2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-6980 | HIGH | 7.2 | 1.4% | Nov 13, 2018 | VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authori... |
| CVE-2018-14657 | HIGH | 8.1 | 1.2% | Nov 13, 2018 | A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force ... |
| CVE-2018-12416 | HIGH | 7.1 | 0.6% | Nov 13, 2018 | The GridServer Broker and GridServer Director components of TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager c... |
| CVE-2018-1792 | HIGH | 8.8 | 0.5% | Nov 13, 2018 | IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local... |
| CVE-2018-15795 | HIGH | 8.1 | 1.3% | Nov 13, 2018 | Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating s... |
| CVE-2018-19183 | HIGH | 7.5 | 3.1% | Nov 12, 2018 | ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.fr... |
| CVE-2018-15796 | HIGH | 8.1 | 0.7% | Nov 9, 2018 | Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote ... |
| CVE-2018-1834 | HIGH | 7.4 | 0.4% | Nov 9, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability tha... |
| CVE-2018-1802 | HIGH | 8.4 | 0.4% | Nov 9, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared librari... |
| CVE-2018-1781 | HIGH | 8.4 | 0.5% | Nov 9, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to ... |
| CVE-2018-1780 | HIGH | 7.8 | 0.5% | Nov 9, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 inst... |
| CVE-2018-1774 | HIGH | 8.9 | 1.1% | Nov 9, 2018 | IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and analyt... |
| CVE-2018-15448 | HIGH | 7.5 | 2.2% | Nov 8, 2018 | A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, re... |
| CVE-2018-19093 | HIGH | 7.5 | 1.7% | Nov 7, 2018 | An issue has been found in libIEC61850 v1.3. It is a SEGV in ControlObjectClient_setCommandTerminationHandler in client/... |
| CVE-2018-16844 | HIGH | 7.5 | 12.4% | Nov 7, 2018 | nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive... |
| CVE-2018-16843 | HIGH | 7.5 | 47.1% | Nov 7, 2018 | nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive... |
| CVE-2018-19052 | HIGH | 7.5 | 14.1% | Nov 7, 2018 | An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ p... |
| CVE-2018-12415 | HIGH | 7.5 | 0.9% | Nov 6, 2018 | The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Ent... |
| CVE-2018-12414 | HIGH | 7.5 | 0.7% | Nov 6, 2018 | The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezv... |
| CVE-2018-12413 | HIGH | 7.5 | 0.9% | Nov 6, 2018 | The Schema repository server (tibschemad) component of TIBCO Software Inc.'s TIBCO Messaging - Apache Kafka Distribution... |
| CVE-2018-12412 | HIGH | 7.5 | 0.9% | Nov 6, 2018 | The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer ... |
| CVE-2018-12411 | HIGH | 7.5 | 0.9% | Nov 6, 2018 | The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpa... |
| CVE-2018-16472 | HIGH | 7.5 | 2.1% | Nov 6, 2018 | A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.... |
| CVE-2018-9363 | HIGH | 8.4 | 0.4% | Nov 6, 2018 | In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no... |
| CVE-2018-16847 | HIGH | 7.8 | 0.5% | Nov 2, 2018 | An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cm... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now