CVE Database

CVE Database Year: 2018

CVE-2018-0001: Use-after-free vulnerability in older versions of PHP allows remote code execution
CVE-2018-0002: Memory Corruption and Denial of Service Vulnerability in Juniper Networks Junos OS
CVE-2018-0003: Denial of Service Vulnerability in Juniper Networks Junos OS
CVE-2018-0004: High CPU Consumption Denial of Service Vulnerability in Junos OS
CVE-2018-0005: Vulnerability: Traffic Forwarding Instead of Dropping on QFX and EX Series Switches
CVE-2018-0006: Vulnerability: Denial of Service in BBE Subscriber Management Daemon due to VLAN Authentication Requests
CVE-2018-0007: Denial of Service and Code Injection Vulnerability in Junos OS
CVE-2018-0008: Unauthenticated Root Login Vulnerability in Juniper Networks Junos OS
CVE-2018-0009: Firewall Bypass Vulnerability in Juniper Networks SRX Series Devices
CVE-2018-0010: Unauthorized SSH Access Vulnerability in Juniper Networks Junos Space Security Director
CVE-2018-0011: Reflected XSS Vulnerability in Junos Space: Remote Code Injection and Data Theft
CVE-2018-0012: Privilege Escalation Vulnerability in Junos Space
CVE-2018-0013: Authenticated File Retrieval Vulnerability in Juniper Networks Junos Space Network Management Platform
CVE-2018-0014: Memory Leakage Vulnerability in Juniper Networks ScreenOS Devices
CVE-2018-0015: Unrestricted Access to AppFormix Debug Console Allows Execution of System Commands with Root Privilege
CVE-2018-0016: Junos OS CLNP Datagram Vulnerability
CVE-2018-0017: Denial of Service Vulnerability in Junos OS NAT-PT Feature on SRX Series Devices
CVE-2018-0018: Vulnerability: Bypassing Firewall Rules and Information Disclosure in SRX Series Devices with IDP Policies
CVE-2018-0019: Junos OS SNMP MIB-II Subagent Daemon (mib2d) Denial of Service Vulnerability
CVE-2018-0020: Vulnerability: Denial of Service in Junos OS due to Malformed BGP UPDATE
CVE-2018-0021: Vulnerability: Weak MacSec Key Configuration in Juniper Devices
CVE-2018-0022: MBuf Leak Vulnerability in Junos Devices with VPLS Routing
CVE-2018-0023: Insecure File and Directory Permissions in JSNAPy Automation Tool
CVE-2018-0024: Privilege Escalation Vulnerability in Juniper Networks Junos OS
CVE-2018-0025: Vulnerability: Credential Capture Risk in SRX Series Devices with HTTP/HTTPS Pass-Through Authentication
CVE-2018-0026: Stateless firewall filter configuration not taking effect after Junos OS device reboot or upgrade
CVE-2018-0027: Vulnerability: RSVP PATH Message DoS in Junos OS 16.1 versions prior to 16.1R3
CVE-2018-0029: Broadcast Storm Vulnerability in Junos OS 15.1 and Later Releases
CVE-2018-0030: Denial of Service Vulnerability in Juniper Networks Junos OS with MPC7/8/9 or PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K
CVE-2018-0031: Vulnerability: Bypass of Stateless Firewall Filter via Crafted UDP/IP Packets over MPLS
CVE-2018-0032: Crafted BGP UPDATE Vulnerability in Junos OS
CVE-2018-0034: Denial of Service Vulnerability in Juniper Networks Junos OS JDHCPD Daemon
CVE-2018-0035: Unintended Open Network Install Environment (ONIE) Partition Vulnerability in QFX5200 and QFX10002 Devices
CVE-2018-0037: Vulnerability: Denial of Service and Remote Code Execution in Junos OS BGP NOTIFICATION Processing
CVE-2018-0038: Hardcoded Credentials in Juniper Networks Contrail Service Orchestration Allow Unauthorized Access to Cassandra
CVE-2018-0039: Hardcoded Credentials in Juniper Networks Contrail Service Orchestration Grafana Service
CVE-2018-0040: Hardcoded Cryptographic Certificates and Keys Vulnerability in Juniper Networks Contrail Service Orchestrator
CVE-2018-0041: Hardcoded Credentials in Juniper Networks Contrail Service Orchestration Allow Unauthorized Access to Keystone
CVE-2018-0042: Information Disclosure Vulnerability in Juniper Networks CSO Versions Prior to 4.0.0
CVE-2018-0043: Denial of Service and Remote Code Execution Vulnerability in Juniper Networks Junos OS
