2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-6324 | — | — | 0.9% | Feb 16, 2018 | F-Secure Radar (on-premises) before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upo... |
| CVE-2018-6189 | — | — | 0.9% | Feb 16, 2018 | F-Secure Radar (on-premises) before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body... |
| CVE-2018-6316 | — | — | 1.9% | Feb 15, 2018 | Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authe... |
| CVE-2018-5767 | — | — | 41.4% | Feb 15, 2018 | An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code... |
| CVE-2018-7175 | — | — | 0.8% | Feb 15, 2018 | An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of... |
| CVE-2018-7174 | — | — | 0.8% | Feb 15, 2018 | An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service becau... |
| CVE-2018-7173 | — | — | 0.8% | Feb 15, 2018 | A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific... |
| CVE-2018-7169 | — | — | 1.6% | Feb 15, 2018 | An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be place... |
| CVE-2018-7054 | — | — | 2.4% | Feb 15, 2018 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconn... |
| CVE-2018-7053 | — | — | 2.5% | Feb 15, 2018 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are r... |
| CVE-2018-7052 | — | — | 2.4% | Feb 15, 2018 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available s... |
| CVE-2018-7051 | — | — | 2.5% | Feb 15, 2018 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds a... |
| CVE-2018-7050 | — | — | 2.4% | Feb 15, 2018 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an "empty" n... |
| CVE-2018-1041 | — | — | 15.8% | Feb 15, 2018 | A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an e... |
| CVE-2018-7057 | — | — | 0.7% | Feb 15, 2018 | RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter. |
| CVE-2018-7056 | — | — | 1.1% | Feb 15, 2018 | RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getG... |
| CVE-2018-7055 | — | — | 1.1% | Feb 15, 2018 | GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter. |
| CVE-2018-0869 | — | — | 2.2% | Feb 15, 2018 | SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsof... |
| CVE-2018-0866 | — | — | 44.3% | Feb 15, 2018 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Se... |
| CVE-2018-0864 | — | — | 2.6% | Feb 15, 2018 | SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due t... |
| CVE-2018-0861 | — | — | 15.1% | Feb 15, 2018 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows remote code execution, due to how the ... |
| CVE-2018-0860 | — | — | 65.9% | Feb 15, 2018 | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot... |
| CVE-2018-0859 | — | — | 18.0% | Feb 15, 2018 | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot... |
| CVE-2018-0858 | — | — | 15.1% | Feb 15, 2018 | ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scri... |
| CVE-2018-0857 | — | — | 15.7% | Feb 15, 2018 | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now