Home / Security / CVE index / 2018
2018 NetApp CVEs
Showing 300 CVEs with a 2018 identifier — page 1 of 2. Sorted by CVE id.
Always verify. NetApp's advisory is authoritative for affected versions and fixes; NVD carries the CVSS record.
Showing 300 of 300
| CVE | Published | Severity | CVSS | Summary / Sources |
|---|---|---|---|---|
CVE-2018-0732 | 2018-06-12 | HIGH | 7.5 | During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the NVD ↗ · NTAP-20190118-0002 · NTAP-20190118-0002 +1 |
CVE-2018-0733 | 2018-03-27 | MEDIUM | 5.9 | Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows NVD ↗ · NTAP-20180330-0002 |
CVE-2018-0734 | 2018-10-30 | MEDIUM | 5.9 | The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm t NVD ↗ · NTAP-20190423-0002 · NTAP-20190118-0002 +1 |
CVE-2018-0735 | 2018-10-29 | MEDIUM | 5.9 | The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm NVD ↗ · NTAP-20181105-0002 |
CVE-2018-0737 | 2018-04-16 | MEDIUM | 5.9 | The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cach NVD ↗ · NTAP-20180726-0003 |
CVE-2018-0739 | 2018-03-27 | MEDIUM | 6.5 | Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recur NVD ↗ · NTAP-20180726-0002 · NTAP-20180726-0002 +3 |
CVE-2018-1000001 | 2018-01-31 | HIGH | 7.8 | In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer NVD ↗ · NTAP-20190404-0003 |
CVE-2018-1000180 | — | — | — | NVD ↗ · NTAP-20190204-0003 |
CVE-2018-1000613 | — | — | — | NVD ↗ · NTAP-20190204-0003 |
CVE-2018-1000632 | — | — | — | NVD ↗ · NTAP-20190530-0001 |
CVE-2018-1000656 | 2018-08-20 | HIGH | 7.5 | The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory us NVD ↗ · NTAP-20190221-0001 |
CVE-2018-1000802 | — | — | — | NVD ↗ · NTAP-20230309-0002 |
CVE-2018-1000873 | — | — | — | NVD ↗ · NTAP-20200904-0004 |
CVE-2018-1002101 | — | — | — | NVD ↗ · NTAP-20190416-0008 |
CVE-2018-1002105 | — | — | — | NVD ↗ · NTAP-20190416-0001 |
CVE-2018-10054 | — | — | — | NVD ↗ · NTAP-20240719-0003 |
CVE-2018-10103 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-10105 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-10237 | — | — | — | NVD ↗ · NTAP-20220629-0008 |
CVE-2018-1050 | — | — | — | NVD ↗ · NTAP-20180313-0001 |
CVE-2018-10545 | — | — | — | NVD ↗ · NTAP-20180607-0003 |
CVE-2018-10546 | — | — | — | NVD ↗ · NTAP-20180607-0003 |
CVE-2018-10547 | — | — | — | NVD ↗ · NTAP-20180607-0003 |
CVE-2018-10548 | — | — | — | NVD ↗ · NTAP-20180607-0003 |
CVE-2018-10549 | — | — | — | NVD ↗ · NTAP-20180607-0003 |
CVE-2018-1057 | — | — | — | NVD ↗ · NTAP-20180313-0001 |
CVE-2018-10858 | — | — | — | NVD ↗ · NTAP-20180814-0001 |
CVE-2018-10918 | — | — | — | NVD ↗ · NTAP-20180814-0001 |
CVE-2018-10919 | — | — | — | NVD ↗ · NTAP-20180814-0001 |
CVE-2018-10933 | — | — | — | NVD ↗ · NTAP-20190118-0002 |
CVE-2018-10934 | — | — | — | NVD ↗ · NTAP-20190611-0002 |
CVE-2018-11039 | — | — | — | NVD ↗ · NTAP-20260206-0009 |
CVE-2018-11040 | — | — | — | NVD ↗ · NTAP-20260206-0010 |
CVE-2018-11212 | — | — | — | NVD ↗ · NTAP-20190118-0001 |
CVE-2018-11236 | 2018-05-18 | CRITICAL | 9.8 | stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could e NVD ↗ · NTAP-20190401-0001 |
CVE-2018-11237 | 2018-05-18 | HIGH | 7.8 | An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, NVD ↗ · NTAP-20190401-0001 |
CVE-2018-11307 | — | — | — | NVD ↗ · NTAP-20190530-0003 |
CVE-2018-1139 | — | — | — | NVD ↗ · NTAP-20180814-0001 |
CVE-2018-1140 | — | — | — | NVD ↗ · NTAP-20180814-0001 |
CVE-2018-11763 | — | — | — | NVD ↗ · NTAP-20190204-0004 |
CVE-2018-11764 | — | — | — | NVD ↗ · NTAP-20201103-0003 |
