2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-19886 | MEDIUM | 5.5 | 1.0% | Dec 6, 2018 | An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Aud... |
| CVE-2018-1002101 | MEDIUM | 5.9 | 4.1% | Dec 5, 2018 | In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up... |
| CVE-2018-19876 | MEDIUM | 6.5 | 1.7% | Dec 5, 2018 | cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible wi... |
| CVE-2018-1732 | MEDIUM | 5.3 | 1.4% | Dec 5, 2018 | IBM QRadar Advisor with Watson 1.14.0 discloses sensitive information to unauthorized users. The information can be used... |
| CVE-2018-1728 | MEDIUM | 5.4 | 0.7% | Dec 5, 2018 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
| CVE-2018-1697 | MEDIUM | 4.3 | 1.2% | Dec 5, 2018 | IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a specially crafted HTTP ... |
| CVE-2018-1650 | MEDIUM | 5.9 | 0.3% | Dec 5, 2018 | IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials which could allow an attacker to bypass the authentication confi... |
| CVE-2018-1568 | MEDIUM | 4 | 0.4% | Dec 5, 2018 | IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system. IBM X... |
| CVE-2018-6982 | MEDIUM | 6.5 | 0.5% | Dec 4, 2018 | VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stac... |
| CVE-2018-19841 | MEDIUM | 5.5 | 2.5% | Dec 4, 2018 | The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause... |
| CVE-2018-1840 | MEDIUM | 6 | 2.1% | Dec 3, 2018 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, ca... |
| CVE-2018-6332 | MEDIUM | 5.9 | 1.1% | Dec 3, 2018 | A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spe... |
| CVE-2018-16869 | MEDIUM | 5.7 | 1.5% | Dec 3, 2018 | A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of ... |
| CVE-2018-16868 | MEDIUM | 5.6 | 0.6% | Dec 3, 2018 | A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA d... |
| CVE-2018-19787 | MEDIUM | 6.1 | 2.4% | Dec 2, 2018 | An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascrip... |
| CVE-2018-1928 | MEDIUM | 6.7 | 0.3% | Nov 30, 2018 | IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileg... |
| CVE-2018-1927 | MEDIUM | 6.5 | 0.7% | Nov 30, 2018 | IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unau... |
| CVE-2018-14637 | MEDIUM | 6.1 | 0.8% | Nov 30, 2018 | The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertion... |
| CVE-2018-19497 | MEDIUM | 6.5 | 1.5% | Nov 29, 2018 | In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is... |
| CVE-2018-16859 | MEDIUM | 4.2 | 0.5% | Nov 29, 2018 | Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can a... |
| CVE-2018-14626 | MEDIUM | 5.3 | 2.7% | Nov 29, 2018 | PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerab... |
| CVE-2018-10851 | MEDIUM | 5.3 | 6.0% | Nov 29, 2018 | PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excludi... |
| CVE-2018-1762 | MEDIUM | 5.4 | 1.0% | Nov 29, 2018 | IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scr... |
| CVE-2018-12123 | MEDIUM | 4.3 | 4.0% | Nov 28, 2018 | Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascrip... |
| CVE-2018-1584 | MEDIUM | 5.4 | 1.0% | Nov 28, 2018 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now