2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-7357 | MEDIUM | 6.5 | 87.9% | Nov 14, 2018 | ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper acc... |
| CVE-2018-8568 | MEDIUM | 5.4 | 2.2% | Nov 14, 2018 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c... |
| CVE-2018-14658 | MEDIUM | 6.1 | 1.1% | Nov 13, 2018 | A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.key... |
| CVE-2018-14655 | MEDIUM | 4.6 | 1.2% | Nov 13, 2018 | A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible ... |
| CVE-2018-1808 | MEDIUM | 4.3 | 1.6% | Nov 13, 2018 | IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input contr... |
| CVE-2018-15452 | MEDIUM | 5.5 | 0.3% | Nov 13, 2018 | A vulnerability in the DLL loading component of Cisco Advanced Malware Protection (AMP) for Endpoints on Windows could a... |
| CVE-2018-18591 | MEDIUM | 6.8 | 1.0% | Nov 13, 2018 | A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9... |
| CVE-2018-19217 | MEDIUM | 6.5 | 1.1% | Nov 12, 2018 | In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to... |
| CVE-2018-19211 | MEDIUM | 5.5 | 0.9% | Nov 12, 2018 | In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a den... |
| CVE-2018-19208 | MEDIUM | 6.5 | 1.5% | Nov 12, 2018 | In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListe... |
| CVE-2018-1884 | MEDIUM | 4.8 | 2.7% | Nov 12, 2018 | IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability wh... |
| CVE-2018-1798 | MEDIUM | 6.1 | 1.5% | Nov 12, 2018 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows... |
| CVE-2018-1786 | MEDIUM | 5.3 | 2.4% | Nov 12, 2018 | IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. ... |
| CVE-2018-19139 | MEDIUM | 5.5 | 1.7% | Nov 9, 2018 | An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jp... |
| CVE-2018-14644 | MEDIUM | 5.3 | 4.8% | Nov 9, 2018 | An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query... |
| CVE-2018-1872 | MEDIUM | 5.4 | 1.0% | Nov 9, 2018 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar... |
| CVE-2018-1857 | MEDIUM | 4.8 | 1.7% | Nov 9, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow a user to bypass FGAC control and gai... |
| CVE-2018-1799 | MEDIUM | 6.2 | 0.4% | Nov 9, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local unprivil... |
| CVE-2018-1684 | MEDIUM | 5.3 | 1.3% | Nov 9, 2018 | IBM WebSphere MQ 8.0 through 9.1 is vulnerable to a error with MQTT topic string publishing that can cause a denial of s... |
| CVE-2018-15451 | MEDIUM | 5.4 | 0.9% | Nov 8, 2018 | A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remot... |
| CVE-2018-15450 | MEDIUM | 6.5 | 2.5% | Nov 8, 2018 | A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker... |
| CVE-2018-15449 | MEDIUM | 4.3 | 1.7% | Nov 8, 2018 | A vulnerability in the web-based management interface of Cisco Video Surveillance Media Server could allow an unauthenti... |
| CVE-2018-15447 | MEDIUM | 6.5 | 1.7% | Nov 8, 2018 | A vulnerability in the web framework code of Cisco Integrated Management Controller (IMC) Supervisor could allow an unau... |
| CVE-2018-15446 | MEDIUM | 5.3 | 2.2% | Nov 8, 2018 | A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive info... |
| CVE-2018-15445 | MEDIUM | 6.3 | 0.9% | Nov 8, 2018 | A vulnerability in the web-based management interface of Cisco Energy Management Suite Software could allow an authentic... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now