2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-15964 | HIGH | 7.5 | 7.9% | Sep 25, 2018 | Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use ... |
| CVE-2018-14647 | HIGH | 7.5 | 10.9% | Sep 25, 2018 | Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy... |
| CVE-2018-14633 | HIGH | 7 | 8.7% | Sep 25, 2018 | A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a wa... |
| CVE-2018-6700 | HIGH | 7.8 | 0.9% | Sep 24, 2018 | DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local... |
| CVE-2018-15615 | HIGH | 7.2 | 0.3% | Sep 24, 2018 | A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract ... |
| CVE-2018-15613 | HIGH | 8.3 | 0.8% | Sep 21, 2018 | A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could re... |
| CVE-2018-15612 | HIGH | 8.3 | 0.4% | Sep 21, 2018 | A CSRF vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could allow an attacker to add... |
| CVE-2018-14730 | HIGH | 7.5 | 1.7% | Sep 21, 2018 | An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests i... |
| CVE-2018-3915 | HIGH | 8.2 | 0.4% | Sep 21, 2018 | An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HT... |
| CVE-2018-3914 | HIGH | 7.8 | 0.4% | Sep 21, 2018 | An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HT... |
| CVE-2018-3906 | HIGH | 8.2 | 0.4% | Sep 21, 2018 | An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTT... |
| CVE-2018-3894 | HIGH | 8.8 | 1.8% | Sep 21, 2018 | An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Sa... |
| CVE-2018-3876 | HIGH | 8.8 | 1.9% | Sep 21, 2018 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm... |
| CVE-2018-1711 | HIGH | 8.4 | 0.4% | Sep 21, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to ... |
| CVE-2018-1710 | HIGH | 8.4 | 0.5% | Sep 21, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffe... |
| CVE-2018-14645 | HIGH | 7.5 | 3.0% | Sep 21, 2018 | A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read acc... |
| CVE-2018-6505 | HIGH | 7.5 | 2.5% | Sep 20, 2018 | A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all... |
| CVE-2018-6504 | HIGH | 8.8 | 0.6% | Sep 20, 2018 | A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in... |
| CVE-2018-6500 | HIGH | 7.5 | 4.0% | Sep 20, 2018 | A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all ... |
| CVE-2018-3865 | HIGH | 8.8 | 1.8% | Sep 20, 2018 | An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsu... |
| CVE-2018-3864 | HIGH | 8.8 | 1.8% | Sep 20, 2018 | An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsu... |
| CVE-2018-3831 | HIGH | 8.8 | 2.0% | Sep 19, 2018 | Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secre... |
| CVE-2018-3827 | HIGH | 8.1 | 1.0% | Sep 19, 2018 | A sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly elasticsearch-cloud-azure) pl... |
| CVE-2018-17182 | HIGH | 7.8 | 3.2% | Sep 19, 2018 | An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles ... |
| CVE-2018-17144 | HIGH | 7.5 | 6.7% | Sep 19, 2018 | Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now