2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-6690 | HIGH | 7.1 | 0.3% | Sep 18, 2018 | Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and ... |
| CVE-2018-13982 | HIGH | 7.5 | 3.5% | Sep 18, 2018 | Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insuff... |
| CVE-2018-11071 | HIGH | 7.5 | 1.8% | Sep 18, 2018 | Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonS... |
| CVE-2018-14631 | HIGH | 8.8 | 1.8% | Sep 17, 2018 | moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently fil... |
| CVE-2018-14630 | HIGH | 8.8 | 4.4% | Sep 17, 2018 | moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional re... |
| CVE-2018-1223 | HIGH | 8.8 | 0.9% | Sep 17, 2018 | Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to applic... |
| CVE-2018-17143 | HIGH | 7.5 | 2.8% | Sep 17, 2018 | The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a ... |
| CVE-2018-17142 | HIGH | 7.5 | 2.8% | Sep 17, 2018 | The html package (aka x/net/html) through 2018-09-17 in Go mishandles <math><template><mo><template>, leading to a "pani... |
| CVE-2018-17095 | HIGH | 8.8 | 4.7% | Sep 16, 2018 | An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3... |
| CVE-2018-17075 | HIGH | 7.5 | 2.8% | Sep 16, 2018 | The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: ... |
| CVE-2018-14638 | HIGH | 7.5 | 2.6% | Sep 14, 2018 | A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function ... |
| CVE-2018-8440 | HIGH | 7.8 | 18.5% | Sep 13, 2018 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A... |
| CVE-2018-8409 | HIGH | 7.5 | 6.6% | Sep 13, 2018 | A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines ... |
| CVE-2018-16981 | HIGH | 8.8 | 1.6% | Sep 12, 2018 | stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__o... |
| CVE-2018-15610 | HIGH | 7.3 | 1.8% | Sep 12, 2018 | A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arb... |
| CVE-2018-3885 | HIGH | 8.8 | 0.9% | Sep 12, 2018 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web re... |
| CVE-2018-3884 | HIGH | 8.8 | 0.9% | Sep 12, 2018 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web re... |
| CVE-2018-3883 | HIGH | 8.8 | 0.9% | Sep 12, 2018 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web re... |
| CVE-2018-3882 | HIGH | 8.8 | 0.9% | Sep 12, 2018 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web re... |
| CVE-2018-10893 | HIGH | 7.6 | 2.4% | Sep 11, 2018 | Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames.... |
| CVE-2018-10853 | HIGH | 7 | 0.5% | Sep 11, 2018 | A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrst... |
| CVE-2018-1571 | HIGH | 8.8 | 4.7% | Sep 11, 2018 | IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sendi... |
| CVE-2018-3897 | HIGH | 8.8 | 1.5% | Sep 10, 2018 | An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of S... |
| CVE-2018-3896 | HIGH | 8.8 | 1.5% | Sep 10, 2018 | An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of S... |
| CVE-2018-15552 | HIGH | 7.5 | 1.2% | Sep 7, 2018 | The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now