2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-8650 | MEDIUM | 5.4 | 1.6% | Dec 12, 2018 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2018-20097 | MEDIUM | 6.5 | 2.3% | Dec 12, 2018 | There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafte... |
| CVE-2018-8580 | MEDIUM | 4.3 | 4.3% | Dec 12, 2018 | An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server... |
| CVE-2018-2504 | MEDIUM | 6.1 | 1.1% | Dec 11, 2018 | SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in... |
| CVE-2018-18810 | MEDIUM | 6.8 | 1.2% | Dec 11, 2018 | The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Manag... |
| CVE-2018-1900 | MEDIUM | 5.4 | 1.0% | Dec 11, 2018 | IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting. This vu... |
| CVE-2018-1654 | MEDIUM | 6.8 | 1.3% | Dec 11, 2018 | IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 could allow a remote attacker to conduct phish... |
| CVE-2018-1652 | MEDIUM | 6.2 | 0.4% | Dec 11, 2018 | IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.... |
| CVE-2018-20029 | MEDIUM | 5.5 | 0.3% | Dec 10, 2018 | The nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10 allows local users to cause a d... |
| CVE-2018-3988 | MEDIUM | 4.7 | 0.5% | Dec 10, 2018 | Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses th... |
| CVE-2018-1957 | MEDIUM | 4 | 0.4% | Dec 10, 2018 | IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by th... |
| CVE-2018-5813 | MEDIUM | 6.5 | 2.1% | Dec 7, 2018 | An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to t... |
| CVE-2018-5800 | MEDIUM | 6.5 | 2.5% | Dec 7, 2018 | An off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions ... |
| CVE-2018-1896 | MEDIUM | 4.6 | 1.0% | Dec 7, 2018 | IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to ... |
| CVE-2018-1883 | MEDIUM | 5.3 | 2.4% | Dec 7, 2018 | A problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow attackers to execute a ... |
| CVE-2018-1663 | MEDIUM | 5.9 | 2.3% | Dec 7, 2018 | IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information,... |
| CVE-2018-19665 | MEDIUM | 5.7 | 0.9% | Dec 6, 2018 | The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption. |
| CVE-2018-9566 | MEDIUM | 5.7 | 0.4% | Dec 6, 2018 | In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. ... |
| CVE-2018-9552 | MEDIUM | 5.5 | 0.5% | Dec 6, 2018 | In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could ... |
| CVE-2018-9548 | MEDIUM | 5.5 | 0.2% | Dec 6, 2018 | In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. Th... |
| CVE-2018-1935 | MEDIUM | 4.3 | 1.3% | Dec 6, 2018 | IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request... |
| CVE-2018-1871 | MEDIUM | 5.4 | 1.0% | Dec 6, 2018 | IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.0, 3.0.2, and 3.0.5 is vulnerable to cross... |
| CVE-2018-1525 | MEDIUM | 5.9 | 1.1% | Dec 6, 2018 | IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the fa... |
| CVE-2018-1505 | MEDIUM | 4 | 0.4% | Dec 6, 2018 | IBM i2 Enterprise Insight Analysis 2.1.7 allows web pages to be stored locally which can be read by another user on the ... |
| CVE-2018-1504 | MEDIUM | 6.1 | 1.1% | Dec 6, 2018 | IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking action of the victim. By p... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now