2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-4010 | HIGH | 7.8 | 4.7% | Sep 7, 2018 | An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A special... |
| CVE-2018-3952 | HIGH | 8.8 | 0.9% | Sep 7, 2018 | An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafte... |
| CVE-2018-1789 | HIGH | 8.4 | 1.2% | Sep 7, 2018 | IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a ser... |
| CVE-2018-1756 | HIGH | 7.5 | 10.6% | Sep 7, 2018 | IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker co... |
| CVE-2018-5391 | HIGH | 7.5 | 24.6% | Sep 6, 2018 | The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packet... |
| CVE-2018-1695 | HIGH | 7.3 | 2.2% | Sep 6, 2018 | IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to con... |
| CVE-2018-14632 | HIGH | 7.7 | 1.9% | Sep 6, 2018 | An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Contai... |
| CVE-2018-14624 | HIGH | 7.5 | 2.5% | Sep 6, 2018 | A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the ... |
| CVE-2018-16552 | HIGH | 8.8 | 0.6% | Sep 5, 2018 | MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs. |
| CVE-2018-14618 | HIGH | 7.5 | 10.8% | Sep 5, 2018 | curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl... |
| CVE-2018-10929 | HIGH | 8.8 | 3.3% | Sep 4, 2018 | A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this flaw... |
| CVE-2018-10928 | HIGH | 8.8 | 2.7% | Sep 4, 2018 | A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to... |
| CVE-2018-10927 | HIGH | 8.1 | 2.8% | Sep 4, 2018 | A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw... |
| CVE-2018-10926 | HIGH | 8.8 | 2.6% | Sep 4, 2018 | A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use ... |
| CVE-2018-10923 | HIGH | 8.1 | 1.7% | Sep 4, 2018 | It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node... |
| CVE-2018-10911 | HIGH | 7.5 | 3.1% | Sep 4, 2018 | A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attacke... |
| CVE-2018-10907 | HIGH | 8.8 | 3.4% | Sep 4, 2018 | It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc... |
| CVE-2018-10904 | HIGH | 8.8 | 3.0% | Sep 4, 2018 | It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribu... |
| CVE-2018-16384 | HIGH | 7.5 | 1.7% | Sep 3, 2018 | A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through v3.1.0... |
| CVE-2018-11054 | HIGH | 7.5 | 3.2% | Aug 31, 2018 | RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use ma... |
| CVE-2018-3787 | HIGH | 7.5 | 2.0% | Aug 31, 2018 | Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server. |
| CVE-2018-16276 | HIGH | 7.8 | 0.4% | Aug 31, 2018 | An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers cou... |
| CVE-2018-7685 | HIGH | 7.8 | 0.3% | Aug 31, 2018 | The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the c... |
| CVE-2018-6499 | HIGH | 7.1 | 2.4% | Aug 30, 2018 | Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2... |
| CVE-2018-6498 | HIGH | 8.8 | 3.1% | Aug 30, 2018 | Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now