2018 CVE Vulnerabilities

17,819 CVEs published in 2018.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2018-3182MEDIUM6.5Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are aff...
CVE-2018-3180MEDIUM5.6Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported vers...
CVE-2018-3174MEDIUM5.3Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are...
CVE-2018-3173MEDIUM4.9Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected...
CVE-2018-3170MEDIUM4.9Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are aff...
CVE-2018-3162MEDIUM4.9Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected...
CVE-2018-3156MEDIUM6.5Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected...
CVE-2018-3145MEDIUM6.5Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are ...
CVE-2018-3143MEDIUM6.5Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected...
CVE-2018-3137MEDIUM6.5Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that a...
CVE-2018-3133MEDIUM6.5Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are ...
CVE-2018-1777MEDIUM5.4IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows...
CVE-2018-10839MEDIUM6.5Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lea...
CVE-2018-18381MEDIUM5.4Z-BlogPHP 1.5.2.1935 (Zero) has a stored XSS Vulnerability in zb_system/function/c_system_admin.php via the Content-Type...
CVE-2018-18073MEDIUM6.3Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators...
CVE-2018-18310MEDIUM5.5An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.1...
CVE-2018-16210MEDIUM6.1WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP config...
CVE-2018-15755MEDIUM6.6Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL...
CVE-2018-14664MEDIUM5.4A flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability exists due to an improperly ...
CVE-2018-1770MEDIUM6.5IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the sys...
CVE-2018-1534MEDIUM5.4IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to...
CVE-2018-1533MEDIUM5.4IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to...
CVE-2018-1838MEDIUM5.3IBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker to obtain sensitive information ...
CVE-2018-1673MEDIUM6.1IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to em...
CVE-2018-1724MEDIUM5.9IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time d...

Check if your code is affected by 2018 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now