CVE-2018-11765 | — | — | — | NVD ↗ · NTAP-20201016-0005 |
CVE-2018-11767 | — | — | — | NVD ↗ · NTAP-20190416-0009 |
CVE-2018-11776 | — | — | — | NVD ↗ · NTAP-20181018-0002 · NTAP-20180822-0001 |
CVE-2018-11784 | — | — | — | NVD ↗ · NTAP-20181014-0002 |
CVE-2018-11796 | — | — | — | NVD ↗ · NTAP-20190903-0002 |
CVE-2018-11802 | — | — | — | NVD ↗ · NTAP-20190619-0003 |
CVE-2018-12015 | 2018-06-07 | HIGH | 7.5 | In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via NVD ↗ · NTAP-20180927-0001 |
CVE-2018-12022 | — | — | — | NVD ↗ · NTAP-20190530-0003 |
CVE-2018-12023 | — | — | — | NVD ↗ · NTAP-20190530-0003 |
CVE-2018-12037 | — | — | — | NVD ↗ · NTAP-20181112-0001 |
CVE-2018-12038 | — | — | — | NVD ↗ · NTAP-20181112-0001 |
CVE-2018-12099 | — | — | — | NVD ↗ · NTAP-20190416-0004 |
CVE-2018-12121 | — | — | — | NVD ↗ · NTAP-20241227-0008 |
CVE-2018-12122 | — | — | — | NVD ↗ · NTAP-20241213-0009 |
CVE-2018-12123 | — | — | — | NVD ↗ · NTAP-20241213-0008 |
CVE-2018-12126 | — | — | — | NVD ↗ · NTAP-20190515-0001 |
CVE-2018-12127 | — | — | — | NVD ↗ · NTAP-20190515-0001 |
CVE-2018-12130 | — | — | — | NVD ↗ · NTAP-20190515-0001 |
CVE-2018-12185 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12187 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12188 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12189 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12190 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12191 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12192 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12196 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12198 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12199 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12200 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12201 | — | — | — | NVD ↗ · NTAP-20190318-0002 |
CVE-2018-12202 | — | — | — | NVD ↗ · NTAP-20190318-0002 |
CVE-2018-12203 | — | — | — | NVD ↗ · NTAP-20190318-0002 |
CVE-2018-12204 | — | — | — | NVD ↗ · NTAP-20190318-0002 |
CVE-2018-12205 | — | — | — | NVD ↗ · NTAP-20190318-0002 |
CVE-2018-12207 | — | — | — | NVD ↗ · NTAP-20191113-0003 |
CVE-2018-12208 | — | — | — | NVD ↗ · NTAP-20190318-0001 |
CVE-2018-12536 | — | — | — | NVD ↗ · NTAP-20181014-0001 |
CVE-2018-12538 | — | — | — | NVD ↗ · NTAP-20181014-0001 |
CVE-2018-1257 | — | — | — | NVD ↗ · NTAP-20260206-0008 |
CVE-2018-1258 | — | — | — | NVD ↗ · NTAP-20181018-0002 |
CVE-2018-1283 | 2018-03-26 | MEDIUM | 5.3 | In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user NVD ↗ · NTAP-20180601-0004 |
CVE-2018-1285 | — | — | — | NVD ↗ · NTAP-20220909-0001 |
CVE-2018-12882 | — | — | — | NVD ↗ · NTAP-20181109-0001 |
CVE-2018-1301 | 2018-03-26 | MEDIUM | 5.9 | A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by re NVD ↗ · NTAP-20180601-0004 |
CVE-2018-1302 | 2018-03-26 | MEDIUM | 5.9 | When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an alre NVD ↗ · NTAP-20180601-0004 |
CVE-2018-1303 | 2018-03-26 | HIGH | 7.5 | A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be NVD ↗ · NTAP-20180601-0004 |
CVE-2018-1304 | — | — | — | NVD ↗ · NTAP-20180706-0001 |
CVE-2018-1305 | — | — | — | NVD ↗ · NTAP-20180706-0001 |
CVE-2018-1312 | 2018-03-26 | CRITICAL | 9.8 | In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated us NVD ↗ · NTAP-20180601-0004 |
CVE-2018-1327 | — | — | — | NVD ↗ · NTAP-20180330-0001 |
CVE-2018-1333 | — | — | — | NVD ↗ · NTAP-20180926-0007 |
CVE-2018-1336 | — | — | — | NVD ↗ · NTAP-20180817-0001 |
CVE-2018-13785 | — | — | — | NVD ↗ · NTAP-20181018-0001 |
CVE-2018-1413 | — | — | — | NVD ↗ · NTAP-20190401-0003 |
