2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-6974 | HIGH | 8.8 | 0.5% | Oct 16, 2018 | VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Wor... |
| CVE-2018-1747 | HIGH | 7.1 | 1.9% | Oct 15, 2018 | IBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack ... |
| CVE-2018-1744 | HIGH | 7.7 | 2.6% | Oct 15, 2018 | IBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 could allow a remote attacker to traverse directories on the s... |
| CVE-2018-8890 | HIGH | 7.5 | 1.1% | Oct 12, 2018 | An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an att... |
| CVE-2018-1844 | HIGH | 7.1 | 1.9% | Oct 12, 2018 | IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to a XML External Entity Injection (XXE) attack when processin... |
| CVE-2018-18225 | HIGH | 7.5 | 2.9% | Oct 12, 2018 | In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensu... |
| CVE-2018-17929 | HIGH | 7.8 | 1.8% | Oct 11, 2018 | In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerab... |
| CVE-2018-1745 | HIGH | 7.5 | 3.9% | Oct 11, 2018 | IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to mis... |
| CVE-2018-1738 | HIGH | 7.1 | 1.1% | Oct 11, 2018 | IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive informatio... |
| CVE-2018-0052 | HIGH | 7.2 | 4.9% | Oct 10, 2018 | If RSH service is enabled on Junos OS and if the PAM authentication is disabled, a remote unauthenticated attacker can o... |
| CVE-2018-0051 | HIGH | 7.5 | 1.6% | Oct 10, 2018 | A Denial of Service vulnerability in the SIP application layer gateway (ALG) component of Junos OS based platforms allow... |
| CVE-2018-0050 | HIGH | 7.5 | 2.3% | Oct 10, 2018 | An error handling vulnerability in Routing Protocols Daemon (RPD) of Juniper Networks Junos OS allows an attacker to cau... |
| CVE-2018-0049 | HIGH | 7.5 | 2.2% | Oct 10, 2018 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to... |
| CVE-2018-0048 | HIGH | 7.5 | 2.9% | Oct 10, 2018 | A vulnerability in the Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support can allow a network b... |
| CVE-2018-0047 | HIGH | 8 | 0.9% | Oct 10, 2018 | A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow auth... |
| CVE-2018-0046 | HIGH | 8.8 | 1.6% | Oct 10, 2018 | A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the steal... |
| CVE-2018-0045 | HIGH | 8.8 | 1.1% | Oct 10, 2018 | Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon (RPD) process to crash and r... |
| CVE-2018-0043 | HIGH | 8.8 | 1.2% | Oct 10, 2018 | Receipt of a specific MPLS packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead t... |
| CVE-2018-8493 | HIGH | 7.5 | 8.4% | Oct 10, 2018 | An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, a... |
| CVE-2018-8453 | HIGH | 7.8 | 70.0% | Oct 10, 2018 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in ... |
| CVE-2018-17958 | HIGH | 7.5 | 6.2% | Oct 9, 2018 | Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used. |
| CVE-2018-18074 | HIGH | 7.5 | 7.4% | Oct 9, 2018 | The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-ho... |
| CVE-2018-14656 | HIGH | 7 | 0.5% | Oct 8, 2018 | A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel m... |
| CVE-2018-18066 | HIGH | 7.5 | 4.3% | Oct 8, 2018 | snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an un... |
| CVE-2018-3997 | HIGH | 8.8 | 3.0% | Oct 8, 2018 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, versio... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now