2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-10884 | HIGH | 8.8 | 0.9% | Aug 22, 2018 | Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF) in awx/api/authenticati... |
| CVE-2018-11776 | HIGH | 8.1 | 100.0% | Aug 22, 2018 | Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN... |
| CVE-2018-10902 | HIGH | 7.8 | 0.5% | Aug 21, 2018 | It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc ... |
| CVE-2018-6557 | HIGH | 7 | 0.4% | Aug 21, 2018 | The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2, and Ubuntu 18.10 before 10.1u... |
| CVE-2018-7166 | HIGH | 7.5 | 2.8% | Aug 21, 2018 | In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitia... |
| CVE-2018-12115 | HIGH | 7.5 | 8.1% | Aug 21, 2018 | In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under... |
| CVE-2018-1656 | HIGH | 7.4 | 4.5% | Aug 20, 2018 | The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , ... |
| CVE-2018-1000632 | HIGH | 7.5 | 6.6% | Aug 20, 2018 | dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addEleme... |
| CVE-2018-15573 | HIGH | 8.8 | 2.1% | Aug 20, 2018 | An issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read an... |
| CVE-2018-15560 | HIGH | 7.5 | 1.7% | Aug 20, 2018 | PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and ... |
| CVE-2018-15505 | HIGH | 7.5 | 2.2% | Aug 18, 2018 | An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially... |
| CVE-2018-15504 | HIGH | 7.5 | 2.8% | Aug 18, 2018 | An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP reque... |
| CVE-2018-15501 | HIGH | 7.5 | 4.3% | Aug 18, 2018 | In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a craf... |
| CVE-2018-15471 | HIGH | 7.8 | 0.4% | Aug 17, 2018 | An issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux kernel through 4.18.1,... |
| CVE-2018-5546 | HIGH | 7.8 | 0.5% | Aug 17, 2018 | The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a ... |
| CVE-2018-10873 | HIGH | 8.3 | 3.9% | Aug 17, 2018 | A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages l... |
| CVE-2018-1712 | HIGH | 8.6 | 0.7% | Aug 16, 2018 | IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, us... |
| CVE-2018-0427 | HIGH | 8.8 | 6.1% | Aug 15, 2018 | A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authentic... |
| CVE-2018-0418 | HIGH | 8.6 | 4.0% | Aug 15, 2018 | A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services ... |
| CVE-2018-0409 | HIGH | 7.5 | 3.5% | Aug 15, 2018 | A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) ... |
| CVE-2018-8414 | HIGH | 8.8 | 74.0% | Aug 15, 2018 | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows ... |
| CVE-2018-8406 | HIGH | 7.8 | 3.4% | Aug 15, 2018 | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obje... |
| CVE-2018-8405 | HIGH | 7.8 | 3.4% | Aug 15, 2018 | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obje... |
| CVE-2018-8375 | HIGH | 7.8 | 16.2% | Aug 15, 2018 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje... |
| CVE-2018-8373 | HIGH | 7.5 | 61.9% | Aug 15, 2018 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now