2018 CVE Vulnerabilities

17,817 CVEs published in 2018.

CVE IDSeverityCVSSDescription
CVE-2018-12095A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. The vulnerabil...
CVE-2018-12094Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows remote attackers to inject arb...
CVE-2018-12093tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h.
CVE-2018-12092tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
CVE-2018-12090There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introd...
CVE-2018-12089In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cl...
CVE-2018-12025The transferFrom function of a smart contract implementation for FuturXE (FXE), an Ethereum ERC20 token, allows attacker...
CVE-2018-10360The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (...
CVE-2018-12088S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the b...
CVE-2018-12085Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vu...
CVE-2018-12020HIGH7.5mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allo...
CVE-2018-0225The Enterprise Console in Cisco AppDynamics App iQ Platform before 4.4.3.10598 (HF4) allows SQL injection, aka the Secur...
CVE-2018-1281The clustered setup of Apache MXNet allows users to specify which IP address and port the scheduler will listen on via t...
CVE-2018-4253An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" compon...
CVE-2018-4252An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component....
CVE-2018-4251An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" c...
CVE-2018-4250An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" compon...
CVE-2018-4249An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b...
CVE-2018-4247An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The is...
CVE-2018-4246An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud...
CVE-2018-4244An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri Contacts" c...
CVE-2018-4243An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b...
CVE-2018-4242An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Hypervisor"...
CVE-2018-4241An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b...
CVE-2018-4240An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b...

Check if your code is affected by 2018 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now