Confirm exposure first
Match the product, version, installation path, and external exposure before treating a score as an action order.
VULNERABILITY REMEDIATION
CVE remediation guides
Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.
These defensive guides do not provide exploit reproduction or bypass instructions.Prefer supported fixes
Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.
Verify and retain rollback
Confirm version state, service health, access paths, logs, and rollback readiness after the change.
17,661 guide candidatesPage 1439 of 1472
Review reviewHighResearch in progress
CVE-2018-1259Pivotal Spring Data Commons, spring data commons, spring data rest
- Affected
- 1.13 prior to 1.13.12, 2.0 prior to 2.0.7, >= 1.13 <= 1.13.11, >= 2.0 <= 2.0.6, >= 3.0 <= 3.0.6, > 2.6 <= 2.6.11, <= 1.4.14
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-8174Microsoft Windows
- Affected
- 32-bit Systems Service Pack 1, x64-based Systems Service Pack 1, (Server Core installation), Windows RT 8.1, 32-bit Systems Service Pack 2, 32-bit Systems Service Pack 2 (Server Core installation), Itanium-Based Systems Service Pack 2, x64-based Systems Service Pack 2, x64-based Systems Service Pack 2 (Server Core installation), 32-bit systems, x64-based systems, Itanium-Based Systems Service Pack 1, x64-based Systems Service Pack 1 (Server Core installation), Version 1607 for 32-bit Systems, Version 1607 for x64-based Systems, Version 1703 for 32-bit Systems, Version 1703 for x64-based Systems, Version 1709 for 32-bit Systems, Version 1709 for x64-based Systems
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-8120Microsoft Win32k
- Affected
- 32-bit Systems Service Pack 2, 32-bit Systems Service Pack 2 (Server Core installation), Itanium-Based Systems Service Pack 2, x64-based Systems Service Pack 2, x64-based Systems Service Pack 2 (Server Core installation), 32-bit Systems Service Pack 1, x64-based Systems Service Pack 1, Itanium-Based Systems Service Pack 1, x64-based Systems Service Pack 1 (Server Core installation), r2
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-0824Microsoft Windows
- Affected
- 1607, 1703, 1709, 1803, r2
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalResearch in progress
CVE-2018-10562Dasan Gigabit Passive Optical Network (GPON) Routers
- Affected
- See the vendor advisory and NVD configuration data
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalResearch in progress
CVE-2018-10561Dasan Gigabit Passive Optical Network (GPON) Routers
- Affected
- See the vendor advisory and NVD configuration data
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalResearch in progress
CVE-2018-2628Oracle WebLogic Server
- Affected
- 10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3, 10.3.6.0.0, 12.1.3.0.0, 12.2.1.2.0
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2018-1274Spring by Pivotal Spring Framework, spring data commons, spring data rest
- Affected
- Versions 1.13 to 1.13.10, 2.0 to 2.0.5, < 1.13.11, >= 2.0.0 < 2.0.6, >= 3.0 <= 3.0.5, >= 2.6 <= 2.6.10
- Fixed
- 1.13.11, 2.0.6
Known exploitedHighResearch in progress
CVE-2018-5430TIBCO JasperReports
- Affected
- unspecified, 6.3.0, 6.3.2, 6.3.3, 6.4.0, 6.4.2, <= 6.2.4, <= 6.4.2
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalResearch in progress
CVE-2018-1273VMware Tanzu Spring Data Commons
- Affected
- Versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, <= 1.12.10, >= 1.13.0 <= 1.13.10, >= 2.0.0 <= 2.0.5, <= 2.5.10, >= 2.6.0 <= 2.6.10, >= 3.0.0 <= 3.0.5, >= 1.0.1 <= 2.5.0, 1.0.0, 8.0.8.2.0, 8.0.8.3.0
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalFixed-version data
CVE-2018-7600Drupal Drupal Core
- Affected
- Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1, <= 7.57, >= 8.0.0 < 8.3.9, >= 8.4.0 < 8.4.6, >= 8.5.0 < 8.5.1, 7.0, 8.0, 9.0
- Fixed
- 8.3.9, 8.4.6, 8.5.1
Known exploitedMediumResearch in progress
CVE-2018-0180Cisco IOS Software
- Affected
- Cisco IOS, 15.3(00.00.19)sy, 15.4(01)ia001.100, 15.6(01.22)t, 15.4(03)m4.1, 15.4(2)cg, 15.4(2)t, 15.4(3)m
- Fixed
- No verified fixed-version field is available yet