Menu

Star on GitHub · 3.2k

2018

16,509 vulnerabilities published in 2018.

Results

16,509· Page 239/331
5.4
CVE-2017-1790

IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This

6.1
CVE-2015-4557

Cross-site scripting (XSS) vulnerability in the new_Twitter_sign_button function in nextend-Twitter-connect.php in the N

5.9
CVE-2015-1777

rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1 and Enterprise Linux (RH

8.8
CVE-2014-6633

The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7,

7.5
CVE-2014-6309

The HTTP and WebSocket engine components in the server in Kaazing Gateway 4.0.2, 4.0.3, and 4.0.4 and Gateway - JMS Edit

7.5
CVE-2018-9860

An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when processing malformed TLS-CBC

6.8
CVE-2018-8117

A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to r

5.5
CVE-2018-8116

A denial of service vulnerability exists in the way that Windows handles objects in memory, aka "Microsoft Graphics Comp

4.3
CVE-2018-1037

An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized

5.4
CVE-2018-1034

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

5.4
CVE-2018-1032

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

8.8
CVE-2018-1030

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle obj

7.8
CVE-2018-1029

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

8.8
CVE-2018-1028

A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted emb

7.8
CVE-2018-1027

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

8.8
CVE-2018-1026

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle obj

7.5
CVE-2018-1023

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft

7.5
CVE-2018-1020

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

7.5
CVE-2018-1019

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

7.5
CVE-2018-1018

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

8.8
CVE-2018-1016

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

8.8
CVE-2018-1015

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

5.4
CVE-2018-1014

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

8.8
CVE-2018-1013

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

8.8
CVE-2018-1012

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

7.8
CVE-2018-1011

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

8.8
CVE-2018-1010

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

7.8
CVE-2018-1009

An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps ke

7.0
CVE-2018-1008

An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to pr

5.3
CVE-2018-1007

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, ak

5.4
CVE-2018-1005

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

8.8
CVE-2018-1004

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

7.8
CVE-2018-1003

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an

7.5
CVE-2018-1001

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

5.3
CVE-2018-1000

An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Interne

4.3
CVE-2018-0998

An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka

7.5
CVE-2018-0997

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

7.5
CVE-2018-0996

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

7.5
CVE-2018-0995

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

7.5
CVE-2018-0994

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

7.5
CVE-2018-0993

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

7.5
CVE-2018-0991

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

7.5
CVE-2018-0990

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

4.3
CVE-2018-0989

An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Interne

7.5
CVE-2018-0988

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

4.3
CVE-2018-0987

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in I

5.3
CVE-2018-0981

An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Interne

7.5
CVE-2018-0980

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

7.5
CVE-2018-0979

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

5.3
CVE-2018-0976

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system

Test your stack for 2018issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.