2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-11774 | — | — | 1.4% | Jul 29, 2019 | Apache VCL versions 2.1 through 2.5 do not properly validate form input when adding and removing VMs to and from hosts. ... |
| CVE-2018-11773 | — | — | 2.1% | Jul 29, 2019 | Apache VCL versions 2.1 through 2.5 do not properly validate form input when processing a submitted block allocation. Th... |
| CVE-2018-11772 | — | — | 1.4% | Jul 29, 2019 | Apache VCL versions 2.1 through 2.5 do not properly validate cookie input when determining what node (if any) was previo... |
| CVE-2018-17213 | — | — | 1.4% | Jul 29, 2019 | An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. A user without valid credentials can by... |
| CVE-2018-17211 | — | — | 1.7% | Jul 29, 2019 | An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. An unauthenticated attacker can view de... |
| CVE-2018-20857 | — | — | 1.2% | Jul 26, 2019 | Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <... |
| CVE-2018-20856 | — | — | 0.7% | Jul 26, 2019 | An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-afte... |
| CVE-2018-20854 | — | — | 0.4% | Jul 26, 2019 | An issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has an off-by-one error wi... |
| CVE-2018-11779 | — | — | 3.5% | Jul 26, 2019 | In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is pos... |
| CVE-2018-13897 | — | — | 0.7% | Jul 25, 2019 | Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Sna... |
| CVE-2018-3316 | — | — | 1.2% | Jul 23, 2019 | Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applicatio... |
| CVE-2018-3315 | — | — | 1.1% | Jul 23, 2019 | Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applicatio... |
| CVE-2018-3111 | — | — | 1.3% | Jul 23, 2019 | Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operati... |
| CVE-2018-2883 | — | — | 0.7% | Jul 23, 2019 | Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operati... |
| CVE-2018-18676 | — | — | 1.6% | Jul 23, 2019 | GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail... |
| CVE-2018-18675 | — | — | 1.5% | Jul 23, 2019 | GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board titl... |
| CVE-2018-18672 | — | — | 1.5% | Jul 23, 2019 | GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head conten... |
| CVE-2018-18670 | — | — | 1.5% | Jul 23, 2019 | GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" p... |
| CVE-2018-18673 | — | — | 1.5% | Jul 23, 2019 | GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parame... |
| CVE-2018-18671 | — | — | 1.5% | Jul 23, 2019 | GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head... |
| CVE-2018-18669 | — | — | 1.5% | Jul 23, 2019 | GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title conte... |
| CVE-2018-13927 | — | — | 0.2% | Jul 22, 2019 | Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel ... |
| CVE-2018-13924 | — | — | 1.1% | Jul 22, 2019 | Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdr... |
| CVE-2018-13896 | — | — | 0.2% | Jul 22, 2019 | XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to ... |
| CVE-2018-17210 | — | — | 1.7% | Jul 20, 2019 | An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and lau... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now