-20549 | HIGH | 8.8 | 1.8% | Dec 28, 2018 | There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19. |
| CVE-2018-20548 | HIGH | 8.8 | 1.8% | Dec 28, 2018 | There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data. |
| CVE-2018-20547 | HIGH | 8.1 | 1.8% | Dec 28, 2018 | There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp dat... |
| CVE-2018-20546 | HIGH | 8.1 | 2.3% | Dec 28, 2018 | There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the defau... |
| CVE-2018-20545 | HIGH | 8.8 | 2.4% | Dec 28, 2018 | There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data. |
| CVE-2018-20437 | HIGH | 7.5 | 2.4% | Dec 25, 2018 | An issue was discovered in the fileDownload function in the CommonController class in FEBS-Shiro before 2018-11-05. An a... |
| CVE-2018-20247 | HIGH | 7.8 | 54.5% | Dec 24, 2018 | In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a ... |
| CVE-2018-7801 | HIGH | 8.8 | 6.3% | Dec 24, 2018 | A Code Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable access with maximu... |
| CVE-2018-8920 | HIGH | 7.2 | 1.0% | Dec 24, 2018 | Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager (DSM) before 6.1.6-15266... |
| CVE-2018-8919 | HIGH | 8.3 | 1.4% | Dec 24, 2018 | Information exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation Manager (DSM) before 6.1.6-1... |
| CVE-2018-15465 | HIGH | 8.1 | 2.4% | Dec 24, 2018 | A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authen... |
| CVE-2018-20406 | HIGH | 7.5 | 5.8% | Dec 23, 2018 | Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during... |
| CVE-2018-19322 | HIGH | 7.8 | 1.9% | Dec 21, 2018 | The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, X... |
| CVE-2018-19321 | HIGH | 7.8 | 3.7% | Dec 21, 2018 | The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, X... |
| CVE-2018-19320 | HIGH | 7.8 | 3.6% | Dec 21, 2018 | The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ... |
| CVE-2018-5196 | HIGH | 8.8 | 1.4% | Dec 21, 2018 | Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim... |
| CVE-2018-20191 | HIGH | 7.5 | 3.7% | Dec 20, 2018 | hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now