CVE-2018-14335 | — | — | — | NVD ↗ · NTAP-20240726-0003 |
CVE-2018-14404 | 2018-07-19 | MEDIUM | 6.5 | A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression i NVD ↗ · NTAP-20190719-0002 |
CVE-2018-14461 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14462 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14463 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14464 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14465 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14466 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14467 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14468 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14469 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14470 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14550 | — | — | — | NVD ↗ · NTAP-20221028-0001 |
CVE-2018-14627 | — | — | — | NVD ↗ · NTAP-20181221-0002 |
CVE-2018-14628 | — | — | — | NVD ↗ · NTAP-20230223-0008 |
CVE-2018-14629 | — | — | — | NVD ↗ · NTAP-20181127-0001 |
CVE-2018-14634 | — | — | — | NVD ↗ · NTAP-20190204-0002 |
CVE-2018-14718 | — | — | — | NVD ↗ · NTAP-20190530-0003 |
CVE-2018-14719 | — | — | — | NVD ↗ · NTAP-20190530-0003 |
CVE-2018-14720 | — | — | — | NVD ↗ · NTAP-20190530-0003 |
CVE-2018-14721 | — | — | — | NVD ↗ · NTAP-20190530-0003 |
CVE-2018-14851 | — | — | — | NVD ↗ · NTAP-20181107-0003 |
CVE-2018-14879 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14880 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14881 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14882 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-14883 | — | — | — | NVD ↗ · NTAP-20181107-0003 |
CVE-2018-14884 | — | — | — | NVD ↗ · NTAP-20181107-0003 |
CVE-2018-15132 | — | — | — | NVD ↗ · NTAP-20181107-0003 |
CVE-2018-15173 | — | — | — | NVD ↗ · NTAP-20200827-0004 |
CVE-2018-15473 | 2018-08-17 | MEDIUM | 5.3 | OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containin NVD ↗ · NTAP-20181101-0001 |
CVE-2018-15919 | 2018-08-28 | MEDIUM | 5.3 | Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 NVD ↗ · NTAP-20181221-0001 |
CVE-2018-16227 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-16228 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-16229 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-16230 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-1630 | — | — | — | NVD ↗ · NTAP-20190903-0002 |
CVE-2018-16300 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-1631 | — | — | — | NVD ↗ · NTAP-20190903-0002 |
CVE-2018-1632 | — | — | — | NVD ↗ · NTAP-20190903-0002 |
CVE-2018-1633 | — | — | — | NVD ↗ · NTAP-20190903-0002 |
CVE-2018-1634 | — | — | — | NVD ↗ · NTAP-20190903-0002 |
CVE-2018-1635 | — | — | — | NVD ↗ · NTAP-20190903-0002 |
CVE-2018-1636 | — | — | — | NVD ↗ · NTAP-20190903-0002 |
CVE-2018-16395 | — | — | — | NVD ↗ · NTAP-20190221-0002 |
CVE-2018-16396 | — | — | — | NVD ↗ · NTAP-20190221-0002 |
CVE-2018-16451 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-16452 | — | — | — | NVD ↗ · NTAP-20200120-0001 |
CVE-2018-16487 | — | — | — | NVD ↗ · NTAP-20190919-0004 |
CVE-2018-16597 | — | — | — | NVD ↗ · NTAP-20190204-0001 |
CVE-2018-16841 | — | — | — | NVD ↗ · NTAP-20181127-0001 |
CVE-2018-16851 | — | — | — | NVD ↗ · NTAP-20181127-0001 |
CVE-2018-16852 | — | — | — | NVD ↗ · NTAP-20181127-0001 |
CVE-2018-16853 | — | — | — | NVD ↗ · NTAP-20181127-0001 |
CVE-2018-16857 | — | — | — | NVD ↗ · NTAP-20181127-0001 |
CVE-2018-16860 | — | — | — | NVD ↗ · NTAP-20190514-0001 |
CVE-2018-16864 | — | — | — | NVD ↗ · NTAP-20190117-0001 |
