2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-20810 | — | — | 1.8% | Jun 28, 2019 | Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connec... |
| CVE-2018-20809 | — | — | 2.7% | Jun 28, 2019 | A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and ... |
| CVE-2018-20808 | — | — | 1.6% | Jun 28, 2019 | An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header s... |
| CVE-2018-20807 | — | — | 1.6% | Jun 28, 2019 | An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before ... |
| CVE-2018-17560 | — | — | 0.8% | Jun 28, 2019 | The admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger server allows stored XSS... |
| CVE-2018-17170 | — | — | 2.6% | Jun 28, 2019 | Grouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a template, leading to remot... |
| CVE-2018-14918 | — | — | 18.0% | Jun 28, 2019 | LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal. |
| CVE-2018-14916 | — | — | 17.2% | Jun 28, 2019 | LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion. |
| CVE-2018-14887 | — | — | 1.8% | Jun 28, 2019 | Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterpri... |
| CVE-2018-14886 | — | — | 1.3% | Jun 28, 2019 | The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disable... |
| CVE-2018-14885 | — | — | 2.2% | Jun 28, 2019 | Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and ... |
| CVE-2018-14868 | — | — | 0.6% | Jun 28, 2019 | Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenti... |
| CVE-2018-14867 | — | — | 1.4% | Jun 28, 2019 | Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 ... |
| CVE-2018-15519 | — | — | 1.2% | Jun 28, 2019 | Various Lexmark devices have a Buffer Overflow (issue 1 of 2). |
| CVE-2018-14919 | — | — | 1.5% | Jun 28, 2019 | LOYTEC LGATE-902 6.3.2 devices allow XSS. |
| CVE-2018-15520 | — | — | 1.2% | Jun 28, 2019 | Various Lexmark devices have a Buffer Overflow (issue 2 of 2). |
| CVE-2018-15555 | — | — | 3.0% | Jun 28, 2019 | On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and pa... |
| CVE-2018-6177 | — | — | 0.9% | Jun 27, 2019 | Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin d... |
| CVE-2018-6176 | — | — | 0.5% | Jun 27, 2019 | Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker wh... |
| CVE-2018-6171 | — | — | 0.4% | Jun 27, 2019 | Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a... |
| CVE-2018-6168 | — | — | 0.8% | Jun 27, 2019 | Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially ... |
| CVE-2018-6161 | — | — | 0.9% | Jun 27, 2019 | Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same... |
| CVE-2018-6159 | — | — | 0.8% | Jun 27, 2019 | Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obt... |
| CVE-2018-6157 | — | — | 0.8% | Jun 27, 2019 | Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap co... |
| CVE-2018-6155 | — | — | 0.7% | Jun 27, 2019 | Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to poten... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now