2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-11051 | HIGH | 7.5 | 2.6% | Jul 3, 2018 | RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA C... |
| CVE-2018-11746 | HIGH | 8.6 | 1.4% | Jul 3, 2018 | In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to usi... |
| CVE-2018-13088 | HIGH | 7.5 | 0.9% | Jul 3, 2018 | The mintToken function of a smart contract implementation for Futures Pease (FP), an Ethereum token, has an integer over... |
| CVE-2018-13087 | HIGH | 7.5 | 0.9% | Jul 3, 2018 | The mintToken function of a smart contract implementation for Coinstar (CSTR), an Ethereum token, has an integer overflo... |
| CVE-2018-13084 | HIGH | 7.5 | 0.9% | Jul 3, 2018 | The mintToken function of a smart contract implementation for Good Time Coin (GTY), an Ethereum token, has an integer ov... |
| CVE-2018-13083 | HIGH | 7.5 | 0.9% | Jul 3, 2018 | The mintToken function of a smart contract implementation for Plaza Token (PLAZA), an Ethereum token, has an integer ove... |
| CVE-2018-13082 | HIGH | 7.5 | 0.9% | Jul 3, 2018 | The mintToken function of a smart contract implementation for MODI Token (MODI), an Ethereum token, has an integer overf... |
| CVE-2018-13081 | HIGH | 7.5 | 0.9% | Jul 3, 2018 | The mintToken function of a smart contract implementation for GZS Token (GZS), an Ethereum token, has an integer overflo... |
| CVE-2018-13075 | HIGH | 7.5 | 0.9% | Jul 3, 2018 | The mintToken function of a smart contract implementation for Carbon Exchange Coin Token (CEC), an Ethereum token, has a... |
| CVE-2018-13071 | HIGH | 7.5 | 0.9% | Jul 3, 2018 | The mintToken function of a smart contract implementation for CCindex10 (T10), an Ethereum token, has an integer overflo... |
| CVE-2018-1080 | HIGH | 7.5 | 1.5% | Jul 3, 2018 | Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the... |
| CVE-2018-10596 | HIGH | 7.1 | 1.3% | Jul 3, 2018 | Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not... |
| CVE-2018-1244 | HIGH | 8.8 | 3.5% | Jul 2, 2018 | Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injectio... |
| CVE-2018-1243 | HIGH | 7.5 | 1.8% | Jul 2, 2018 | Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.... |
| CVE-2018-1212 | HIGH | 8.8 | 4.3% | Jul 2, 2018 | The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contai... |
| CVE-2018-10843 | HIGH | 8.5 | 1.4% | Jul 2, 2018 | source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.... |
| CVE-2018-9276 | HIGH | 7.2 | 87.2% | Jul 2, 2018 | An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra... |
| CVE-2018-10874 | HIGH | 7.8 | 0.5% | Jul 2, 2018 | In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command w... |
| CVE-2018-13041 | HIGH | 7.5 | 0.9% | Jul 1, 2018 | The mint function of a smart contract implementation for Link Platform (LNK), an Ethereum ERC20 token, has an integer ov... |
| CVE-2018-12997 | HIGH | 7.5 | 6.7% | Jun 29, 2018 | Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Con... |
| CVE-2018-12923 | HIGH | 7.5 | 1.3% | Jun 28, 2018 | BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request fo... |
| CVE-2018-12922 | HIGH | 7.5 | 1.6% | Jun 28, 2018 | Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configU... |
| CVE-2018-12920 | HIGH | 7.5 | 1.8% | Jun 28, 2018 | Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the... |
| CVE-2018-3841 | HIGH | 7.5 | 1.6% | Jun 26, 2018 | A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69). The vulnerability is pre... |
| CVE-2018-3840 | HIGH | 7.5 | 1.6% | Jun 26, 2018 | A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67). The vulnerability is pre... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now