2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-3859 | HIGH | 7.8 | 1.8% | Jul 19, 2018 | An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially cr... |
| CVE-2018-3858 | HIGH | 7.8 | 1.5% | Jul 19, 2018 | An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted ... |
| CVE-2018-3857 | HIGH | 7.8 | 1.8% | Jul 19, 2018 | An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted ... |
| CVE-2018-0387 | HIGH | 8.8 | 3.1% | Jul 18, 2018 | A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute ... |
| CVE-2018-0348 | HIGH | 7.2 | 2.9% | Jul 18, 2018 | A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrar... |
| CVE-2018-0345 | HIGH | 8.8 | 3.0% | Jul 18, 2018 | A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated, ... |
| CVE-2018-10877 | HIGH | 7.3 | 2.3% | Jul 18, 2018 | Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating... |
| CVE-2018-3064 | HIGH | 7.1 | 3.2% | Jul 18, 2018 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected... |
| CVE-2018-2964 | HIGH | 8.3 | 2.8% | Jul 18, 2018 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affecte... |
| CVE-2018-2942 | HIGH | 8.3 | 1.8% | Jul 18, 2018 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affect... |
| CVE-2018-2941 | HIGH | 8.3 | 2.2% | Jul 18, 2018 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected ar... |
| CVE-2018-14363 | HIGH | 7.5 | 2.2% | Jul 17, 2018 | An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have u... |
| CVE-2018-14337 | HIGH | 7.5 | 1.4% | Jul 17, 2018 | The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leadi... |
| CVE-2018-1046 | HIGH | 7.8 | 1.4% | Jul 16, 2018 | pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS ... |
| CVE-2018-0385 | HIGH | 7.5 | 2.3% | Jul 16, 2018 | A vulnerability in the detection engine parsing of Security Socket Layer (SSL) protocol packets for Cisco Firepower Syst... |
| CVE-2018-10875 | HIGH | 7.8 | 0.6% | Jul 13, 2018 | A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it poin... |
| CVE-2018-12980 | HIGH | 8.8 | 30.1% | Jul 12, 2018 | An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerabilit... |
| CVE-2018-14006 | HIGH | 7.5 | 0.9% | Jul 12, 2018 | An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token (NGT), an Ethereum token ... |
| CVE-2018-14005 | HIGH | 7.5 | 0.9% | Jul 12, 2018 | An integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an Ethereum token smart co... |
| CVE-2018-14003 | HIGH | 7.5 | 1.2% | Jul 12, 2018 | An integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an Ethereum token smart co... |
| CVE-2018-0032 | HIGH | 7.5 | 1.7% | Jul 11, 2018 | The receipt of a crafted BGP UPDATE can lead to a routing process daemon (RPD) crash and restart. Repeated receipt of th... |
| CVE-2018-0030 | HIGH | 7.5 | 2.4% | Jul 11, 2018 | Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart... |
| CVE-2018-0027 | HIGH | 7.5 | 2.4% | Jul 11, 2018 | Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon (RPD) to hang or crash. When R... |
| CVE-2018-0024 | HIGH | 7.8 | 0.4% | Jul 11, 2018 | An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated u... |
| CVE-2018-3936 | HIGH | 8.8 | 2.0% | Jul 11, 2018 | In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now