2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1730 | HIGH | 7.1 | 1.9% | Dec 5, 2018 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A re... |
| CVE-2018-18993 | HIGH | 7.8 | 1.8% | Dec 4, 2018 | Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Ve... |
| CVE-2018-19591 | HIGH | 7.5 | 5.5% | Dec 4, 2018 | In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads... |
| CVE-2018-6981 | HIGH | 8.8 | 1.3% | Dec 4, 2018 | VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without E... |
| CVE-2018-4021 | HIGH | 7.2 | 72.2% | Dec 3, 2018 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the paramete... |
| CVE-2018-4020 | HIGH | 7.2 | 48.7% | Dec 3, 2018 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the paramete... |
| CVE-2018-4019 | HIGH | 7.2 | 48.7% | Dec 3, 2018 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the paramete... |
| CVE-2018-3854 | HIGH | 7.1 | 0.4% | Dec 3, 2018 | An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 20... |
| CVE-2018-6439 | HIGH | 7.8 | 0.3% | Dec 3, 2018 | A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8... |
| CVE-2018-16863 | HIGH | 7.3 | 1.2% | Dec 3, 2018 | It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of... |
| CVE-2018-16855 | HIGH | 7.5 | 59.5% | Dec 3, 2018 | An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigge... |
| CVE-2018-4040 | HIGH | 7.8 | 1.0% | Dec 1, 2018 | An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, ver... |
| CVE-2018-4039 | HIGH | 7.8 | 1.4% | Dec 1, 2018 | An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.... |
| CVE-2018-4038 | HIGH | 7.8 | 1.3% | Dec 1, 2018 | An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, v... |
| CVE-2018-3951 | HIGH | 7.2 | 3.9% | Dec 1, 2018 | An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN ... |
| CVE-2018-3950 | HIGH | 8.8 | 2.9% | Dec 1, 2018 | An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VP... |
| CVE-2018-3949 | HIGH | 7.5 | 53.3% | Dec 1, 2018 | An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A... |
| CVE-2018-3948 | HIGH | 7.5 | 23.1% | Nov 30, 2018 | An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP se... |
| CVE-2018-1897 | HIGH | 8.4 | 0.6% | Nov 30, 2018 | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow, ... |
| CVE-2018-19654 | HIGH | 7.5 | 0.9% | Nov 29, 2018 | An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. There is a discrepancy in userna... |
| CVE-2018-12122 | HIGH | 7.5 | 41.3% | Nov 28, 2018 | Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker... |
| CVE-2018-12121 | HIGH | 7.5 | 10.2% | Nov 28, 2018 | Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By... |
| CVE-2018-12120 | HIGH | 8.1 | 4.3% | Nov 28, 2018 | Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger... |
| CVE-2018-12116 | HIGH | 7.5 | 4.6% | Nov 28, 2018 | Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use uns... |
| CVE-2018-16857 | HIGH | 7.4 | 2.3% | Nov 28, 2018 | Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now