2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-7798 | HIGH | 8.2 | 0.7% | Nov 2, 2018 | A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, which... |
| CVE-2018-3935 | HIGH | 7.5 | 2.3% | Nov 2, 2018 | An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A s... |
| CVE-2018-3899 | HIGH | 7.5 | 1.9% | Nov 2, 2018 | An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D... |
| CVE-2018-3898 | HIGH | 7.5 | 1.9% | Nov 2, 2018 | An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D... |
| CVE-2018-3892 | HIGH | 8.1 | 2.7% | Nov 2, 2018 | An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D... |
| CVE-2018-1846 | HIGH | 7.1 | 1.9% | Nov 2, 2018 | IBM Rational Engineering Lifecycle Manager 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to a XML External Enti... |
| CVE-2018-1835 | HIGH | 7.1 | 1.9% | Nov 2, 2018 | IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when ... |
| CVE-2018-3977 | HIGH | 8.8 | 3.5% | Nov 1, 2018 | An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A speci... |
| CVE-2018-3947 | HIGH | 8.1 | 1.3% | Nov 1, 2018 | An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US ... |
| CVE-2018-3928 | HIGH | 7.5 | 2.3% | Nov 1, 2018 | An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.... |
| CVE-2018-3910 | HIGH | 8 | 1.6% | Nov 1, 2018 | An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D.... |
| CVE-2018-3900 | HIGH | 8.8 | 2.6% | Nov 1, 2018 | An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D... |
| CVE-2018-15454 | HIGH | 8.6 | 4.4% | Nov 1, 2018 | A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) So... |
| CVE-2018-14651 | HIGH | 8.8 | 3.2% | Oct 31, 2018 | It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was inc... |
| CVE-2018-14653 | HIGH | 8.8 | 2.8% | Oct 31, 2018 | The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_g... |
| CVE-2018-1851 | HIGH | 7.3 | 3.9% | Oct 31, 2018 | IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to execute arbitrary code on the s... |
| CVE-2018-16469 | HIGH | 7.5 | 1.7% | Oct 30, 2018 | The merge.recursive function in the merge package <1.2.1 can be tricked into adding or modifying properties of the Objec... |
| CVE-2018-4022 | HIGH | 7.8 | 1.5% | Oct 26, 2018 | A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV (matroska) file format. A sp... |
| CVE-2018-15688 | HIGH | 8.8 | 1.7% | Oct 26, 2018 | A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory ... |
| CVE-2018-15687 | HIGH | 7 | 1.1% | Oct 26, 2018 | A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary... |
| CVE-2018-15686 | HIGH | 7.8 | 2.3% | Oct 26, 2018 | A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution ... |
| CVE-2018-3971 | HIGH | 7.8 | 0.5% | Oct 25, 2018 | An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Aler... |
| CVE-2018-17921 | HIGH | 8.8 | 0.7% | Oct 24, 2018 | SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that may allow an attacker to force-pair... |
| CVE-2018-15442 | HIGH | 7.8 | 16.0% | Oct 24, 2018 | A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, loca... |
| CVE-2018-11804 | HIGH | 7.5 | 5.7% | Oct 24, 2018 | Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to sp... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now