2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-2790 | LOW | 3.1 | 5.1% | Apr 19, 2018 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions ... |
| CVE-2018-2412 | LOW | 3.8 | 1.4% | Apr 10, 2018 | SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in e... |
| CVE-2018-6659 | LOW | 3.7 | 1.0% | Apr 2, 2018 | Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows r... |
| CVE-2018-7676 | LOW | 3.9 | 0.9% | Mar 28, 2018 | The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information. |
| CVE-2018-7674 | LOW | 2.1 | 0.8% | Mar 28, 2018 | The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection. |
| CVE-2018-1350 | LOW | 2.3 | 0.8% | Mar 26, 2018 | The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumerat... |
| CVE-2018-1349 | LOW | 2.3 | 0.8% | Mar 26, 2018 | The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or confi... |
| CVE-2018-1346 | LOW | 3.1 | 1.3% | Mar 21, 2018 | Addresses denial of service attack to eDirectory versions prior to 9.1. |
| CVE-2018-1344 | LOW | 3.1 | 0.9% | Mar 21, 2018 | Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1 |
| CVE-2018-5552 | LOW | 2.9 | 0.2% | Mar 19, 2018 | Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a ... |
| CVE-2018-0878 | LOW | 3.1 | 21.9% | Mar 14, 2018 | Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Window... |
| CVE-2018-7678 | LOW | 3.5 | 0.6% | Mar 14, 2018 | A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4. |
| CVE-2018-7677 | LOW | 3.5 | 0.5% | Mar 14, 2018 | A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component. |
| CVE-2018-0218 | LOW | 3.3 | 1.5% | Mar 8, 2018 | A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could all... |
| CVE-2018-0207 | LOW | 3.3 | 1.5% | Mar 8, 2018 | A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could all... |
| CVE-2018-7675 | LOW | 2.8 | 0.5% | Mar 7, 2018 | In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks w... |
| CVE-2018-5730 | LOW | 3.8 | 2.3% | Mar 6, 2018 | MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to c... |
| CVE-2018-1000030 | LOW | 3.6 | 1.2% | Feb 8, 2018 | Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 ... |
| CVE-2018-1000002 | LOW | 3.7 | 1.1% | Jan 22, 2018 | Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in ... |
| CVE-2018-0106 | LOW | 3.3 | 0.3% | Jan 18, 2018 | A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local... |
| CVE-2018-2579 | LOW | 3.7 | 4.1% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported... |
| CVE-2018-5278 | LOW | 3.3 | 0.4% | Jan 8, 2018 | In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now