CVE-2018-0044: Insecure SSHD Configuration in Juniper NFX Series Devices Allows Remote Unauthenticated Access
CVE-2018-0045: Denial of Service and Remote Code Execution Vulnerability in Junos OS
CVE-2018-0046: Reflected Cross-Site Scripting Vulnerability in Juniper Networks Junos Space
CVE-2018-0047: Persistent Cross-Site Scripting Vulnerability in Junos Space Security Director
CVE-2018-0048: Memory Exhaustion Vulnerability in Juniper Routing Protocols Daemon (RPD) with JET Support
CVE-2018-0049: NULL Pointer Dereference Vulnerability in Juniper Networks Junos OS
CVE-2018-0050: Denial of Service Vulnerability in Juniper Networks Junos OS RPD
CVE-2018-0051: Denial of Service Vulnerability in Junos OS SIP ALG Component
CVE-2018-0052: Remote Unauthenticated Root Access via Enabled RSH Service and Disabled PAM Authentication on Junos OS
CVE-2018-0053: Authentication Bypass Vulnerability in Juniper Networks Junos OS on vSRX Series
CVE-2018-0054: Vulnerability: Egress Interface Congestion and Routing Protocol Packet Drops on QFX5000 Series and EX4600 Switches
CVE-2018-0055: Denial of Service Vulnerability in Junos OS DHCPv6 Server
CVE-2018-0056: L2ALD Daemon Crash Due to Duplicate MAC Address Vulnerability
CVE-2018-0057: Vulnerability: DHCP Option 50 IP Address Assignment Spoofing
CVE-2018-0058: Kernel Crash and Reboot Vulnerability in Junos OS 15.1 and Later on MX Series
CVE-2018-0059: Persistent Cross-Site Scripting Vulnerability in Juniper Networks ScreenOS 6.3.0
CVE-2018-0060: Improper Input Validation Vulnerability in Juniper Networks Junos OS
CVE-2018-0061: Denial of Service Vulnerability in Junos OS Telnetd Service
CVE-2018-0062: Denial of Service Vulnerability in J-Web Service
CVE-2018-0063: Denial of Service (DoS) Vulnerability in Junos OS 17.3R3
CVE-2018-0086: Cisco Unified Customer Voice Portal Application Server Denial of Service Vulnerability
CVE-2018-0087: Cisco Web Security Appliance (WSA) FTP Server Authentication Bypass Vulnerability
CVE-2018-0088: Cisco Industrial Ethernet 4010 Series Switches CLI Command Vulnerability
CVE-2018-0089: Unauthenticated Remote Access Vulnerability in Cisco Policy Suite (CPS) PCRF
CVE-2018-0090: Cisco NX-OS System Software Management Interface ACL Bypass Vulnerability
CVE-2018-0091: Cisco Identity Services Engine (ISE) Web-Based Management Interface DOM Cross-Site Scripting Vulnerability
CVE-2018-0092: Vulnerability: Improper Deletion of User Accounts in Cisco NX-OS System Software
CVE-2018-0093: Cisco Web Security Appliance (WSA) Reflected Cross-Site Scripting (XSS) Vulnerability
CVE-2018-0094: IPv6 Ingress Packet Processing Vulnerability in Cisco UCS Central Software
CVE-2018-0095: Privilege Escalation Vulnerability in Cisco AsyncOS on Email Security and Content Security Appliances
CVE-2018-0096: Privilege Escalation in Cisco Prime Infrastructure's RBAC Functionality
CVE-2018-0097: Cisco Prime Infrastructure Open Redirect Vulnerability
CVE-2018-0098: Cross-Site Scripting (XSS) Vulnerability in Cisco WAP150 and WAP361 Access Points
CVE-2018-0099: Command Injection Vulnerability in Cisco D9800 Network Transport Receiver's Web Management GUI
CVE-2018-0100: XML External Entity (XXE) Injection Vulnerability in Cisco AnyConnect Secure Mobility Client Profile Editor
CVE-2018-0101: Cisco ASA SSL VPN Double Free Memory Vulnerability
CVE-2018-0102: Denial of Service Vulnerability in Cisco NX-OS Software Pong Tool
CVE-2018-0103: Buffer Overflow Vulnerability in Cisco WebEx Network Recording Player for ARF Files
CVE-2018-0104: Remote Code Execution Vulnerability in Cisco WebEx Network Recording Player for ARF Files
CVE-2018-0105: Insufficient Protection of Database Tables in Cisco Unified Communications Manager Allows Unauthorized Data Access
CVE-2018-0106: ConfD Server Unauthorized Information Access Vulnerability
CVE-2018-0107: Unauthenticated Remote Code Execution Vulnerability in Cisco Prime Service Catalog
