Menu

Star on GitHub · 3.2k

2018

16,509 vulnerabilities published in 2018.

Results

16,509· Page 214/331
4.3
CVE-2018-8151

An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Micros

6.5
CVE-2018-8150

A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly hand

5.4
CVE-2018-8149

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

7.8
CVE-2018-8148

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

7.8
CVE-2018-8147

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

7.5
CVE-2018-8145

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could

4.7
CVE-2018-8141

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

7.5
CVE-2018-8139

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

7.5
CVE-2018-8137

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

7.8
CVE-2018-8136

A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code

7.0
CVE-2018-8134

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows

7.5
CVE-2018-8133

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

5.3
CVE-2018-8132

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Win

7.5
CVE-2018-8130

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

5.3
CVE-2018-8129

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Win

7.5
CVE-2018-8128

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

5.5
CVE-2018-8127

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

8.8
CVE-2018-8126

A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI)

7.0
CVE-2018-8124

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

4.3
CVE-2018-8123

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

7.5
CVE-2018-8122

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

7.0
CVE-2018-8120KEV

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

5.6
CVE-2018-8119

A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certi

7.5
CVE-2018-8114

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

4.3
CVE-2018-8112

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka

7.8
CVE-2018-1039

A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, a

4.3
CVE-2018-1025

An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka

7.5
CVE-2018-1022

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow

4.3
CVE-2018-1021

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

7.6
CVE-2018-0961

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packe

7.6
CVE-2018-0959

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

5.3
CVE-2018-0958

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Win

7.5
CVE-2018-0955

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

7.5
CVE-2018-0954

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow

7.5
CVE-2018-0953

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

7.5
CVE-2018-0951

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

7.5
CVE-2018-0946

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

7.5
CVE-2018-0945

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

7.5
CVE-2018-0943

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

5.3
CVE-2018-0854

A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device

8.8
CVE-2018-0824KEV

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized

7.5
CVE-2018-0765

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Co

7.8
CVE-2017-5175

Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a maliciou

5.5
CVE-2018-10828

An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and wri

9.8
CVE-2018-10770

download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration (without a logi

5.5
CVE-2018-10940

The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers

7.5
CVE-2017-18265

Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatib

7.5
CVE-2018-1089

389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needi

6.5
CVE-2018-8912

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remo

6.5
CVE-2018-8911

Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote

Test your stack for 2018issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.