2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-5780 | — | — | 1.8% | Mar 14, 2018 | A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.... |
| CVE-2018-5779 | — | — | 2.8% | Mar 14, 2018 | A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.... |
| CVE-2018-7678 | LOW | 3.5 | 0.6% | Mar 14, 2018 | A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4. |
| CVE-2018-7677 | LOW | 3.5 | 0.5% | Mar 14, 2018 | A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component. |
| CVE-2018-7474 | — | — | 6.6% | Mar 14, 2018 | An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on... |
| CVE-2018-7279 | — | — | 2.5% | Mar 14, 2018 | A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1. |
| CVE-2018-6875 | — | — | 1.1% | Mar 14, 2018 | Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information tha... |
| CVE-2018-1000132 | — | — | 2.7% | Mar 14, 2018 | Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that ca... |
| CVE-2018-1000131 | — | — | 2.1% | Mar 14, 2018 | Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulner... |
| CVE-2018-1000130 | — | — | 73.6% | Mar 14, 2018 | A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to ... |
| CVE-2018-1000129 | — | — | 25.5% | Mar 14, 2018 | An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute ma... |
| CVE-2018-8108 | — | — | 1.1% | Mar 14, 2018 | The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, ... |
| CVE-2018-8097 | — | — | 5.2% | Mar 14, 2018 | io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection ... |
| CVE-2018-8107 | — | — | 0.8% | Mar 14, 2018 | The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buff... |
| CVE-2018-8106 | — | — | 0.8% | Mar 14, 2018 | The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap... |
| CVE-2018-8105 | — | — | 0.8% | Mar 14, 2018 | The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-base... |
| CVE-2018-8104 | — | — | 0.8% | Mar 14, 2018 | The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buff... |
| CVE-2018-8103 | — | — | 0.8% | Mar 14, 2018 | The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service ... |
| CVE-2018-8102 | — | — | 0.8% | Mar 14, 2018 | The JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service (... |
| CVE-2018-8101 | — | — | 0.8% | Mar 14, 2018 | The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service ... |
| CVE-2018-8100 | — | — | 0.9% | Mar 14, 2018 | The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-bas... |
| CVE-2018-8099 | MEDIUM | 6.5 | 1.4% | Mar 14, 2018 | Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26... |
| CVE-2018-8098 | MEDIUM | 6.5 | 1.4% | Mar 14, 2018 | Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v... |
| CVE-2018-8096 | — | — | 50.1% | Mar 14, 2018 | Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via '"Name... |
| CVE-2018-1444 | MEDIUM | 5.4 | 1.0% | Mar 14, 2018 | IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now