2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-17935 | HIGH | 8.1 | 0.7% | Oct 24, 2018 | All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and r... |
| CVE-2018-16837 | HIGH | 7.8 | 0.4% | Oct 23, 2018 | Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable sit... |
| CVE-2018-18559 | HIGH | 8.1 | 2.6% | Oct 22, 2018 | In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt ... |
| CVE-2018-1850 | HIGH | 8.8 | 2.2% | Oct 22, 2018 | IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations wh... |
| CVE-2018-15756 | HIGH | 7.5 | 9.2% | Oct 18, 2018 | Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported ver... |
| CVE-2018-11080 | HIGH | 7.3 | 0.4% | Oct 18, 2018 | Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The ap... |
| CVE-2018-0443 | HIGH | 7.5 | 3.4% | Oct 17, 2018 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless ... |
| CVE-2018-0442 | HIGH | 7.5 | 3.3% | Oct 17, 2018 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless ... |
| CVE-2018-0441 | HIGH | 7.4 | 0.9% | Oct 17, 2018 | A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points (APs) Software could allow an unau... |
| CVE-2018-0417 | HIGH | 7.8 | 3.2% | Oct 17, 2018 | A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated,... |
| CVE-2018-0378 | HIGH | 8.6 | 4.5% | Oct 17, 2018 | A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running... |
| CVE-2018-0456 | HIGH | 7.7 | 3.2% | Oct 17, 2018 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could al... |
| CVE-2018-18445 | HIGH | 7.8 | 0.5% | Oct 17, 2018 | In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in t... |
| CVE-2018-0395 | HIGH | 8.8 | 0.9% | Oct 17, 2018 | A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Softw... |
| CVE-2018-16232 | HIGH | 8.8 | 7.8% | Oct 17, 2018 | An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. Th... |
| CVE-2018-10823 | HIGH | 8.8 | 78.2% | Oct 17, 2018 | An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02... |
| CVE-2018-10822 | HIGH | 7.5 | 40.1% | Oct 17, 2018 | Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L t... |
| CVE-2018-18436 | HIGH | 8.8 | 0.5% | Oct 17, 2018 | JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI. |
| CVE-2018-3955 | HIGH | 7.2 | 4.8% | Oct 17, 2018 | An exploitable operating system command injection exists in the Linksys ESeries line of routers (Linksys E1200 Firmware ... |
| CVE-2018-3954 | HIGH | 7.2 | 3.4% | Oct 17, 2018 | Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version... |
| CVE-2018-3953 | HIGH | 7.2 | 13.3% | Oct 17, 2018 | Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version... |
| CVE-2018-17911 | HIGH | 7.8 | 3.2% | Oct 17, 2018 | LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remo... |
| CVE-2018-3209 | HIGH | 8.3 | 2.7% | Oct 17, 2018 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). The supported version that is affected ... |
| CVE-2018-3169 | HIGH | 8.3 | 4.0% | Oct 17, 2018 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions t... |
| CVE-2018-3149 | HIGH | 8.3 | 7.2% | Oct 17, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported vers... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now