2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-6464 | MEDIUM | 6.1 | 0.7% | Jan 31, 2018 | Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1... |
| CVE-2018-6405 | MEDIUM | 6.5 | 1.7% | Jan 30, 2018 | In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable... |
| CVE-2018-6390 | MEDIUM | 6.5 | 1.1% | Jan 29, 2018 | The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of th... |
| CVE-2018-5683 | MEDIUM | 6 | 0.7% | Jan 23, 2018 | The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds re... |
| CVE-2018-5950 | MEDIUM | 6.1 | 4.6% | Jan 23, 2018 | Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitr... |
| CVE-2018-5786 | MEDIUM | 5.5 | 1.3% | Jan 19, 2018 | In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the get_fileinfo function (lrzip.... |
| CVE-2018-5785 | MEDIUM | 6.5 | 2.3% | Jan 19, 2018 | In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder funct... |
| CVE-2018-0105 | MEDIUM | 5.3 | 1.8% | Jan 18, 2018 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote atta... |
| CVE-2018-2732 | MEDIUM | 6.1 | 1.1% | Jan 18, 2018 | Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Fina... |
| CVE-2018-2678 | MEDIUM | 4.3 | 4.7% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported vers... |
| CVE-2018-2677 | MEDIUM | 4.3 | 4.7% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that ... |
| CVE-2018-2668 | MEDIUM | 6.5 | 4.0% | Jan 18, 2018 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that a... |
| CVE-2018-2665 | MEDIUM | 6.5 | 4.0% | Jan 18, 2018 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that a... |
| CVE-2018-2663 | MEDIUM | 4.3 | 4.7% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported... |
| CVE-2018-2641 | MEDIUM | 6.1 | 5.1% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that ... |
| CVE-2018-2640 | MEDIUM | 6.5 | 4.0% | Jan 18, 2018 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that a... |
| CVE-2018-2634 | MEDIUM | 6.8 | 4.6% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS). Supported versions that... |
| CVE-2018-2629 | MEDIUM | 5.3 | 4.9% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS). Supported vers... |
| CVE-2018-2622 | MEDIUM | 6.5 | 4.0% | Jan 18, 2018 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are aff... |
| CVE-2018-2618 | MEDIUM | 5.9 | 4.8% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versi... |
| CVE-2018-2612 | MEDIUM | 6.5 | 3.8% | Jan 18, 2018 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected... |
| CVE-2018-2603 | MEDIUM | 5.3 | 7.0% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported... |
| CVE-2018-2602 | MEDIUM | 4.5 | 0.6% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that... |
| CVE-2018-2599 | MEDIUM | 4.8 | 4.2% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported vers... |
| CVE-2018-2588 | MEDIUM | 4.3 | 3.5% | Jan 18, 2018 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP). Supported vers... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now