2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-3982 | HIGH | 7.8 | 1.3% | Oct 1, 2018 | An exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis Word Processor 3.0.2.3 a... |
| CVE-2018-3981 | HIGH | 7.8 | 2.3% | Oct 1, 2018 | An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker ca... |
| CVE-2018-3978 | HIGH | 8.8 | 1.0% | Oct 1, 2018 | An exploitable out-of-bounds write vulnerability exists in the Word Document parser of the Atlantis Word Processor 3.0.2... |
| CVE-2018-3975 | HIGH | 7.5 | 1.2% | Oct 1, 2018 | An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3... |
| CVE-2018-17848 | HIGH | 7.5 | 2.7% | Oct 1, 2018 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <math><template><mn><b></template>, leading to a "... |
| CVE-2018-17847 | HIGH | 7.5 | 2.8% | Oct 1, 2018 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading ... |
| CVE-2018-17846 | HIGH | 7.5 | 2.6% | Oct 1, 2018 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading... |
| CVE-2018-1251 | HIGH | 8.3 | 2.5% | Sep 28, 2018 | Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains a URL Redirection vulnerability. A remote unauth... |
| CVE-2018-1702 | HIGH | 7.1 | 1.9% | Sep 28, 2018 | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML Exter... |
| CVE-2018-14648 | HIGH | 7.5 | 6.2% | Sep 28, 2018 | A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in th... |
| CVE-2018-1736 | HIGH | 7.4 | 1.5% | Sep 27, 2018 | IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open red... |
| CVE-2018-17365 | HIGH | 7.5 | 2.1% | Sep 26, 2018 | SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter. |
| CVE-2018-16364 | HIGH | 8.1 | 15.1% | Sep 26, 2018 | A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execut... |
| CVE-2018-16152 | HIGH | 7.5 | 1.9% | Sep 26, 2018 | In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the R... |
| CVE-2018-16151 | HIGH | 7.5 | 1.9% | Sep 26, 2018 | In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the R... |
| CVE-2018-17555 | HIGH | 7.5 | 2.0% | Sep 26, 2018 | The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /s... |
| CVE-2018-8848 | HIGH | 7.5 | 2.0% | Sep 26, 2018 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software, upon installation, sets incorrect permi... |
| CVE-2018-10606 | HIGH | 8.8 | 1.9% | Sep 26, 2018 | WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple heap-based buffer overflow vulnerabilities that can be exploit... |
| CVE-2018-10602 | HIGH | 8.8 | 1.9% | Sep 26, 2018 | WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vulnerabilities that can be exploi... |
| CVE-2018-1785 | HIGH | 7.5 | 1.1% | Sep 26, 2018 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that co... |
| CVE-2018-1545 | HIGH | 7.5 | 1.0% | Sep 26, 2018 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that co... |
| CVE-2018-14634 | HIGH | 7.8 | 14.8% | Sep 25, 2018 | An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with a... |
| CVE-2018-1669 | HIGH | 7.1 | 1.9% | Sep 25, 2018 | IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15... |
| CVE-2018-1607 | HIGH | 7.1 | 1.9% | Sep 25, 2018 | IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to a XML External Entity... |
| CVE-2018-1588 | HIGH | 7.1 | 1.9% | Sep 25, 2018 | IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6) is vulnerable to... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now