2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-1203 | — | — | 2.2% | Mar 26, 2018 | In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0 ... |
| CVE-2018-1202 | — | — | 2.2% | Mar 26, 2018 | Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is af... |
| CVE-2018-1201 | — | — | 1.9% | Mar 26, 2018 | Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers... |
| CVE-2018-1189 | — | — | 28.7% | Mar 26, 2018 | Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers... |
| CVE-2018-1188 | — | — | 1.9% | Mar 26, 2018 | Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is af... |
| CVE-2018-1187 | — | — | 1.9% | Mar 26, 2018 | Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site... |
| CVE-2018-1186 | — | — | 1.9% | Mar 26, 2018 | Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers... |
| CVE-2018-8937 | — | — | 0.7% | Mar 26, 2018 | An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url... |
| CVE-2018-1303 | — | — | 70.8% | Mar 26, 2018 | A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out ... |
| CVE-2018-1302 | — | — | 13.4% | Mar 26, 2018 | When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have writt... |
| CVE-2018-1301 | — | — | 15.6% | Mar 26, 2018 | A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound ac... |
| CVE-2018-1283 | — | — | 10.1% | Mar 26, 2018 | In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (Session... |
| CVE-2018-5474 | — | — | 6.2% | Mar 26, 2018 | Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remot... |
| CVE-2018-5472 | — | — | 4.7% | Mar 26, 2018 | Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could a... |
| CVE-2018-5470 | — | — | 0.6% | Mar 26, 2018 | Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that ... |
| CVE-2018-5468 | — | — | 4.7% | Mar 26, 2018 | Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an ... |
| CVE-2018-5466 | — | — | 2.0% | Mar 26, 2018 | Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate vulnerability this could... |
| CVE-2018-5464 | — | — | 2.0% | Mar 26, 2018 | Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate vulnerability this could ... |
| CVE-2018-5462 | — | — | 2.0% | Mar 26, 2018 | Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability th... |
| CVE-2018-5458 | — | — | 1.3% | Mar 26, 2018 | Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could... |
| CVE-2018-5454 | — | — | 3.5% | Mar 26, 2018 | Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabl... |
| CVE-2018-9020 | — | — | 1.1% | Mar 26, 2018 | The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Go... |
| CVE-2018-9018 | — | — | 3.2% | Mar 25, 2018 | In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could... |
| CVE-2018-8979 | — | — | 1.3% | Mar 25, 2018 | Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the cre... |
| CVE-2018-8978 | — | — | 0.5% | Mar 25, 2018 | Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI. |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now