2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-20216 | HIGH | 7.5 | 3.9% | Dec 20, 2018 | QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishand... |
| CVE-2018-20125 | HIGH | 7.5 | 3.7% | Dec 20, 2018 | hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive me... |
| CVE-2018-1000878 | HIGH | 8.8 | 4.4% | Dec 20, 2018 | libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: ... |
| CVE-2018-1000877 | HIGH | 8.8 | 4.6% | Dec 20, 2018 | libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: ... |
| CVE-2018-1000876 | HIGH | 7.8 | 0.7% | Dec 20, 2018 | binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_boun... |
| CVE-2018-1000857 | HIGH | 8.8 | 3.3% | Dec 20, 2018 | log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin... |
| CVE-2018-5200 | HIGH | 7.8 | 1.7% | Dec 20, 2018 | KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV ... |
| CVE-2018-5199 | HIGH | 8.8 | 1.7% | Dec 20, 2018 | In Veraport G3 ALL on MacOS, due to insufficient domain validation, It is possible to overwrite installation file to mal... |
| CVE-2018-5198 | HIGH | 8.1 | 1.4% | Dec 20, 2018 | In Veraport G3 ALL on MacOS, a race condition when calling the Veraport API allow remote attacker to cause arbitrary fil... |
| CVE-2018-1973 | HIGH | 7.2 | 2.3% | Dec 20, 2018 | IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves fu... |
| CVE-2018-1784 | HIGH | 7.1 | 1.7% | Dec 20, 2018 | IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. IB... |
| CVE-2018-1778 | HIGH | 7.7 | 3.4% | Dec 20, 2018 | IBM LoopBack (IBM API Connect 2018.1, 2018.4.1, 5.0.8.0, and 5.0.8.4) could allow an attacker to bypass authentication i... |
| CVE-2018-1771 | HIGH | 8.4 | 0.5% | Dec 20, 2018 | IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in th... |
| CVE-2018-8653 | HIGH | 7.5 | 29.1% | Dec 20, 2018 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet ... |
| CVE-2018-15801 | HIGH | 7.4 | 0.7% | Dec 19, 2018 | Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation... |
| CVE-2018-15798 | HIGH | 7.6 | 1.1% | Dec 19, 2018 | Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unau... |
| CVE-2018-18999 | HIGH | 7.3 | 2.3% | Dec 19, 2018 | WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1. Lack of proper validation of user suppl... |
| CVE-2018-20227 | HIGH | 7.5 | 1.8% | Dec 19, 2018 | RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive. |
| CVE-2018-16884 | HIGH | 8 | 1.5% | Dec 18, 2018 | A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the sa... |
| CVE-2018-4015 | HIGH | 8.1 | 0.7% | Dec 18, 2018 | An exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK. The configuration o... |
| CVE-2018-20196 | HIGH | 7.8 | 1.3% | Dec 18, 2018 | There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Fr... |
| CVE-2018-16874 | HIGH | 8.1 | 5.0% | Dec 14, 2018 | In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed wi... |
| CVE-2018-16873 | HIGH | 8.1 | 66.3% | Dec 14, 2018 | In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed ... |
| CVE-2018-1821 | HIGH | 7.1 | 15.8% | Dec 13, 2018 | IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) a... |
| CVE-2018-16557 | HIGH | 8.2 | 0.8% | Dec 13, 2018 | A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now