2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1000873 | MEDIUM | 6.5 | 4.8% | Dec 20, 2018 | Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Jav... |
| CVE-2018-1000855 | MEDIUM | 6.1 | 0.9% | Dec 20, 2018 | easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is moun... |
| CVE-2018-1000852 | MEDIUM | 6.5 | 2.7% | Dec 20, 2018 | FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unkno... |
| CVE-2018-1000842 | MEDIUM | 6.1 | 1.7% | Dec 20, 2018 | FatFreeCRM version <=0.14.1, >=0.15.0 <=0.15.1, >=0.16.0 <=0.16.3, >=0.17.0 <=0.17.2, ==0.18.0 contains a Cross Site Scr... |
| CVE-2018-1000814 | MEDIUM | 6.5 | 1.0% | Dec 20, 2018 | aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and ... |
| CVE-2018-7365 | MEDIUM | 5.1 | 0.7% | Dec 20, 2018 | All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerabili... |
| CVE-2018-1677 | MEDIUM | 5.1 | 0.4% | Dec 20, 2018 | IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of serv... |
| CVE-2018-1661 | MEDIUM | 6.5 | 0.9% | Dec 20, 2018 | IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an attac... |
| CVE-2018-6669 | MEDIUM | 6.3 | 0.5% | Dec 20, 2018 | A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or loca... |
| CVE-2018-20307 | MEDIUM | 4.3 | 0.8% | Dec 20, 2018 | Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain ... |
| CVE-2018-19522 | MEDIUM | 5.5 | 0.4% | Dec 18, 2018 | DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x800020F4) with a buffe... |
| CVE-2018-1833 | MEDIUM | 5.3 | 1.7% | Dec 18, 2018 | IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An at... |
| CVE-2018-20199 | MEDIUM | 5.5 | 1.1% | Dec 18, 2018 | A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FA... |
| CVE-2018-20185 | MEDIUM | 5.3 | 2.1% | Dec 17, 2018 | In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPIma... |
| CVE-2018-20123 | MEDIUM | 5.5 | 0.5% | Dec 17, 2018 | pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error. |
| CVE-2018-1891 | MEDIUM | 5.4 | 1.0% | Dec 17, 2018 | IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr... |
| CVE-2018-1889 | MEDIUM | 5.4 | 1.0% | Dec 17, 2018 | IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi... |
| CVE-2018-20169 | MEDIUM | 6.8 | 0.6% | Dec 17, 2018 | An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading o... |
| CVE-2018-1977 | MEDIUM | 5.3 | 1.9% | Dec 14, 2018 | IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) contains a denial of service vulnerability. A rem... |
| CVE-2018-1848 | MEDIUM | 6.1 | 1.3% | Dec 14, 2018 | IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows ... |
| CVE-2018-18984 | MEDIUM | 4.6 | 0.3% | Dec 14, 2018 | Medtronic CareLink and Encore Programmers do not encrypt or do not sufficiently encrypt sensitive PII and PHI informa... |
| CVE-2018-16875 | MEDIUM | 5.9 | 6.3% | Dec 14, 2018 | The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for eac... |
| CVE-2018-14623 | MEDIUM | 4.3 | 1.4% | Dec 14, 2018 | A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to... |
| CVE-2018-15776 | MEDIUM | 6.4 | 0.4% | Dec 13, 2018 | Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated... |
| CVE-2018-15754 | MEDIUM | 4.2 | 1.8% | Dec 13, 2018 | Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error. In environments with multiple identi... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now