2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-14652 | MEDIUM | 6.5 | 2.7% | Oct 31, 2018 | The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' trans... |
| CVE-2018-16839 | MEDIUM | 4.3 | 5.8% | Oct 31, 2018 | Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to ... |
| CVE-2018-18873 | MEDIUM | 5.5 | 1.4% | Oct 31, 2018 | An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_... |
| CVE-2018-13282 | MEDIUM | 5.6 | 1.0% | Oct 31, 2018 | Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attac... |
| CVE-2018-13281 | MEDIUM | 4.3 | 1.2% | Oct 31, 2018 | Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remo... |
| CVE-2018-0734 | MEDIUM | 5.9 | 12.2% | Oct 30, 2018 | The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could u... |
| CVE-2018-17622 | MEDIUM | 6.5 | 3.0% | Oct 29, 2018 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-1767 | MEDIUM | 6.1 | 1.4% | Oct 29, 2018 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Cachemonitor is vulnerable to cross-site scripting. This vulnera... |
| CVE-2018-1766 | MEDIUM | 5.4 | 0.7% | Oct 29, 2018 | IBM Team Concert (RTC) 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerabilit... |
| CVE-2018-0735 | MEDIUM | 5.9 | 4.7% | Oct 29, 2018 | The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could... |
| CVE-2018-18749 | MEDIUM | 5.5 | 0.7% | Oct 29, 2018 | data-tools through 2017-07-26 has an Integer Overflow leading to an incorrect end value for the write_wchars function. |
| CVE-2018-18700 | MEDIUM | 5.5 | 1.7% | Oct 29, 2018 | An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consump... |
| CVE-2018-18660 | MEDIUM | 6.1 | 0.9% | Oct 26, 2018 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-21 Refle... |
| CVE-2018-3970 | MEDIUM | 5.5 | 0.5% | Oct 25, 2018 | An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Al... |
| CVE-2018-18568 | MEDIUM | 5.9 | 0.7% | Oct 24, 2018 | Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credentia... |
| CVE-2018-18566 | MEDIUM | 5.3 | 2.8% | Oct 24, 2018 | The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive ph... |
| CVE-2018-18014 | MEDIUM | 4.8 | 0.5% | Oct 24, 2018 | * Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands ... |
| CVE-2018-1541 | MEDIUM | 5.4 | 1.0% | Oct 24, 2018 | IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users ... |
| CVE-2018-18589 | MEDIUM | 6.3 | 1.7% | Oct 23, 2018 | A potential Remote Arbitrary Code Execution vulnerability has been identified in Micro Focus' Real User Monitoring softw... |
| CVE-2018-18585 | MEDIUM | 4.3 | 3.1% | Oct 23, 2018 | chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second ... |
| CVE-2018-18584 | MEDIUM | 6.5 | 3.1% | Oct 23, 2018 | In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small... |
| CVE-2018-18545 | MEDIUM | 6.1 | 0.8% | Oct 21, 2018 | Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter. |
| CVE-2018-18521 | MEDIUM | 5.5 | 1.8% | Oct 19, 2018 | Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers t... |
| CVE-2018-18520 | MEDIUM | 6.5 | 2.8% | Oct 19, 2018 | An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-s... |
| CVE-2018-11079 | MEDIUM | 5.5 | 0.4% | Oct 18, 2018 | Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Data... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now