2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1708 | MEDIUM | 6.5 | 1.2% | Oct 11, 2018 | IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as p... |
| CVE-2018-1706 | MEDIUM | 5.4 | 0.7% | Oct 11, 2018 | IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary ... |
| CVE-2018-17784 | MEDIUM | 6.1 | 4.4% | Oct 10, 2018 | Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthentic... |
| CVE-2018-16758 | MEDIUM | 5.9 | 0.9% | Oct 10, 2018 | Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle at... |
| CVE-2018-16737 | MEDIUM | 5.3 | 1.5% | Oct 10, 2018 | tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation. |
| CVE-2018-12541 | MEDIUM | 6.5 | 2.7% | Oct 10, 2018 | In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http reques... |
| CVE-2018-12193 | MEDIUM | 5.5 | 0.4% | Oct 10, 2018 | Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an u... |
| CVE-2018-0063 | MEDIUM | 6.5 | 0.6% | Oct 10, 2018 | A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the mana... |
| CVE-2018-0062 | MEDIUM | 5.3 | 2.3% | Oct 10, 2018 | A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service wh... |
| CVE-2018-0061 | MEDIUM | 5.3 | 2.3% | Oct 10, 2018 | A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high C... |
| CVE-2018-0060 | MEDIUM | 5.3 | 1.1% | Oct 10, 2018 | An improper input validation weakness in the device control daemon process (dcd) of Juniper Networks Junos OS allows an ... |
| CVE-2018-0059 | MEDIUM | 5.4 | 0.8% | Oct 10, 2018 | A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authentic... |
| CVE-2018-0058 | MEDIUM | 5.9 | 1.4% | Oct 10, 2018 | Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash (vmcore), causing the device ... |
| CVE-2018-0057 | MEDIUM | 6.1 | 1.1% | Oct 10, 2018 | On MX Series and M120/M320 platforms configured in a Broadband Edge (BBE) environment, subscribers logging in with DHCP ... |
| CVE-2018-0056 | MEDIUM | 6.5 | 0.6% | Oct 10, 2018 | If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning funct... |
| CVE-2018-0055 | MEDIUM | 6.5 | 0.6% | Oct 10, 2018 | Receipt of a specially crafted DHCPv6 message destined to a Junos OS device configured as a DHCP server in a Broadband E... |
| CVE-2018-0054 | MEDIUM | 6.5 | 0.6% | Oct 10, 2018 | On QFX5000 Series and EX4600 switches, a high rate of Ethernet pause frames or an ARP packet storm received on the manag... |
| CVE-2018-0053 | MEDIUM | 6.8 | 0.5% | Oct 10, 2018 | An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allo... |
| CVE-2018-8006 | MEDIUM | 6.1 | 56.2% | Oct 10, 2018 | An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console... |
| CVE-2018-12479 | MEDIUM | 6.5 | 1.7% | Oct 9, 2018 | A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying craft... |
| CVE-2018-12478 | MEDIUM | 4.8 | 1.5% | Oct 9, 2018 | A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system... |
| CVE-2018-12474 | MEDIUM | 5.4 | 1.4% | Oct 9, 2018 | Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extra... |
| CVE-2018-18070 | MEDIUM | 5.9 | 1.1% | Oct 9, 2018 | An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining o... |
| CVE-2018-18064 | MEDIUM | 6.5 | 1.5% | Oct 8, 2018 | cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ beca... |
| CVE-2018-17060 | MEDIUM | 5.3 | 1.0% | Oct 8, 2018 | Telerik Extensions for ASP.NET MVC (all versions) does not whitelist requests, which can allow a remote attacker to acce... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now