2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-2814 | HIGH | 8.3 | 3.7% | Apr 19, 2018 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions t... |
| CVE-2018-2811 | HIGH | 7.7 | 0.5% | Apr 19, 2018 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). Supported versions that are affected a... |
| CVE-2018-2794 | HIGH | 7.7 | 0.7% | Apr 19, 2018 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are ... |
| CVE-2018-2783 | HIGH | 7.4 | 4.0% | Apr 19, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported ... |
| CVE-2018-2755 | HIGH | 7.7 | 0.8% | Apr 19, 2018 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that... |
| CVE-2018-1274 | HIGH | 7.5 | 2.0% | Apr 18, 2018 | Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path par... |
| CVE-2018-1088 | HIGH | 8.1 | 5.4% | Apr 18, 2018 | A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster vol... |
| CVE-2018-8834 | HIGH | 7.8 | 0.3% | Apr 17, 2018 | Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet ... |
| CVE-2018-7514 | HIGH | 7.8 | 0.3% | Apr 17, 2018 | Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet ... |
| CVE-2018-5430 | HIGH | 8.8 | 48.8% | Apr 17, 2018 | The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, ... |
| CVE-2018-5429 | HIGH | 8.8 | 1.6% | Apr 17, 2018 | A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperRepor... |
| CVE-2018-3849 | HIGH | 8.8 | 4.0% | Apr 16, 2018 | In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buf... |
| CVE-2018-3848 | HIGH | 8.8 | 3.9% | Apr 16, 2018 | In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buf... |
| CVE-2018-3846 | HIGH | 8.8 | 3.1% | Apr 16, 2018 | In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a sta... |
| CVE-2018-3889 | HIGH | 7.8 | 1.5% | Apr 12, 2018 | A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary da... |
| CVE-2018-3868 | HIGH | 7.8 | 1.3% | Apr 12, 2018 | A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary d... |
| CVE-2018-3862 | HIGH | 7.8 | 1.0% | Apr 12, 2018 | A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting |
| CVE-2018-3861 | HIGH | 7.8 | 1.5% | Apr 12, 2018 | A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary d... |
| CVE-2018-1084 | HIGH | 7.5 | 3.2% | Apr 12, 2018 | corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c. |
| CVE-2018-1079 | HIGH | 8.7 | 1.1% | Apr 12, 2018 | pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The... |
| CVE-2018-1029 | HIGH | 7.8 | 20.3% | Apr 12, 2018 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje... |
| CVE-2018-1027 | HIGH | 7.8 | 19.5% | Apr 12, 2018 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje... |
| CVE-2018-3888 | HIGH | 7.8 | 1.5% | Apr 11, 2018 | A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially ... |
| CVE-2018-3887 | HIGH | 7.8 | 1.5% | Apr 11, 2018 | A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially ... |
| CVE-2018-3886 | HIGH | 7.8 | 1.5% | Apr 11, 2018 | A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now