2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-3933 | HIGH | 8.8 | 2.1% | Jul 11, 2018 | An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House O... |
| CVE-2018-3932 | HIGH | 8.8 | 2.5% | Jul 11, 2018 | An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna... |
| CVE-2018-3931 | HIGH | 7.8 | 2.5% | Jul 11, 2018 | In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft ... |
| CVE-2018-3930 | HIGH | 7.8 | 1.6% | Jul 11, 2018 | In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft ... |
| CVE-2018-3929 | HIGH | 7.8 | 2.5% | Jul 11, 2018 | An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Se... |
| CVE-2018-8298 | HIGH | 7.5 | 75.3% | Jul 11, 2018 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, ... |
| CVE-2018-8172 | HIGH | 7.8 | 31.0% | Jul 11, 2018 | A remote code execution vulnerability exists in Visual Studio software when the software does not check the source marku... |
| CVE-2018-3652 | HIGH | 7.6 | 0.4% | Jul 10, 2018 | Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 ... |
| CVE-2018-3628 | HIGH | 8.8 | 1.4% | Jul 10, 2018 | Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine F... |
| CVE-2018-3627 | HIGH | 8.2 | 0.5% | Jul 10, 2018 | Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local p... |
| CVE-2018-13844 | HIGH | 7.5 | 1.4% | Jul 10, 2018 | An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the... |
| CVE-2018-10891 | HIGH | 7.3 | 2.1% | Jul 10, 2018 | A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was po... |
| CVE-2018-1566 | HIGH | 8.4 | 0.5% | Jul 10, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to ... |
| CVE-2018-1487 | HIGH | 8.4 | 0.4% | Jul 10, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared librarie... |
| CVE-2018-1458 | HIGH | 7.4 | 1.7% | Jul 10, 2018 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could allow a local user to e... |
| CVE-2018-10887 | HIGH | 8.1 | 2.1% | Jul 10, 2018 | A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta... |
| CVE-2018-6967 | HIGH | 8.1 | 2.3% | Jul 9, 2018 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain... |
| CVE-2018-6966 | HIGH | 8.1 | 2.3% | Jul 9, 2018 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain... |
| CVE-2018-6965 | HIGH | 8.1 | 3.0% | Jul 9, 2018 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain... |
| CVE-2018-13790 | HIGH | 7.2 | 1.0% | Jul 9, 2018 | A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to at... |
| CVE-2018-5002 | HIGH | 7.8 | 25.4% | Jul 9, 2018 | Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploita... |
| CVE-2018-4990 | HIGH | 8.8 | 40.5% | Jul 9, 2018 | Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier... |
| CVE-2018-4858 | HIGH | 7.8 | 1.8% | Jul 9, 2018 | A vulnerability has been identified in IEC 61850 system configurator (All versions < V5.80), DIGSI 5 (affected as IEC 61... |
| CVE-2018-13781 | HIGH | 7.5 | 1.4% | Jul 9, 2018 | The mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow that all... |
| CVE-2018-13760 | HIGH | 7.5 | 1.4% | Jul 9, 2018 | The mintToken function of a smart contract implementation for MoneyChainNet (MCN), an Ethereum token, has an integer ove... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now