2018 CVE Vulnerabilities
17,819 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-2398 | HIGH | 7.5 | 1.0% | Mar 14, 2018 | Under certain conditions SAP Business Client 6.5 allows an attacker to access information which would otherwise be restr... |
| CVE-2018-1437 | HIGH | 7.8 | 2.3% | Mar 14, 2018 | IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to mul... |
| CVE-2018-1435 | HIGH | 7.8 | 2.6% | Mar 14, 2018 | IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a ma... |
| CVE-2018-1386 | HIGH | 7.8 | 0.3% | Mar 14, 2018 | IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with im... |
| CVE-2018-1057 | HIGH | 8.8 | 10.3% | Mar 13, 2018 | On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modi... |
| CVE-2018-6312 | HIGH | 7.2 | 1.3% | Mar 10, 2018 | A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15... |
| CVE-2018-7236 | HIGH | 8.1 | 1.3% | Mar 9, 2018 | A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which ... |
| CVE-2018-7235 | HIGH | 7.5 | 1.6% | Mar 9, 2018 | A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which ... |
| CVE-2018-7234 | HIGH | 7.5 | 1.0% | Mar 9, 2018 | A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which ... |
| CVE-2018-7230 | HIGH | 8.8 | 1.6% | Mar 9, 2018 | A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Elect... |
| CVE-2018-0209 | HIGH | 7.7 | 1.6% | Mar 8, 2018 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem communication channel through the Cisco 550X ... |
| CVE-2018-5452 | HIGH | 7.5 | 2.1% | Mar 7, 2018 | A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Co... |
| CVE-2018-7746 | HIGH | 8.8 | 3.3% | Mar 7, 2018 | An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/chann... |
| CVE-2018-7745 | HIGH | 7.5 | 12.5% | Mar 7, 2018 | An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/inst... |
| CVE-2018-7720 | HIGH | 8.8 | 1.2% | Mar 7, 2018 | A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/create... |
| CVE-2018-7185 | HIGH | 7.5 | 9.2% | Mar 6, 2018 | The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by ... |
| CVE-2018-7712 | HIGH | 7.5 | 2.3% | Mar 5, 2018 | The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cau... |
| CVE-2018-7560 | HIGH | 7.5 | 1.4% | Mar 4, 2018 | index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of S... |
| CVE-2018-1373 | HIGH | 7.5 | 3.2% | Mar 2, 2018 | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses an inadequate account lockout setting that could allow a r... |
| CVE-2018-1058 | HIGH | 8.8 | 14.1% | Mar 2, 2018 | A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker wit... |
| CVE-2018-1170 | HIGH | 8.8 | 0.8% | Mar 2, 2018 | This vulnerability allows adjacent attackers to inject arbitrary Controller Area Network messages on vulnerable installa... |
| CVE-2018-7550 | HIGH | 8.8 | 0.6% | Mar 1, 2018 | The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute a... |
| CVE-2018-7480 | HIGH | 7.8 | 0.4% | Feb 25, 2018 | The blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial... |
| CVE-2018-7421 | HIGH | 7.5 | 1.7% | Feb 23, 2018 | In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in... |
| CVE-2018-6488 | HIGH | 8.1 | 1.8% | Feb 22, 2018 | Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now