2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-5540 | — | — | 0.4% | Jul 19, 2018 | On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Central... |
| CVE-2018-5535 | — | — | 2.6% | Jul 19, 2018 | On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed ... |
| CVE-2018-5534 | — | — | 1.8% | Jul 19, 2018 | Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM m... |
| CVE-2018-5533 | — | — | 1.8% | Jul 19, 2018 | Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while proce... |
| CVE-2018-5532 | — | — | 1.2% | Jul 19, 2018 | On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM m... |
| CVE-2018-1587 | MEDIUM | 4.3 | 1.0% | Jul 19, 2018 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design ... |
| CVE-2018-1585 | MEDIUM | 5.4 | 0.7% | Jul 19, 2018 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design ... |
| CVE-2018-1536 | MEDIUM | 5.4 | 0.7% | Jul 19, 2018 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design ... |
| CVE-2018-1535 | MEDIUM | 5.4 | 0.7% | Jul 19, 2018 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design ... |
| CVE-2018-1529 | — | — | 1.0% | Jul 19, 2018 | IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 throu... |
| CVE-2018-14404 | MEDIUM | 6.5 | 3.7% | Jul 19, 2018 | A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 wh... |
| CVE-2018-12911 | — | — | 1.7% | Jul 19, 2018 | WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in Th... |
| CVE-2018-14403 | — | — | 2.6% | Jul 19, 2018 | MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriat... |
| CVE-2018-14402 | — | — | 1.4% | Jul 19, 2018 | axmldec 1.2.0 has an out-of-bounds write in the jitana::axml_parser::parse_start_namespace function in lib/jitana/util/a... |
| CVE-2018-14401 | — | — | 1.4% | Jul 19, 2018 | CopyData in AxmlParser.c in AXML Parser through 2018-01-04 has an out-of-bounds read. |
| CVE-2018-14399 | — | — | 1.5% | Jul 19, 2018 | libs\classes\attachment.class.php in PHPCMS 9.6.0 allows remote attackers to upload and execute arbitrary PHP code via a... |
| CVE-2018-14395 | MEDIUM | 6.5 | 2.0% | Jul 19, 2018 | libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by ... |
| CVE-2018-14394 | — | — | 1.1% | Jul 19, 2018 | libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a... |
| CVE-2018-14392 | — | — | 48.6% | Jul 19, 2018 | The New Threads plugin before 1.2 for MyBB has XSS. |
| CVE-2018-14370 | — | — | 3.4% | Jul 19, 2018 | In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in ep... |
| CVE-2018-14369 | — | — | 3.4% | Jul 19, 2018 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in... |
| CVE-2018-14368 | — | — | 3.8% | Jul 19, 2018 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinit... |
| CVE-2018-14367 | — | — | 3.3% | Jul 19, 2018 | In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/diss... |
| CVE-2018-14344 | — | — | 3.4% | Jul 19, 2018 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in ... |
| CVE-2018-14343 | — | — | 3.4% | Jul 19, 2018 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addresse... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now