2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-7334 | — | — | 2.8% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash. This was addressed in epan/dissecto... |
| CVE-2018-7333 | — | — | 2.3% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addresse... |
| CVE-2018-7332 | — | — | 2.5% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed... |
| CVE-2018-7331 | — | — | 2.5% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by... |
| CVE-2018-7330 | — | — | 2.3% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed... |
| CVE-2018-7329 | — | — | 2.3% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addressed... |
| CVE-2018-7328 | — | — | 2.3% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by... |
| CVE-2018-7327 | — | — | 2.3% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was addr... |
| CVE-2018-7326 | — | — | 2.3% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite loop that was addressed b... |
| CVE-2018-7325 | — | — | 2.5% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an infinite loop that was address... |
| CVE-2018-7324 | — | — | 2.5% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite loop that was addressed b... |
| CVE-2018-7323 | — | — | 2.5% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by en... |
| CVE-2018-7322 | — | — | 2.5% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that was addressed by... |
| CVE-2018-7321 | — | — | 1.7% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by ... |
| CVE-2018-7320 | — | — | 2.8% | Feb 23, 2018 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This was addressed in epan/... |
| CVE-2018-7442 | — | — | 2.1% | Feb 23, 2018 | An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function does not block '/' characters in the g... |
| CVE-2018-7441 | — | — | 0.3% | Feb 23, 2018 | Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or ha... |
| CVE-2018-7440 | — | — | 3.8% | Feb 23, 2018 | An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command injection via a $(comma... |
| CVE-2018-7439 | — | — | 2.2% | Feb 23, 2018 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function read_mini_biff_ne... |
| CVE-2018-7438 | — | — | 2.1% | Feb 23, 2018 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parse_unicode_string funct... |
| CVE-2018-7437 | — | — | 2.1% | Feb 23, 2018 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parse_SST... |
| CVE-2018-7436 | — | — | 2.2% | Feb 23, 2018 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the p... |
| CVE-2018-7435 | — | — | 2.2% | Feb 23, 2018 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell funct... |
| CVE-2018-6859 | — | — | 1.8% | Feb 23, 2018 | SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter. |
| CVE-2018-6764 | — | — | 0.3% | Feb 23, 2018 | util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now