2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-10485 | MEDIUM | 6.5 | 2.5% | May 17, 2018 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-10482 | MEDIUM | 6.5 | 2.5% | May 17, 2018 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-10481 | MEDIUM | 6.5 | 2.5% | May 17, 2018 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-10480 | MEDIUM | 6.5 | 2.5% | May 17, 2018 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-10479 | MEDIUM | 6.5 | 2.5% | May 17, 2018 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-10478 | MEDIUM | 6.5 | 2.5% | May 17, 2018 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-10476 | MEDIUM | 6.5 | 2.5% | May 17, 2018 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-10475 | MEDIUM | 6.5 | 2.5% | May 17, 2018 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader... |
| CVE-2018-7159 | MEDIUM | 5.3 | 3.6% | May 17, 2018 | The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header, allowing input such as... |
| CVE-2018-0324 | MEDIUM | 6.7 | 0.7% | May 17, 2018 | A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, high-pr... |
| CVE-2018-0297 | MEDIUM | 5.8 | 1.2% | May 17, 2018 | A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remot... |
| CVE-2018-11212 | MEDIUM | 6.5 | 4.8% | May 16, 2018 | An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a ... |
| CVE-2018-1263 | MEDIUM | 4.7 | 1.4% | May 15, 2018 | Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary fi... |
| CVE-2018-3634 | MEDIUM | 5.5 | 0.3% | May 15, 2018 | Parameter corruption in NDIS filter driver in Intel Online Connect Access 1.9.22.0 allows an attacker to cause a denial ... |
| CVE-2018-10989 | MEDIUM | 6.6 | 1.4% | May 14, 2018 | Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices are distributed by some ISPs with a default password of "pa... |
| CVE-2018-0577 | MEDIUM | 5.4 | 1.1% | May 14, 2018 | Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers ... |
| CVE-2018-10998 | MEDIUM | 6.5 | 2.5% | May 12, 2018 | An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service... |
| CVE-2018-1261 | MEDIUM | 4.7 | 1.3% | May 11, 2018 | Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved usin... |
| CVE-2018-1257 | MEDIUM | 6.5 | 3.0% | May 11, 2018 | Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows a... |
| CVE-2018-7248 | MEDIUM | 5.3 | 6.4% | May 11, 2018 | An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3 Build 9317. Unauthenticated users are able to validate... |
| CVE-2018-8915 | MEDIUM | 6.5 | 0.8% | May 10, 2018 | Cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote aut... |
| CVE-2018-8910 | MEDIUM | 6.5 | 0.8% | May 10, 2018 | Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authen... |
| CVE-2018-1130 | MEDIUM | 5.5 | 0.5% | May 10, 2018 | Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dc... |
| CVE-2018-10951 | MEDIUM | 6.5 | 1.2% | May 10, 2018 | mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows z... |
| CVE-2018-2423 | MEDIUM | 5.3 | 2.6% | May 9, 2018 | SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to prevent... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now