2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-16853 | HIGH | 7.5 | 3.1% | Nov 28, 2018 | Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is buil... |
| CVE-2018-0721 | HIGH | 7.7 | 1.6% | Nov 27, 2018 | Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Syste... |
| CVE-2018-17953 | HIGH | 7.5 | 1.3% | Nov 27, 2018 | A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE L... |
| CVE-2018-18807 | HIGH | 7.6 | 1.2% | Nov 26, 2018 | The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerab... |
| CVE-2018-1905 | HIGH | 7.1 | 2.5% | Nov 26, 2018 | IBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack w... |
| CVE-2018-19543 | HIGH | 7.8 | 1.6% | Nov 26, 2018 | An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in... |
| CVE-2018-19541 | HIGH | 8.8 | 2.8% | Nov 26, 2018 | An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16... |
| CVE-2018-19540 | HIGH | 8.8 | 2.3% | Nov 26, 2018 | An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16... |
| CVE-2018-19518 | HIGH | 7.5 | 95.2% | Nov 25, 2018 | University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh c... |
| CVE-2018-19423 | HIGH | 7.2 | 18.0% | Nov 21, 2018 | Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file. |
| CVE-2018-19422 | HIGH | 7.2 | 65.1% | Nov 21, 2018 | /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, beca... |
| CVE-2018-19416 | HIGH | 7.8 | 1.7% | Nov 21, 2018 | An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a m... |
| CVE-2018-1779 | HIGH | 7.5 | 2.5% | Nov 20, 2018 | IBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause a denial of service due to not ... |
| CVE-2018-17906 | HIGH | 8.8 | 0.8% | Nov 19, 2018 | Philips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all versions. Default credentials ... |
| CVE-2018-19274 | HIGH | 7.2 | 5.2% | Nov 17, 2018 | Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Inject... |
| CVE-2018-15769 | HIGH | 7.5 | 2.6% | Nov 16, 2018 | RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series)... |
| CVE-2018-7362 | HIGH | 7.5 | 1.2% | Nov 16, 2018 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which ma... |
| CVE-2018-19296 | HIGH | 8.8 | 2.2% | Nov 16, 2018 | PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack. |
| CVE-2018-16621 | HIGH | 7.2 | 1.8% | Nov 15, 2018 | Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection. |
| CVE-2018-6065 | HIGH | 8.8 | 58.8% | Nov 14, 2018 | Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Ch... |
| CVE-2018-17463 | HIGH | 8.8 | 83.9% | Nov 14, 2018 | Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbit... |
| CVE-2018-3635 | HIGH | 7.8 | 0.4% | Nov 14, 2018 | Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unpriv... |
| CVE-2018-19277 | HIGH | 8.8 | 7.8% | Nov 14, 2018 | securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 enco... |
| CVE-2018-8589 | HIGH | 7.8 | 3.0% | Nov 14, 2018 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k ... |
| CVE-2018-8581 | HIGH | 7.4 | 27.6% | Nov 14, 2018 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now