CVE-2018-16865 | — | — | — | NVD ↗ · NTAP-20190117-0001 |
CVE-2018-16866 | — | — | — | NVD ↗ · NTAP-20190117-0001 |
CVE-2018-16871 | — | — | — | NVD ↗ · NTAP-20211004-0002 |
CVE-2018-16888 | — | — | — | NVD ↗ · NTAP-20190307-0007 |
CVE-2018-16890 | 2019-02-06 | HIGH | 7.5 | libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth NVD ↗ · NTAP-20190315-0001 |
CVE-2018-16984 | — | — | — | NVD ↗ · NTAP-20190502-0009 |
CVE-2018-17082 | — | — | — | NVD ↗ · NTAP-20180924-0001 |
CVE-2018-17182 | — | — | — | NVD ↗ · NTAP-20190204-0001 |
CVE-2018-17189 | — | — | — | NVD ↗ · NTAP-20190125-0001 |
CVE-2018-17199 | — | — | — | NVD ↗ · NTAP-20190125-0001 |
CVE-2018-1721 | — | — | — | NVD ↗ · NTAP-20191127-0001 |
CVE-2018-17794 | — | — | — | NVD ↗ · NTAP-20190327-0007 |
CVE-2018-17985 | — | — | — | NVD ↗ · NTAP-20190327-0007 |
CVE-2018-18065 | 2018-10-08 | MEDIUM | 6.5 | _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely ca NVD ↗ · NTAP-20181107-0001 |
CVE-2018-18066 | 2018-10-08 | HIGH | 7.5 | snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause NVD ↗ · NTAP-20181107-0001 |
CVE-2018-18309 | — | — | — | NVD ↗ · NTAP-20190327-0007 |
CVE-2018-18311 | — | — | — | NVD ↗ · NTAP-20190221-0003 |
CVE-2018-18312 | — | — | — | NVD ↗ · NTAP-20190221-0003 |
CVE-2018-18313 | — | — | — | NVD ↗ · NTAP-20190221-0003 |
CVE-2018-18314 | — | — | — | NVD ↗ · NTAP-20190221-0003 |
CVE-2018-1842 | — | — | — | NVD ↗ · NTAP-20190401-0003 |
CVE-2018-18483 | — | — | — | NVD ↗ · NTAP-20190327-0007 |
CVE-2018-18484 | — | — | — | NVD ↗ · NTAP-20190327-0007 |
CVE-2018-18605 | — | — | — | NVD ↗ · NTAP-20190307-0003 |
CVE-2018-18606 | — | — | — | NVD ↗ · NTAP-20190307-0003 |
CVE-2018-18607 | — | — | — | NVD ↗ · NTAP-20190307-0003 |
CVE-2018-18623 | — | — | — | NVD ↗ · NTAP-20200608-0008 |
CVE-2018-18624 | — | — | — | NVD ↗ · NTAP-20200608-0008 |
CVE-2018-18625 | — | — | — | NVD ↗ · NTAP-20200608-0008 |
CVE-2018-18849 | — | — | — | NVD ↗ · NTAP-20190411-0006 |
CVE-2018-18955 | — | — | — | NVD ↗ · NTAP-20190416-0003 |
CVE-2018-19039 | — | — | — | NVD ↗ · NTAP-20190416-0004 |
CVE-2018-19360 | — | — | — | NVD ↗ · NTAP-20190530-0003 |
CVE-2018-19361 | — | — | — | NVD ↗ · NTAP-20190530-0003 |
CVE-2018-19362 | — | — | — | NVD ↗ · NTAP-20190530-0003 |
CVE-2018-19395 | — | — | — | NVD ↗ · NTAP-20181221-0005 |
CVE-2018-19396 | — | — | — | NVD ↗ · NTAP-20181221-0005 |
CVE-2018-19518 | — | — | — | NVD ↗ · NTAP-20181221-0004 |
CVE-2018-19591 | 2018-12-04 | HIGH | 7.5 | In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descripto NVD ↗ · NTAP-20190321-0003 |
CVE-2018-19788 | — | — | — | NVD ↗ · NTAP-20240816-0001 |
CVE-2018-19931 | 2018-12-07 | HIGH | 7.8 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer over NVD ↗ · NTAP-20190221-0004 |
CVE-2018-19932 | 2018-12-07 | MEDIUM | 5.5 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and NVD ↗ · NTAP-20190221-0004 |
CVE-2018-19935 | — | — | — | NVD ↗ · NTAP-20181221-0003 |
CVE-2018-19985 | — | — | — | NVD ↗ · NTAP-20190404-0002 |
CVE-2018-20002 | 2018-12-10 | MEDIUM | 5.5 | The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory NVD ↗ · NTAP-20190221-0004 |
CVE-2018-20060 | — | — | — | NVD ↗ · NTAP-20241227-0010 |
CVE-2018-20217 | — | — | — | NVD ↗ · NTAP-20190416-0006 |
CVE-2018-20406 | — | — | — | NVD ↗ · NTAP-20190416-0010 |
CVE-2018-20449 | — | — | — | NVD ↗ · NTAP-20190502-0002 |
CVE-2018-20483 | — | — | — | NVD ↗ · NTAP-20190321-0002 |
CVE-2018-20505 | — | — | — | NVD ↗ · NTAP-20190502-0004 |
CVE-2018-20506 | — | — | — | NVD ↗ · NTAP-20190502-0004 |
CVE-2018-20509 | — | — | — | NVD ↗ · NTAP-20190517-0002 |
