2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-10896 | HIGH | 7.1 | 0.4% | Aug 1, 2018 | The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init'... |
| CVE-2018-3923 | HIGH | 7.8 | 1.5% | Aug 1, 2018 | A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially ... |
| CVE-2018-3922 | HIGH | 7.8 | 1.5% | Aug 1, 2018 | A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially ... |
| CVE-2018-3921 | HIGH | 7.8 | 1.5% | Aug 1, 2018 | A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially ... |
| CVE-2018-10898 | HIGH | 8.8 | 0.9% | Jul 30, 2018 | A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director usin... |
| CVE-2018-10903 | HIGH | 7.5 | 2.6% | Jul 30, 2018 | A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a m... |
| CVE-2018-13280 | HIGH | 7.4 | 0.6% | Jul 30, 2018 | Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) ... |
| CVE-2018-14678 | HIGH | 7.8 | 0.4% | Jul 28, 2018 | An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xen_failsafe_callback en... |
| CVE-2018-1056 | HIGH | 7.8 | 1.4% | Jul 27, 2018 | An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP fil... |
| CVE-2018-10878 | HIGH | 7.8 | 0.8% | Jul 26, 2018 | A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of se... |
| CVE-2018-10901 | HIGH | 7.8 | 0.5% | Jul 26, 2018 | A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the prev... |
| CVE-2018-10900 | HIGH | 7.8 | 5.1% | Jul 26, 2018 | Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attac... |
| CVE-2018-8090 | HIGH | 7.8 | 1.2% | Jul 25, 2018 | Quick Heal Total Security 64 bit 17.00 (QHTS64.exe), (QHTSFT64.exe) - Version 10.0.1.38; Quick Heal Total Security 32 bi... |
| CVE-2018-11060 | HIGH | 8.8 | 3.0% | Jul 24, 2018 | RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authentic... |
| CVE-2018-11059 | HIGH | 8.2 | 1.4% | Jul 24, 2018 | RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malic... |
| CVE-2018-5387 | HIGH | 7.5 | 1.7% | Jul 24, 2018 | Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that ... |
| CVE-2018-10905 | HIGH | 7.8 | 0.5% | Jul 24, 2018 | CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. ... |
| CVE-2018-10604 | HIGH | 8.8 | 1.6% | Jul 24, 2018 | SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modific... |
| CVE-2018-1999002 | HIGH | 7.5 | 86.6% | Jul 23, 2018 | A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framewor... |
| CVE-2018-1999001 | HIGH | 8.8 | 18.1% | Jul 23, 2018 | A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in U... |
| CVE-2018-6683 | HIGH | 7.4 | 0.3% | Jul 23, 2018 | Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for ... |
| CVE-2018-10869 | HIGH | 7.5 | 2.8% | Jul 19, 2018 | redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker... |
| CVE-2018-3871 | HIGH | 7.8 | 1.5% | Jul 19, 2018 | An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially cra... |
| CVE-2018-3870 | HIGH | 7.8 | 1.4% | Jul 19, 2018 | An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially cra... |
| CVE-2018-3860 | HIGH | 7.8 | 1.5% | Jul 19, 2018 | An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially cr... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now