2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-12895 | HIGH | 8.8 | 62.6% | Jun 26, 2018 | WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/... |
| CVE-2018-4845 | HIGH | 8.8 | 1.2% | Jun 26, 2018 | A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All vers... |
| CVE-2018-1000535 | HIGH | 7.5 | 1.8% | Jun 26, 2018 | lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module tha... |
| CVE-2018-1000518 | HIGH | 7.5 | 1.8% | Jun 26, 2018 | aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vuln... |
| CVE-2018-1000500 | HIGH | 8.1 | 2.5% | Jun 26, 2018 | Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbi... |
| CVE-2018-0598 | HIGH | 7.8 | 9.0% | Jun 26, 2018 | Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows ... |
| CVE-2018-11040 | HIGH | 7.5 | 3.2% | Jun 25, 2018 | Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web app... |
| CVE-2018-12613 | HIGH | 8.8 | 98.4% | Jun 21, 2018 | An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute... |
| CVE-2018-12617 | HIGH | 7.5 | 25.3% | Jun 21, 2018 | qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 h... |
| CVE-2018-0358 | HIGH | 7.5 | 3.4% | Jun 21, 2018 | A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could ... |
| CVE-2018-0337 | HIGH | 7.8 | 0.3% | Jun 21, 2018 | A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local... |
| CVE-2018-0313 | HIGH | 8.8 | 4.0% | Jun 21, 2018 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a ma... |
| CVE-2018-0306 | HIGH | 7.8 | 0.6% | Jun 21, 2018 | A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a comm... |
| CVE-2018-0302 | HIGH | 7.8 | 0.4% | Jun 21, 2018 | A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authe... |
| CVE-2018-0307 | HIGH | 7.8 | 0.6% | Jun 20, 2018 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-inj... |
| CVE-2018-5428 | HIGH | 8.8 | 3.0% | Jun 20, 2018 | The version control adapters component of TIBCO Data Virtualization (formerly known as Cisco Information Server) contain... |
| CVE-2018-10841 | HIGH | 8.8 | 1.3% | Jun 20, 2018 | glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could u... |
| CVE-2018-12594 | HIGH | 7.5 | 1.4% | Jun 20, 2018 | Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct reques... |
| CVE-2018-1132 | HIGH | 7.5 | 2.9% | Jun 20, 2018 | A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Attackers can SQL inject the component's database (SQLite) wi... |
| CVE-2018-12590 | HIGH | 7.2 | 1.7% | Jun 20, 2018 | Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability du... |
| CVE-2018-11116 | HIGH | 8.8 | 2.4% | Jun 19, 2018 | OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authentic... |
| CVE-2018-10811 | HIGH | 7.5 | 7.4% | Jun 19, 2018 | strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable. |
| CVE-2018-8727 | HIGH | 7.5 | 7.8% | Jun 19, 2018 | Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system ... |
| CVE-2018-1061 | HIGH | 7.5 | 4.9% | Jun 19, 2018 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the dif... |
| CVE-2018-12565 | HIGH | 8.8 | 2.5% | Jun 19, 2018 | An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() wh... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now