2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-11087 | MEDIUM | 5.9 | 1.2% | Sep 14, 2018 | Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerabil... |
| CVE-2018-1791 | MEDIUM | 4.9 | 1.0% | Sep 14, 2018 | IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation... |
| CVE-2018-1719 | MEDIUM | 5.9 | 2.4% | Sep 14, 2018 | IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions. This ... |
| CVE-2018-1698 | MEDIUM | 5.3 | 1.8% | Sep 13, 2018 | IBM Maximo Asset Management 7.6 through 7.6.3 could allow an unauthenticated attacker to obtain sensitive information fr... |
| CVE-2018-3658 | MEDIUM | 5.3 | 3.3% | Sep 12, 2018 | Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with ... |
| CVE-2018-3657 | MEDIUM | 6.7 | 0.6% | Sep 12, 2018 | Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user... |
| CVE-2018-3616 | MEDIUM | 5.9 | 2.4% | Sep 12, 2018 | Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.... |
| CVE-2018-16605 | MEDIUM | 5.4 | 0.9% | Sep 12, 2018 | D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page. |
| CVE-2018-1773 | MEDIUM | 4.3 | 1.4% | Sep 12, 2018 | IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication me... |
| CVE-2018-11078 | MEDIUM | 4 | 0.8% | Sep 11, 2018 | Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authen... |
| CVE-2018-11070 | MEDIUM | 5.9 | 1.7% | Sep 11, 2018 | RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel v... |
| CVE-2018-11069 | MEDIUM | 5.9 | 1.3% | Sep 11, 2018 | RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also known ... |
| CVE-2018-11068 | MEDIUM | 4.6 | 0.4% | Sep 11, 2018 | RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physic... |
| CVE-2018-10937 | MEDIUM | 4.6 | 1.1% | Sep 11, 2018 | A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker wi... |
| CVE-2018-2452 | MEDIUM | 6.1 | 1.4% | Sep 11, 2018 | The logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does not sufficiently encode u... |
| CVE-2018-1127 | MEDIUM | 4.2 | 1.3% | Sep 11, 2018 | Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Ses... |
| CVE-2018-1114 | MEDIUM | 6.5 | 2.3% | Sep 11, 2018 | It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized whi... |
| CVE-2018-10935 | MEDIUM | 6.5 | 1.8% | Sep 11, 2018 | A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with... |
| CVE-2018-6976 | MEDIUM | 5.3 | 1.2% | Sep 11, 2018 | The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vu... |
| CVE-2018-14636 | MEDIUM | 5.3 | 1.2% | Sep 10, 2018 | Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief windo... |
| CVE-2018-14635 | MEDIUM | 6.5 | 2.5% | Sep 10, 2018 | When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an... |
| CVE-2018-14620 | MEDIUM | 4.7 | 0.6% | Sep 10, 2018 | The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build ... |
| CVE-2018-14625 | MEDIUM | 5.3 | 0.3% | Sep 10, 2018 | A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from wi... |
| CVE-2018-16750 | MEDIUM | 6.5 | 2.9% | Sep 9, 2018 | In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found. |
| CVE-2018-16749 | MEDIUM | 6.5 | 2.3% | Sep 9, 2018 | In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now