2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-0158 | HIGH | 8.6 | 7.2% | Mar 28, 2018 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software co... |
| CVE-2018-0157 | HIGH | 8.6 | 2.7% | Mar 28, 2018 | A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker... |
| CVE-2018-0156 | HIGH | 7.5 | 8.4% | Mar 28, 2018 | A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentica... |
| CVE-2018-0155 | HIGH | 8.6 | 7.7% | Mar 28, 2018 | A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Swi... |
| CVE-2018-0154 | HIGH | 7.5 | 7.1% | Mar 28, 2018 | A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Softwar... |
| CVE-2018-0152 | HIGH | 8.8 | 3.3% | Mar 28, 2018 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote a... |
| CVE-2018-7195 | HIGH | 8.1 | 1.0% | Mar 27, 2018 | Enhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords (when an associated e-mail addre... |
| CVE-2018-1267 | HIGH | 8.1 | 1.0% | Mar 27, 2018 | Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platfo... |
| CVE-2018-1266 | HIGH | 8.1 | 1.1% | Mar 27, 2018 | Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabili... |
| CVE-2018-9010 | HIGH | 7.2 | 9.8% | Mar 25, 2018 | Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via t... |
| CVE-2018-8969 | HIGH | 7.5 | 2.6% | Mar 24, 2018 | An issue was discovered in zzcms 8.2. user/licence_save.php allows remote attackers to delete arbitrary files via direct... |
| CVE-2018-8968 | HIGH | 7.5 | 2.6% | Mar 24, 2018 | An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory tr... |
| CVE-2018-8966 | HIGH | 7.5 | 1.8% | Mar 24, 2018 | An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as de... |
| CVE-2018-8965 | HIGH | 7.5 | 2.6% | Mar 24, 2018 | An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory tr... |
| CVE-2018-1000137 | HIGH | 8.8 | 0.6% | Mar 23, 2018 | I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability in users.php that can re... |
| CVE-2018-1448 | HIGH | 7.7 | 0.4% | Mar 22, 2018 | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability tha... |
| CVE-2018-1426 | HIGH | 7.4 | 2.5% | Mar 22, 2018 | IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system... |
| CVE-2018-8905 | HIGH | 8.8 | 3.1% | Mar 22, 2018 | In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF fi... |
| CVE-2018-3710 | HIGH | 7.8 | 2.9% | Mar 21, 2018 | Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project impor... |
| CVE-2018-8822 | HIGH | 7.8 | 0.5% | Mar 20, 2018 | Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux kernel through... |
| CVE-2018-1221 | HIGH | 8.1 | 1.2% | Mar 19, 2018 | In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket reque... |
| CVE-2018-1195 | HIGH | 8.8 | 1.0% | Mar 19, 2018 | In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 28... |
| CVE-2018-1171 | HIGH | 7 | 0.4% | Mar 19, 2018 | This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-2... |
| CVE-2018-5476 | HIGH | 7.8 | 1.7% | Mar 15, 2018 | A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.0... |
| CVE-2018-2402 | HIGH | 7.6 | 1.6% | Mar 14, 2018 | In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now