CVE-2018-20669 | — | — | — | NVD ↗ · NTAP-20190404-0002 |
CVE-2018-20685 | 2019-01-10 | MEDIUM | 5.3 | In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact NVD ↗ · NTAP-20190215-0001 |
CVE-2018-20796 | 2019-02-26 | HIGH | 7.5 | In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\ NVD ↗ · NTAP-20190315-0002 |
CVE-2018-20801 | — | — | — | NVD ↗ · NTAP-20190715-0001 |
CVE-2018-20836 | 2019-05-07 | HIGH | 8.1 | An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expande NVD ↗ · NTAP-20190719-0003 |
CVE-2018-20839 | — | — | — | NVD ↗ · NTAP-20190530-0002 |
CVE-2018-20843 | 2019-06-24 | HIGH | 7.5 | In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM an NVD ↗ · NTAP-20190703-0001 |
CVE-2018-20854 | — | — | — | NVD ↗ · NTAP-20190905-0002 |
CVE-2018-20855 | — | — | — | NVD ↗ · NTAP-20190905-0002 |
CVE-2018-20856 | — | — | — | NVD ↗ · NTAP-20190905-0002 · NTAP-20190905-0002 |
CVE-2018-20961 | — | — | — | NVD ↗ · NTAP-20190905-0002 |
CVE-2018-20976 | — | — | — | NVD ↗ · NTAP-20190905-0002 |
CVE-2018-21008 | — | — | — | NVD ↗ · NTAP-20191004-0001 |
CVE-2018-21029 | — | — | — | NVD ↗ · NTAP-20191122-0002 |
CVE-2018-25009 | 2021-05-21 | CRITICAL | 9.1 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16(). NVD ↗ · NTAP-20211104-0004 |
CVE-2018-25010 | 2021-05-21 | CRITICAL | 9.1 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter(). NVD ↗ · NTAP-20211112-0001 |
CVE-2018-25011 | 2021-05-21 | CRITICAL | 9.8 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16(). NVD ↗ · NTAP-20211104-0004 |
CVE-2018-25012 | 2021-05-21 | CRITICAL | 9.1 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24(). NVD ↗ · NTAP-20211112-0001 |
CVE-2018-25013 | 2021-05-21 | CRITICAL | 9.1 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes(). NVD ↗ · NTAP-20211112-0001 |
CVE-2018-25014 | 2021-05-21 | CRITICAL | 9.8 | A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(). NVD ↗ · NTAP-20211104-0004 |
CVE-2018-25015 | — | — | — | NVD ↗ · NTAP-20210720-0002 |
CVE-2018-25020 | — | — | — | NVD ↗ · NTAP-20211229-0005 |
CVE-2018-25031 | — | — | — | NVD ↗ · NTAP-20220407-0004 |
CVE-2018-25032 | 2022-03-25 | HIGH | 7.5 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. NVD ↗ · NTAP-20220729-0004 · NTAP-20220526-0009 |
CVE-2018-2562 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2565 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2573 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2576 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2579 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2581 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2582 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2583 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2585 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2586 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2588 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2590 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2591 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2598 | — | — | — | NVD ↗ · NTAP-20180726-0002 |