CVE-2018-0108: Out-of-Band XXE Injection Vulnerability in Cisco WebEx Meetings Server
CVE-2018-0109: Root Account Access Vulnerability in Cisco WebEx Meetings Server
CVE-2018-0110: Persistent Access Vulnerability in Cisco WebEx Meetings Server
CVE-2018-0111: Unauthenticated Remote Access Vulnerability in Cisco WebEx Meetings Server
CVE-2018-0112: Arbitrary Code Execution Vulnerability in Cisco WebEx Clients
CVE-2018-0113: Arbitrary Command Execution Vulnerability in Cisco UCS Central Software
CVE-2018-0114: Vulnerability: Token Re-signing Exploit in Cisco node-jose Library
CVE-2018-0115: Arbitrary Command Execution Vulnerability in Cisco StarOS CLI
CVE-2018-0116: Cisco Policy Suite RADIUS Authentication Bypass Vulnerability
CVE-2018-0117: Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software Denial of Service Vulnerability
CVE-2018-0118: Cross-Site Scripting (XSS) Vulnerability in Cisco Unified Communications Manager Web Interface
CVE-2018-0119: Improper Display of User-Account Tokens in Cisco Spark Account Services
CVE-2018-0120: SQL Injection Vulnerability in Cisco Unified Communications Manager
CVE-2018-0121: Authentication Bypass Vulnerability in Cisco Elastic Services Controller Software
CVE-2018-0122: Vulnerability: Local File Overwrite in Cisco StarOS CLI
CVE-2018-0123: Cisco IOS and IOS XE Software Diagnostic Shell Path Traversal Vulnerability
CVE-2018-0124: Insecure Key Generation Vulnerability in Cisco Unified Communications Domain Manager
CVE-2018-0125: Arbitrary Code Execution and Root Privilege Vulnerability in Cisco RV132W and RV134W Routers
CVE-2018-0127: Unauthenticated Remote Access to Configuration Parameters in Cisco RV132W and RV134W Routers
CVE-2018-0128: Cisco Data Center Analytics Framework Web Interface XSS Vulnerability
CVE-2018-0129: Cisco Data Center Analytics Framework Web Interface XSS Vulnerability
CVE-2018-0130: Vulnerability in Cisco Elastic Services Controller Software Allows Unauthorized Administrative Access
CVE-2018-0131: RSA-Encrypted Nonce Disclosure Vulnerability in Cisco IOS Software and Cisco IOS XE Software
CVE-2018-0132: Cisco IOS XR Software FIB Code Denial of Service Vulnerability
CVE-2018-0134: Cisco Policy Suite RADIUS Authentication Module Username Validity Disclosure Vulnerability
CVE-2018-0135: Cisco Unified Communications Manager Information Disclosure Vulnerability
CVE-2018-0136: IPv6 Fragment Header Extension Vulnerability in Cisco ASR 9000 Series
CVE-2018-0137: Cisco Prime Network TCP Throttling Denial of Service Vulnerability
CVE-2018-0138: Cisco Firepower System Software: Bypass of File Policies via BitTorrent Protocol
CVE-2018-0139: Cisco Unified Customer Voice Portal (CVP) IVR Connection Disconnection Denial of Service Vulnerability
CVE-2018-0140: Authenticated Remote Attacker Can Bypass Spam Quarantine in Cisco Email Security Appliance and Cisco Content Security Management Appliance
CVE-2018-0141: Hard-coded Account Password Vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6
CVE-2018-0144: Cross-Site Scripting (XSS) Vulnerability in Cisco Prime Data Center Network Manager
CVE-2018-0145: Cisco Data Center Analytics Framework Application Reflected XSS Vulnerability
CVE-2018-0146: Cross-Site Request Forgery (CSRF) Vulnerability in Cisco Data Center Analytics Framework Application
CVE-2018-0147: Java Deserialization Remote Code Execution Vulnerability in Cisco Secure Access Control System (ACS)
CVE-2018-0148: Cross-Site Request Forgery Vulnerability in Cisco UCS Director and IMC Supervisor Software
CVE-2018-0149: DOM-based Stored XSS Vulnerability in Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software
CVE-2018-0150: Static Credential Vulnerability in Cisco IOS XE Software
CVE-2018-0151: Cisco IOS and IOS XE Software QoS Subsystem Buffer Overflow Vulnerability
CVE-2018-0152: Privilege Escalation Vulnerability in Cisco IOS XE Software
CVE-2018-0154: Denial of Service Vulnerability in Cisco Integrated Services Module for VPN (ISM-VPN)