Confirm exposure first
Match the product, version, installation path, and external exposure before treating a score as an action order.
VULNERABILITY REMEDIATION
CVE remediation guides
Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.
These defensive guides do not provide exploit reproduction or bypass instructions.Prefer supported fixes
Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.
Verify and retain rollback
Confirm version state, service health, access paths, logs, and rollback readiness after the change.
18,562 guide candidatesPage 1514 of 1547
Known exploitedCriticalResearch in progress
CVE-2018-10562Dasan Gigabit Passive Optical Network (GPON) Routers
- Affected
- See the vendor advisory and NVD configuration data
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalResearch in progress
CVE-2018-10561Dasan Gigabit Passive Optical Network (GPON) Routers
- Affected
- See the vendor advisory and NVD configuration data
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalResearch in progress
CVE-2018-2628Oracle WebLogic Server
- Affected
- 10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3, 10.3.6.0.0, 12.1.3.0.0, 12.2.1.2.0
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2018-1274Spring by Pivotal Spring Framework, spring data commons, spring data rest
- Affected
- Versions 1.13 to 1.13.10, 2.0 to 2.0.5, < 1.13.11, >= 2.0.0 < 2.0.6, >= 3.0 <= 3.0.5, >= 2.6 <= 2.6.10
- Fixed
- 1.13.11, 2.0.6
Known exploitedHighResearch in progress
CVE-2018-5430TIBCO JasperReports
- Affected
- unspecified, 6.3.0, 6.3.2, 6.3.3, 6.4.0, 6.4.2, <= 6.2.4, <= 6.4.2
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalResearch in progress
CVE-2018-1273VMware Tanzu Spring Data Commons
- Affected
- Versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, <= 1.12.10, >= 1.13.0 <= 1.13.10, >= 2.0.0 <= 2.0.5, <= 2.5.10, >= 2.6.0 <= 2.6.10, >= 3.0.0 <= 3.0.5, >= 1.0.1 <= 2.5.0, 1.0.0, 8.0.8.2.0, 8.0.8.3.0
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalFixed-version data
CVE-2018-7600Drupal Drupal Core
- Affected
- Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1, <= 7.57, >= 8.0.0 < 8.3.9, >= 8.4.0 < 8.4.6, >= 8.5.0 < 8.5.1, 7.0, 8.0, 9.0
- Fixed
- 8.3.9, 8.4.6, 8.5.1
Known exploitedMediumResearch in progress
CVE-2018-0180Cisco IOS Software
- Affected
- Cisco IOS, 15.3(00.00.19)sy, 15.4(01)ia001.100, 15.6(01.22)t, 15.4(03)m4.1, 15.4(2)cg, 15.4(2)t, 15.4(3)m
- Fixed
- No verified fixed-version field is available yet
Known exploitedMediumResearch in progress
CVE-2018-0179Cisco IOS Software
- Affected
- Cisco IOS, 15.3(00.00.19)sy, 15.4(01)ia001.100, 15.6(01.22)t, 15.4(03)m4.1, 15.4(2)cg, 15.4(2)t, 15.4(3)m
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-0175Cisco IOS, XR, and XE Software
- Affected
- Cisco IOS, IOS XE, and IOS XR, 15.4(3)m4.1, <= 15.2\(4a\)ea5, <= 15.2\(6\)e0a, <= 15.6.3m1
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-0174Cisco IOS XE Software
- Affected
- Cisco IOS and IOS XE, 12.2(33)sre7a, <= 15.2\(4a\)ea5, <= 15.2\(6\)e0a
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-0173Cisco IOS and IOS XE Software
- Affected
- Cisco IOS and IOS XE, denali-16.3.4, <= 15.2\(6\)e0a, <= 15.2\(4a\)ea5
- Fixed
- No verified fixed-version field is available yet