2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-16861 | HIGH | 7.6 | 0.9% | Dec 7, 2018 | A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create ... |
| CVE-2018-1920 | HIGH | 7.1 | 2.4% | Dec 7, 2018 | IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processi... |
| CVE-2018-1424 | HIGH | 7.1 | 2.4% | Dec 7, 2018 | IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when process... |
| CVE-2018-17924 | HIGH | 8.6 | 4.3% | Dec 7, 2018 | Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote ... |
| CVE-2018-19939 | HIGH | 7.5 | 1.3% | Dec 7, 2018 | The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite... |
| CVE-2018-19935 | HIGH | 7.5 | 6.9% | Dec 7, 2018 | ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer d... |
| CVE-2018-19931 | HIGH | 7.8 | 1.5% | Dec 7, 2018 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through... |
| CVE-2018-6757 | HIGH | 7.5 | 1.1% | Dec 6, 2018 | Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows loca... |
| CVE-2018-6756 | HIGH | 7.8 | 1.0% | Dec 6, 2018 | Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows loca... |
| CVE-2018-6755 | HIGH | 7.2 | 1.0% | Dec 6, 2018 | Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows... |
| CVE-2018-9568 | HIGH | 7.8 | 0.7% | Dec 6, 2018 | In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escala... |
| CVE-2018-9565 | HIGH | 7.5 | 1.1% | Dec 6, 2018 | In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to rem... |
| CVE-2018-9562 | HIGH | 7.5 | 1.1% | Dec 6, 2018 | In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could... |
| CVE-2018-9560 | HIGH | 7.8 | 0.2% | Dec 6, 2018 | In HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing bounds check. This could le... |
| CVE-2018-9558 | HIGH | 7.8 | 0.2% | Dec 6, 2018 | In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. Th... |
| CVE-2018-9555 | HIGH | 8.8 | 0.7% | Dec 6, 2018 | In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lea... |
| CVE-2018-9553 | HIGH | 7.8 | 1.1% | Dec 6, 2018 | In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could... |
| CVE-2018-9551 | HIGH | 7.8 | 1.1% | Dec 6, 2018 | In CAacDecoder_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could ... |
| CVE-2018-9550 | HIGH | 7.8 | 1.2% | Dec 6, 2018 | In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This could... |
| CVE-2018-9549 | HIGH | 7.8 | 1.1% | Dec 6, 2018 | In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead to... |
| CVE-2018-9547 | HIGH | 7.8 | 0.2% | Dec 6, 2018 | In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to... |
| CVE-2018-9538 | HIGH | 7.8 | 0.2% | Dec 6, 2018 | In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds... |
| CVE-2018-1002103 | HIGH | 8.1 | 0.7% | Dec 5, 2018 | In Minikube versions 0.3.0-0.29.0, minikube exposes the Kubernetes Dashboard listening on the VM IP at port 30000. In VM... |
| CVE-2018-15797 | HIGH | 8.4 | 1.6% | Dec 5, 2018 | Cloud Foundry NFS volume release, 1.2.x prior to 1.2.5, 1.5.x prior to 1.5.4, 1.7.x prior to 1.7.3, logs the cf admin us... |
| CVE-2018-1941 | HIGH | 8.4 | 0.3% | Dec 5, 2018 | IBM Campaign 9.1.0 and 9.1.2 could allow a local user to obtain admini privileges due to the application not validating ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now