2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-13822 | HIGH | 7.5 | 1.3% | Aug 30, 2018 | Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, all... |
| CVE-2018-14622 | HIGH | 7.5 | 3.9% | Aug 30, 2018 | A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt... |
| CVE-2018-10936 | HIGH | 8.1 | 2.9% | Aug 30, 2018 | A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check t... |
| CVE-2018-14619 | HIGH | 7.8 | 0.4% | Aug 30, 2018 | A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was bei... |
| CVE-2018-16057 | HIGH | 7.5 | 3.4% | Aug 30, 2018 | In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed... |
| CVE-2018-7792 | HIGH | 7.5 | 1.1% | Aug 29, 2018 | A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all ref... |
| CVE-2018-7789 | HIGH | 7.5 | 2.8% | Aug 29, 2018 | An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 produc... |
| CVE-2018-3916 | HIGH | 7.8 | 0.4% | Aug 28, 2018 | An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HT... |
| CVE-2018-3908 | HIGH | 7.5 | 1.3% | Aug 28, 2018 | An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ET... |
| CVE-2018-3895 | HIGH | 8.8 | 1.8% | Aug 28, 2018 | An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Sa... |
| CVE-2018-3918 | HIGH | 7.5 | 1.0% | Aug 27, 2018 | An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20... |
| CVE-2018-3893 | HIGH | 8.8 | 1.8% | Aug 27, 2018 | An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Sa... |
| CVE-2018-15877 | HIGH | 8.8 | 77.0% | Aug 26, 2018 | The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell meta... |
| CVE-2018-11654 | HIGH | 7.5 | 2.0% | Aug 24, 2018 | Information disclosure in Netwave IP camera at get_status.cgi (via HTTP on port 8000) allows an unauthenticated attacker... |
| CVE-2018-3909 | HIGH | 8.6 | 1.3% | Aug 24, 2018 | An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ET... |
| CVE-2018-15822 | HIGH | 7.5 | 3.3% | Aug 23, 2018 | The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, le... |
| CVE-2018-3911 | HIGH | 8.6 | 1.2% | Aug 23, 2018 | An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 -... |
| CVE-2018-14797 | HIGH | 7.8 | 1.7% | Aug 23, 2018 | Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the se... |
| CVE-2018-14791 | HIGH | 7.8 | 0.4% | Aug 23, 2018 | Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable a... |
| CVE-2018-3912 | HIGH | 7.8 | 0.4% | Aug 23, 2018 | On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts... |
| CVE-2018-3925 | HIGH | 8.5 | 1.5% | Aug 23, 2018 | An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server o... |
| CVE-2018-3879 | HIGH | 8.8 | 1.6% | Aug 23, 2018 | An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sma... |
| CVE-2018-3833 | HIGH | 7.5 | 1.1% | Aug 23, 2018 | An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrad... |
| CVE-2018-14787 | HIGH | 7.8 | 0.4% | Aug 22, 2018 | In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an... |
| CVE-2018-1139 | HIGH | 8.1 | 3.1% | Aug 22, 2018 | A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now