CVE-2018-2599 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2600 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2602 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2603 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2612 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2618 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2622 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2627 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2629 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2633 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2634 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2637 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2638 | 2018-01-18 | HIGH | 8.3 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficul NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2639 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2640 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2641 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2645 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2646 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2647 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2657 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2663 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2665 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2667 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2668 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2675 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2677 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2678 | — | — | — | NVD ↗ · NTAP-20180117-0001 |
CVE-2018-2696 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2703 | — | — | — | NVD ↗ · NTAP-20180117-0002 |
CVE-2018-2755 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2758 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2759 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2761 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2762 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2766 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2767 | — | — | — | NVD ↗ · NTAP-20180726-0002 |
CVE-2018-2769 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2771 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2773 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2775 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2776 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2777 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2778 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2779 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2780 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2781 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2782 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2783 | 2018-04-19 | HIGH | 7.4 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: NVD ↗ · NTAP-20180419-0001 |
CVE-2018-2784 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2786 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2787 | — | — | — | NVD ↗ · NTAP-20180419-0002 |
CVE-2018-2790 | 2018-04-19 | LOW | 3.1 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u NVD ↗ · NTAP-20180419-0001 |
CVE-2018-2794 | 2018-04-19 | HIGH | 7.7 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u16 NVD ↗ · NTAP-20180419-0001 |
CVE-2018-2795 | 2018-04-19 | MEDIUM | 5.3 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: NVD ↗ · NTAP-20180419-0001 |
CVE-2018-2796 | 2018-04-19 | MEDIUM | 5.3 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java S NVD ↗ · NTAP-20180419-0001 |
CVE-2018-2797 | 2018-04-19 | MEDIUM | 5.3 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181 NVD ↗ · NTAP-20180419-0001 |
CVE-2018-2798 | 2018-04-19 | MEDIUM | 5.3 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181 NVD ↗ · NTAP-20180419-0001 |
Years: 2026 · 2025 · 2024 · 2023 · 2022 · 2021 · 2020 · 2019 · 2018 · 2017 · 2016 · 2015 · 2014 · 2013 · 2012 · 2011 · 2010 · 2009 · 2008 · 2007 · 2006 · 2005 · 2004 · 2003 · 2002 · 1999