2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-16872 | MEDIUM | 5.3 | 1.1% | Dec 13, 2018 | A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_par... |
| CVE-2018-19489 | MEDIUM | 4.7 | 0.4% | Dec 13, 2018 | v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race conditio... |
| CVE-2018-19364 | MEDIUM | 5.5 | 0.5% | Dec 13, 2018 | hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading ... |
| CVE-2018-20138 | MEDIUM | 5.4 | 0.6% | Dec 13, 2018 | PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastN... |
| CVE-2018-1887 | MEDIUM | 5.9 | 0.2% | Dec 13, 2018 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains hard-coded credentials, s... |
| CVE-2018-1886 | MEDIUM | 5.3 | 1.3% | Dec 13, 2018 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 discloses sensitive information to... |
| CVE-2018-1818 | MEDIUM | 5.9 | 0.8% | Dec 13, 2018 | IBM Security Guardium 10 and 10.5 contains hard-coded credentials, such as a password or cryptographic key, which it use... |
| CVE-2018-1817 | MEDIUM | 6.1 | 0.9% | Dec 13, 2018 | IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr... |
| CVE-2018-1815 | MEDIUM | 6.1 | 0.9% | Dec 13, 2018 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 for Enterprise Single-Sign On is v... |
| CVE-2018-1814 | MEDIUM | 5.9 | 1.0% | Dec 13, 2018 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses weaker than expected cryptogr... |
| CVE-2018-1813 | MEDIUM | 4.3 | 0.9% | Dec 13, 2018 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for i... |
| CVE-2018-1805 | MEDIUM | 4.3 | 1.0% | Dec 13, 2018 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 generates an error message that in... |
| CVE-2018-1803 | MEDIUM | 6.1 | 1.2% | Dec 13, 2018 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 could allow a remote attacker to h... |
| CVE-2018-1740 | MEDIUM | 5.4 | 0.7% | Dec 13, 2018 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site script... |
| CVE-2018-1667 | MEDIUM | 5.4 | 0.7% | Dec 13, 2018 | IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.... |
| CVE-2018-1665 | MEDIUM | 5.9 | 1.0% | Dec 13, 2018 | IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.... |
| CVE-2018-1653 | MEDIUM | 5.4 | 1.0% | Dec 13, 2018 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site script... |
| CVE-2018-7691 | MEDIUM | 6.5 | 7.2% | Dec 13, 2018 | A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.... |
| CVE-2018-7690 | MEDIUM | 6.5 | 7.4% | Dec 13, 2018 | A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.... |
| CVE-2018-1926 | MEDIUM | 4.3 | 1.2% | Dec 12, 2018 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site request forgery, cause... |
| CVE-2018-1901 | MEDIUM | 5 | 1.5% | Dec 12, 2018 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain elevated privileges on th... |
| CVE-2018-1480 | MEDIUM | 4 | 1.1% | Dec 12, 2018 | IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute on authorization to... |
| CVE-2018-1478 | MEDIUM | 6.1 | 1.1% | Dec 12, 2018 | IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to hijack the clicking acti... |
| CVE-2018-1476 | MEDIUM | 5.3 | 1.4% | Dec 12, 2018 | IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users. Th... |
| CVE-2018-1474 | MEDIUM | 6.1 | 1.2% | Dec 12, 2018 | IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks, caused ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now