2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-16852 | MEDIUM | 6.5 | 2.2% | Nov 28, 2018 | Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of... |
| CVE-2018-16851 | MEDIUM | 6.5 | 3.3% | Nov 28, 2018 | Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the proce... |
| CVE-2018-16841 | MEDIUM | 6.5 | 4.6% | Nov 28, 2018 | Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configu... |
| CVE-2018-14629 | MEDIUM | 6.5 | 5.2% | Nov 28, 2018 | A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAM... |
| CVE-2018-0719 | MEDIUM | 5.5 | 0.8% | Nov 27, 2018 | Cross-site Scripting (XSS) vulnerability in NAS devices of QNAP Systems Inc. QTS allows attackers to inject javascript. ... |
| CVE-2018-14663 | MEDIUM | 5.9 | 2.5% | Nov 26, 2018 | An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing d... |
| CVE-2018-16862 | MEDIUM | 5.3 | 0.5% | Nov 26, 2018 | A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final fil... |
| CVE-2018-14646 | MEDIUM | 5.5 | 0.4% | Nov 26, 2018 | The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capabl... |
| CVE-2018-16854 | MEDIUM | 6.5 | 2.3% | Nov 26, 2018 | A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form ... |
| CVE-2018-19542 | MEDIUM | 6.5 | 1.9% | Nov 26, 2018 | An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp... |
| CVE-2018-19539 | MEDIUM | 6.5 | 1.9% | Nov 26, 2018 | An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/b... |
| CVE-2018-19535 | MEDIUM | 6.5 | 2.1% | Nov 26, 2018 | In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (applica... |
| CVE-2018-19517 | MEDIUM | 5.5 | 0.8% | Nov 24, 2018 | An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a m... |
| CVE-2018-19464 | MEDIUM | 4.8 | 0.5% | Nov 22, 2018 | Discuz! X3.4 allows XSS via admin.php because admincp/admincp_setting.php and template\default\common\footer.htm mishand... |
| CVE-2018-1843 | MEDIUM | 4.1 | 0.3% | Nov 21, 2018 | The Identity and Access Management (IAM) services (IBM Cloud Private 3.1.0) do not use a secure channel, such as SSL, to... |
| CVE-2018-1841 | MEDIUM | 6.2 | 0.4% | Nov 19, 2018 | IBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being world readable in boot/mas... |
| CVE-2018-7363 | MEDIUM | 4.3 | 0.9% | Nov 16, 2018 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since app... |
| CVE-2018-7361 | MEDIUM | 6.5 | 0.8% | Nov 16, 2018 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which m... |
| CVE-2018-1797 | MEDIUM | 6.3 | 2.0% | Nov 16, 2018 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attac... |
| CVE-2018-1639 | MEDIUM | 4.3 | 1.1% | Nov 16, 2018 | The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user t... |
| CVE-2018-5407 | MEDIUM | 4.7 | 3.4% | Nov 15, 2018 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks... |
| CVE-2018-1643 | MEDIUM | 6.1 | 1.5% | Nov 15, 2018 | The Installation Verification Tool of IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-sit... |
| CVE-2018-19289 | MEDIUM | 6.1 | 1.2% | Nov 15, 2018 | An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via ... |
| CVE-2018-19286 | MEDIUM | 6.1 | 0.7% | Nov 15, 2018 | The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value (along with an arbitrary ... |
| CVE-2018-7358 | MEDIUM | 6.5 | 89.6% | Nov 14, 2018 | ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper cha... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now