2018 CVEs¶
49 entries from 2018. 0 ship detection & prevention rules.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2018-0125 — A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W… | Critical (9.8) | — | ✅ |
| CVE-2018-0147 — A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS)… | Critical (9.8) | — | ✅ |
| CVE-2018-0151 — A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco… | Critical (9.8) | — | ✅ |
| CVE-2018-0171 — A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE… | Critical (9.8) | — | ✅ |
| CVE-2018-1000861 — A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… | Critical (9.8) | — | ✅ |
| CVE-2018-1273 — Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older… | Critical (9.8) | — | ✅ |
| CVE-2018-14558 — An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7),… | Critical (9.8) | — | ✅ |
| CVE-2018-14667 — The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL)… | Critical (9.8) | — | ✅ |
| CVE-2018-14839 — LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. | Critical (9.8) | — | ✅ |
| CVE-2018-14933 — upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell… | Critical (9.8) | — | ✅ |
| CVE-2018-19323 — The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS… | Critical (9.8) | — | ✅ |
| CVE-2018-19410 — PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to… | Critical (9.8) | — | ✅ |
| CVE-2018-19949 — If exploited, this command injection vulnerability could allow remote attackers to run… | Critical (9.8) | — | ✅ |
| CVE-2018-20062 — An issue was discovered in NoneCms V1.3. | Critical (9.8) | — | ✅ |
| CVE-2018-20753 — Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows… | Critical (9.8) | — | ✅ |
| CVE-2018-2628 — Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware… | Critical (9.8) | — | ✅ |
| CVE-2018-4939 — Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier… | Critical (9.8) | — | ✅ |
| CVE-2018-6530 — OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link… | Critical (9.8) | — | ✅ |
| CVE-2018-6789 — An issue was discovered in the base64d function in the SMTP listener in Exim before… | Critical (9.8) | — | ✅ |
| CVE-2018-7445 — A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS… | Critical (9.8) | — | ✅ |
| CVE-2018-7600 — Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows… | Critical (9.8) | — | ✅ |
| CVE-2018-7602 — A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and… | Critical (9.8) | — | ✅ |
| CVE-2018-7841 — A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4… | Critical (9.8) | — | ✅ |
| CVE-2018-13379 — An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in… | Critical (9.1) | — | ✅ |
| CVE-2018-13382 — An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to… | Critical (9.1) | — | ✅ |
| CVE-2018-14847 — MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary… | Critical (9.1) | — | ✅ |
| CVE-2018-0167 — Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP)… | High (8.8) | — | ✅ |
| CVE-2018-0798 — Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013,… | High (8.8) | — | ✅ |
| CVE-2018-0824 — A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails… | High (8.8) | — | ✅ |
| CVE-2018-17463 — Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a… | High (8.8) | — | ✅ |
| CVE-2018-17480 — Execution of user supplied Javascript during array deserialization leading to an out of… | High (8.8) | — | ✅ |
| CVE-2018-4063 — An exploitable remote code execution vulnerability exists in the upload.cgi functionality… | High (8.8) | — | ✅ |
| CVE-2018-4990 — Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier,… | High (8.8) | — | ✅ |
| CVE-2018-5430 — The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO… | High (8.8) | — | ✅ |
| CVE-2018-6065 — Integer overflow in computing the required allocation size when instantiating a new… | High (8.8) | — | ✅ |
| CVE-2018-8414 — A remote code execution vulnerability exists when the Windows Shell does not properly… | High (8.8) | — | ✅ |
| CVE-2018-0155 — A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of… | High (8.6) | — | ✅ |
| CVE-2018-0158 — A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS… | High (8.6) | — | ✅ |
| CVE-2018-0172 — A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software… | High (8.6) | — | ✅ |
| CVE-2018-0173 — A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that… | High (8.6) | — | ✅ |
| CVE-2018-0174 — A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software… | High (8.6) | — | ✅ |
| CVE-2018-11776 — Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code… | High (8.1) | — | ✅ |
| CVE-2018-15133 — In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might… | High (8.1) | — | ✅ |
| CVE-2018-6961 — VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection… | High (8.1) | — | ✅ |
| CVE-2018-19943 — If exploited, this cross-site scripting vulnerability could allow remote attackers to… | High (8.0) | — | ✅ |
| CVE-2018-10561 — CVE ID: CVE-2018-10561, CWE: CWE-287, Attack Vector: NETWORK, CVSS: 9.8 | Unrated | — | ✅ |
| CVE-2018-10562 — CVE ID: CVE-2018-10562, CWE: CWE-78, Type: RCE, Attack Vector: NETWORK, CVSS: 9.8 | Unrated | — | ✅ |
| CVE-2018-11138 — CVE ID: CVE-2018-11138, CWE: CWE-78, Type: RCE, Attack Vector: NETWORK, CVSS: 9.8 | Unrated | — | ✅ |
| CVE-2018-15961 — CVE ID: CVE-2018-15961, CWE: CWE-434, Attack Vector: NETWORK, CVSS: 9.8 | Unrated | — | ✅ |