| CVE-2018-0147 Known exploited | Critical 9.8 | A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on… Assigned by cisco | Mar 8, 2018 |
| CVE-2018-7445 Known exploited | Critical 9.8 | A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Assigned by mitre | Mar 19, 2018 |
| CVE-2017-12319 Known exploited | Medium 5.9 | A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to r… Assigned by cisco | Mar 27, 2018 |
| CVE-2018-6882 Known exploited | Medium 6.1 | Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers… Assigned by mitre | Mar 27, 2018 |
| CVE-2018-0180 Known exploited | Medium 6.8 | Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0179 Known exploited | Medium 6.8 | Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0175 Known exploited | High 8.0 | Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent atta… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0174 Known exploited | High 8.6 | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0173 Known exploited | High 8.6 | A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated, remote… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0172 Known exploited | High 8.6 | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0171 Known exploited | High 7.5 | A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0167 Known exploited | High 8.8 | Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated,… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0161 Known exploited | Medium 6.3 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0159 Known exploited | High 7.5 | A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0158 Known exploited | High 8.6 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reloa… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0156 Known exploited | High 7.5 | A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0155 Known exploited | High 8.6 | A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated,… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0154 Known exploited | High 7.5 | A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-0151 Known exploited | Critical 9.8 | A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Assigned by cisco | Mar 28, 2018 |
| CVE-2018-7600 Known exploited | Critical 9.8 | Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or co… Assigned by drupal | Mar 29, 2018 |
| CVE-2018-1273 Known exploited | Critical 9.8 | Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. Assigned by dell | Apr 11, 2018 |
| CVE-2018-5430 Known exploited | High 7.7 | TIBCO JasperReports Server Information Disclosure Vulnerability Assigned by tibco | Apr 17, 2018 |
| CVE-2018-2628 Known exploited | Critical 9.8 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Assigned by oracle | Apr 19, 2018 |
| CVE-2018-10562 Known exploited | Critical 9.8 | An issue was discovered on Dasan GPON home routers. Assigned by mitre | May 4, 2018 |
| CVE-2018-10561 Known exploited | Critical 9.8 | An issue was discovered on Dasan GPON home routers. Assigned by mitre | May 4, 2018 |
| CVE-2018-8174 Known exploited | High 7.5 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7,… Assigned by microsoft | May 9, 2018 |
| CVE-2018-8120 Known exploited | High 7.0 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows… Assigned by microsoft | May 9, 2018 |
| CVE-2018-0824 Known exploited | High 7.5 | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." T… Assigned by microsoft | May 9, 2018 |
| CVE-2018-4939 Known exploited | Critical 9.8 | Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Assigned by adobe | May 19, 2018 |
| CVE-2018-11138 Known exploited | Critical 9.8 | The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system. Assigned by mitre | May 31, 2018 |
| CVE-2018-0296 Known exploited | High 7.5 | A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a… Assigned by cisco | Jun 7, 2018 |
| CVE-2016-9079 Known exploited | High 7.5 | A use-after-free vulnerability in SVG Animation has been discovered. Assigned by mozilla | Jun 11, 2018 |
| CVE-2018-6961 Known exploited | High 8.1 | VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. Assigned by vmware | Jun 11, 2018 |
| CVE-2018-9276 Known exploited | High 7.2 | An issue was discovered in PRTG Network Monitor before 18.2.39. Assigned by mitre | Jul 2, 2018 |
| CVE-2018-5002 Known exploited | High 7.8 | Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Assigned by adobe | Jul 9, 2018 |
| CVE-2018-4990 Known exploited | High 8.8 | Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Assigned by adobe | Jul 9, 2018 |
| CVE-2018-8298 Known exploited | High 7.5 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. Assigned by microsoft | Jul 11, 2018 |
| CVE-2018-7602 Known exploited | High 8.1 | Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 Assigned by drupal | Jul 19, 2018 |
| CVE-2018-14847 Known exploited | Critical 9.1 | MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability i… Assigned by mitre | Aug 2, 2018 |
| CVE-2018-14933 Known exploited | Critical 9.8 | upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command. Assigned by mitre | Aug 4, 2018 |
| CVE-2018-15133 Known exploited | High 8.1 | In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. Assigned by mitre | Aug 9, 2018 |
| CVE-2018-8414 Known exploited | High 8.8 | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Wi… Assigned by microsoft | Aug 15, 2018 |
| CVE-2018-8406 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerabilit… Assigned by microsoft | Aug 15, 2018 |
| CVE-2018-8405 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerabilit… Assigned by microsoft | Aug 15, 2018 |
| CVE-2018-8373 Known exploited | High 7.5 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects… Assigned by microsoft | Aug 15, 2018 |
| CVE-2018-11776 Known exploited | High 8.1 | Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then:… Assigned by apache | Aug 22, 2018 |
| CVE-2018-8440 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Win… Assigned by microsoft | Sep 13, 2018 |
| CVE-2018-15961 Known exploited | Critical 9.8 | Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Assigned by adobe | Sep 25, 2018 |
| CVE-2018-14634 Known exploited | High 7.8 | An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. Assigned by redhat | Sep 25, 2018 |
| CVE-2018-8453 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows… Assigned by microsoft | Oct 10, 2018 |
