2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-7689 | HIGH | 7.1 | 1.2% | Jun 7, 2018 | Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed aut... |
| CVE-2018-7688 | HIGH | 7.1 | 1.1% | Jun 7, 2018 | A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated ... |
| CVE-2018-0296 | HIGH | 7.5 | 99.9% | Jun 7, 2018 | A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remo... |
| CVE-2018-0274 | HIGH | 8.8 | 4.0% | Jun 7, 2018 | A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote atta... |
| CVE-2018-0263 | HIGH | 7.4 | 0.7% | Jun 7, 2018 | A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services runni... |
| CVE-2018-3737 | HIGH | 7.5 | 1.7% | Jun 7, 2018 | sshpk is vulnerable to ReDoS when parsing crafted invalid public keys. |
| CVE-2018-3732 | HIGH | 7.5 | 2.4% | Jun 7, 2018 | resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths wit... |
| CVE-2018-3731 | HIGH | 7.5 | 2.0% | Jun 7, 2018 | public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a mal... |
| CVE-2018-3730 | HIGH | 7.5 | 2.0% | Jun 7, 2018 | mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a m... |
| CVE-2018-3729 | HIGH | 7.5 | 2.0% | Jun 7, 2018 | localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a ... |
| CVE-2018-3727 | HIGH | 7.5 | 2.0% | Jun 7, 2018 | 626 node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious ... |
| CVE-2018-3725 | HIGH | 7.5 | 2.0% | Jun 7, 2018 | hekto node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a maliciou... |
| CVE-2018-3720 | HIGH | 8.8 | 2.0% | Jun 7, 2018 | assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which a... |
| CVE-2018-3719 | HIGH | 8.8 | 2.1% | Jun 7, 2018 | mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which al... |
| CVE-2018-3711 | HIGH | 7.5 | 1.8% | Jun 7, 2018 | Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: a... |
| CVE-2018-3852 | HIGH | 7.5 | 1.9% | Jun 6, 2018 | An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A sp... |
| CVE-2018-1000194 | HIGH | 8.1 | 2.6% | Jun 5, 2018 | A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFi... |
| CVE-2018-10601 | HIGH | 8.2 | 0.4% | Jun 5, 2018 | IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monit... |
| CVE-2018-10597 | HIGH | 8.3 | 0.4% | Jun 5, 2018 | IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monit... |
| CVE-2018-6662 | HIGH | 7.8 | 0.2% | Jun 5, 2018 | Privilege Escalation vulnerability in McAfee Management of Native Encryption (MNE) before 4.1.4 allows local users to ga... |
| CVE-2018-3853 | HIGH | 8.8 | 3.4% | Jun 4, 2018 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software Foxit PDF Reader version 9... |
| CVE-2018-1600 | HIGH | 8.6 | 1.1% | Jun 4, 2018 | IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel t... |
| CVE-2018-11135 | HIGH | 8.8 | 2.1% | May 31, 2018 | The script '/adminui/error_details.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users... |
| CVE-2018-3734 | HIGH | 7.5 | 1.9% | May 29, 2018 | stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malici... |
| CVE-2018-3733 | HIGH | 7.5 | 2.2% | May 29, 2018 | crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now