2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-16556 | HIGH | 7.5 | 1.5% | Dec 13, 2018 | A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (... |
| CVE-2018-20127 | HIGH | 7.5 | 1.4% | Dec 13, 2018 | An issue was discovered in zzzphp cms 1.5.8. del_file in /admin/save.php allows remote attackers to delete arbitrary fil... |
| CVE-2018-6706 | HIGH | 7.5 | 0.6% | Dec 12, 2018 | Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivi... |
| CVE-2018-6705 | HIGH | 7.8 | 0.4% | Dec 12, 2018 | Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local use... |
| CVE-2018-6704 | HIGH | 7.8 | 0.4% | Dec 12, 2018 | Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local use... |
| CVE-2018-16867 | HIGH | 7.8 | 0.4% | Dec 12, 2018 | A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usb_mtp_write_da... |
| CVE-2018-8639 | HIGH | 7.8 | 22.3% | Dec 12, 2018 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in ... |
| CVE-2018-8611 | HIGH | 7.8 | 4.2% | Dec 12, 2018 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "... |
| CVE-2018-2503 | HIGH | 7.4 | 0.6% | Dec 11, 2018 | By default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that shoul... |
| CVE-2018-2492 | HIGH | 7.1 | 1.1% | Dec 11, 2018 | SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted... |
| CVE-2018-1904 | HIGH | 8.1 | 3.7% | Dec 11, 2018 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code thro... |
| CVE-2018-17480 | HIGH | 8.8 | 34.3% | Dec 11, 2018 | Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chr... |
| CVE-2018-15800 | HIGH | 8.1 | 0.9% | Dec 10, 2018 | Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicio... |
| CVE-2018-1279 | HIGH | 8.5 | 1.8% | Dec 10, 2018 | Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines wh... |
| CVE-2018-20004 | HIGH | 8.8 | 2.0% | Dec 10, 2018 | An issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in mxml_write_node in mxml-file... |
| CVE-2018-9577 | HIGH | 7.8 | 0.9% | Dec 7, 2018 | In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to... |
| CVE-2018-9576 | HIGH | 7.8 | 0.9% | Dec 7, 2018 | In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to mi... |
| CVE-2018-9575 | HIGH | 7.8 | 0.9% | Dec 7, 2018 | In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bo... |
| CVE-2018-9574 | HIGH | 7.8 | 0.9% | Dec 7, 2018 | In impd_parse_split_drc_characteristic of impd_drc_static_payload.c there is a possible out of bounds write due to missi... |
| CVE-2018-9573 | HIGH | 7.8 | 0.9% | Dec 7, 2018 | In impd_parse_filt_block of impd_drc_dynamic_payload.c there is a possible out of bounds write due to missing bounds che... |
| CVE-2018-9572 | HIGH | 8.8 | 1.1% | Dec 7, 2018 | In impd_drc_parse_coeff of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check... |
| CVE-2018-9571 | HIGH | 8.8 | 1.1% | Dec 7, 2018 | In impd_parse_loud_eq_instructions of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing b... |
| CVE-2018-9570 | HIGH | 7.8 | 0.9% | Dec 7, 2018 | In impd_parse_drc_ext_v1 of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds chec... |
| CVE-2018-9569 | HIGH | 8.8 | 1.1% | Dec 7, 2018 | In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect b... |
| CVE-2018-5802 | HIGH | 8.8 | 2.0% | Dec 7, 2018 | An error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the "buf" variable in LibRaw... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now