Menu

Star on GitHub · 3.2k

2018

16,509 vulnerabilities published in 2018.

Results

44 of 16,509
7.8
CVE-2018-19322KEV

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, X

7.8
CVE-2018-19321KEV

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, X

7.8
CVE-2018-19320KEV

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING

7.5
CVE-2018-8653KEV

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

7.8
CVE-2018-8639KEV

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

7.8
CVE-2018-8611KEV

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "

8.8
CVE-2018-17480KEV

Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chr

8.8
CVE-2018-6065KEV

Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Ch

8.8
CVE-2018-17463KEV

Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbit

7.8
CVE-2018-8589KEV

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k

7.4
CVE-2018-8581KEV

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

7.8
CVE-2018-8453KEV

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

7.8
CVE-2018-14634KEV

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with a

7.8
CVE-2018-8440KEV

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A

8.1
CVE-2018-11776KEV

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

8.8
CVE-2018-8414KEV

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows

7.8
CVE-2018-8406KEV

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obje

7.8
CVE-2018-8405KEV

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obje

7.5
CVE-2018-8373KEV

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

8.1
CVE-2018-15133KEV

In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri

7.5
CVE-2018-8298KEV

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,

7.8
CVE-2018-5002KEV

Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploita

8.8
CVE-2018-4990KEV

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier

7.2
CVE-2018-9276KEV

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra

8.1
CVE-2018-6961KEV

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web U

7.5
CVE-2016-9079KEV

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis

7.5
CVE-2018-0296KEV

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remo

7.5
CVE-2018-8174KEV

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

7.0
CVE-2018-8120KEV

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

8.8
CVE-2018-0824KEV

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized

8.8
CVE-2018-5430KEV

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition,

8.0
CVE-2018-0175KEV

Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE So

8.6
CVE-2018-0174KEV

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could

8.6
CVE-2018-0173KEV

A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 inform

8.6
CVE-2018-0172KEV

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could

8.8
CVE-2018-0167KEV

Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Ci

7.5
CVE-2018-0159KEV

A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and

8.6
CVE-2018-0158KEV

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software co

7.5
CVE-2018-0156KEV

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentica

8.6
CVE-2018-0155KEV

A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Swi

7.5
CVE-2018-0154KEV

A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Softwar

7.8
CVE-2018-4878KEV

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to

7.8
CVE-2018-0802KEV

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow

8.8
CVE-2018-0798KEV

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows

Test your stack for 2018issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.