2018 CVE Vulnerabilities

17,817 CVEs published in 2018.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2018-25121MEDIUM5.4Nagios XI versions prior to 5.4.13 are vulnerable to cross-site scripting (XSS) via the Views page of the web interface....
CVE-2018-25119MEDIUM6.1Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the "fusionwindow" parameter. Ins...
CVE-2018-25111MEDIUM4.4django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.
CVE-2018-25109MEDIUM6.4A vulnerability has been found in Nintendo Animal Crossing, Doubutsu no Mori+ and Doubutsu no Mori e+ 1.00/1.01 on GameC...
CVE-2018-9378MEDIUM6.2In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninit...
CVE-2018-9406MEDIUM5.5In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead...
CVE-2018-9405MEDIUM6.7In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This co...
CVE-2018-9447MEDIUM5.5In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to...
CVE-2018-9384MEDIUM4.4In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local in...
CVE-2018-9383MEDIUM4.4In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could ...
CVE-2018-9379MEDIUM5.5In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a c...
CVE-2018-25106MEDIUM6.3A vulnerability, which was classified as critical, has been found in webuidesigning NebulaX Theme up to 5.0 on WordPress...
CVE-2018-9391MEDIUM6.7In update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wo...
CVE-2018-9390MEDIUM6.7In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bo...
CVE-2018-9386MEDIUM6.7In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a missing bound...
CVE-2018-9463MEDIUM6.7In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible out of bounds write due to an incorrect ...
CVE-2018-9462MEDIUM6.7In store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lea...
CVE-2018-9439MEDIUM6.7In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after-free due to improper lock...
CVE-2018-9416MEDIUM6.7In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead ...
CVE-2018-9408MEDIUM4.4In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check...
CVE-2018-9407MEDIUM5.5In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to ...
CVE-2018-9404MEDIUM6.7In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to lo...
CVE-2018-9403MEDIUM6.7In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overf...
CVE-2018-9400MEDIUM6.7In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_to...
CVE-2018-9399MEDIUM6.7In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could lead to local escalatio...

Check if your code is affected by 2018 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now