2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-16261 | — | — | 0.2% | Sep 6, 2018 | In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dy... |
| CVE-2018-15865 | — | — | 0.3% | Sep 6, 2018 | The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability. |
| CVE-2018-15749 | — | — | 0.3% | Sep 6, 2018 | The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability. |
| CVE-2018-15726 | — | — | 0.3% | Sep 6, 2018 | The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability. |
| CVE-2018-14366 | — | — | 1.5% | Sep 6, 2018 | download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure thr... |
| CVE-2018-12234 | — | — | 2.9% | Sep 6, 2018 | A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied ... |
| CVE-2018-16645 | — | — | 3.2% | Sep 6, 2018 | There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/d... |
| CVE-2018-16644 | — | — | 3.6% | Sep 6, 2018 | There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ... |
| CVE-2018-16643 | — | — | 3.1% | Sep 6, 2018 | The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTIm... |
| CVE-2018-16642 | — | — | 3.0% | Sep 6, 2018 | The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via ... |
| CVE-2018-16641 | — | — | 2.0% | Sep 6, 2018 | ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c. |
| CVE-2018-16640 | — | — | 2.5% | Sep 6, 2018 | ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c. |
| CVE-2018-5391 | HIGH | 7.5 | 24.6% | Sep 6, 2018 | The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packet... |
| CVE-2018-5389 | — | — | 3.0% | Sep 6, 2018 | The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair ac... |
| CVE-2018-5005 | — | — | 3.9% | Sep 6, 2018 | Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful expl... |
| CVE-2018-16622 | — | — | 0.8% | Sep 6, 2018 | Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to i... |
| CVE-2018-1000670 | — | — | 0.6% | Sep 6, 2018 | KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting ... |
| CVE-2018-1000669 | — | — | 0.5% | Sep 6, 2018 | KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Request Fo... |
| CVE-2018-1000801 | — | — | 1.8% | Sep 6, 2018 | okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" i... |
| CVE-2018-1000671 | — | — | 4.0% | Sep 6, 2018 | sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ... |
| CVE-2018-1000800 | — | — | 1.7% | Sep 6, 2018 | zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get(... |
| CVE-2018-1000668 | — | — | 0.9% | Sep 6, 2018 | jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c... |
| CVE-2018-1000667 | — | — | 1.2% | Sep 6, 2018 | NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handli... |
| CVE-2018-1000666 | — | — | 8.1% | Sep 6, 2018 | GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: I... |
| CVE-2018-1000665 | — | — | 1.3% | Sep 6, 2018 | Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in u... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now