2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-15444 | MEDIUM | 6.3 | 2.0% | Nov 8, 2018 | A vulnerability in the web-based user interface of Cisco Energy Management Suite Software could allow an authenticated, ... |
| CVE-2018-15443 | MEDIUM | 5.8 | 2.8% | Nov 8, 2018 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attack... |
| CVE-2018-15437 | MEDIUM | 5.5 | 1.0% | Nov 8, 2018 | A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoi... |
| CVE-2018-15393 | MEDIUM | 4.8 | 1.2% | Nov 8, 2018 | A vulnerability in the web-based management interface of Cisco Content Security Management Appliance (SMA) Software coul... |
| CVE-2018-19108 | MEDIUM | 6.5 | 1.9% | Nov 8, 2018 | In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service... |
| CVE-2018-19107 | MEDIUM | 6.5 | 1.8% | Nov 8, 2018 | In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from ... |
| CVE-2018-19058 | MEDIUM | 6.5 | 2.1% | Nov 7, 2018 | An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service becaus... |
| CVE-2018-16845 | MEDIUM | 6.1 | 9.8% | Nov 7, 2018 | nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to ca... |
| CVE-2018-1694 | MEDIUM | 5.9 | 1.8% | Nov 6, 2018 | IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Ratio... |
| CVE-2018-1606 | MEDIUM | 4.3 | 1.0% | Nov 6, 2018 | IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM... |
| CVE-2018-3920 | MEDIUM | 6.8 | 0.6% | Nov 2, 2018 | An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7... |
| CVE-2018-3891 | MEDIUM | 4.6 | 0.4% | Nov 2, 2018 | An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7... |
| CVE-2018-3890 | MEDIUM | 6.8 | 1.7% | Nov 2, 2018 | An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.... |
| CVE-2018-1878 | MEDIUM | 5.3 | 1.3% | Nov 2, 2018 | IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that co... |
| CVE-2018-1877 | MEDIUM | 6.2 | 0.2% | Nov 2, 2018 | IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unenc... |
| CVE-2018-1876 | MEDIUM | 6.2 | 0.4% | Nov 2, 2018 | IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control ... |
| CVE-2018-1788 | MEDIUM | 4.1 | 0.4% | Nov 2, 2018 | IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged... |
| CVE-2018-1552 | MEDIUM | 5.5 | 2.9% | Nov 2, 2018 | IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code... |
| CVE-2018-18897 | MEDIUM | 6.5 | 2.0% | Nov 2, 2018 | An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as... |
| CVE-2018-14660 | MEDIUM | 6.5 | 2.5% | Nov 1, 2018 | A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY x... |
| CVE-2018-7356 | MEDIUM | 5.6 | 0.7% | Nov 1, 2018 | All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vul... |
| CVE-2018-14661 | MEDIUM | 6.5 | 2.7% | Oct 31, 2018 | It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red ... |
| CVE-2018-16842 | MEDIUM | 4.4 | 2.1% | Oct 31, 2018 | Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function ... |
| CVE-2018-14659 | MEDIUM | 6.5 | 2.2% | Oct 31, 2018 | The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_... |
| CVE-2018-14654 | MEDIUM | 6.5 | 2.6% | Oct 31, 2018 | The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attack... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now