# Vulnerabilities published in 2018 - [CVE-2018-6942](https://insights.sbomify.com/CVE-2018-6942/): Null dereference in n/a (medium 6.5) - [CVE-2018-6941](https://insights.sbomify.com/CVE-2018-6941/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-6940](https://insights.sbomify.com/CVE-2018-6940/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6936](https://insights.sbomify.com/CVE-2018-6936/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6935](https://insights.sbomify.com/CVE-2018-6935/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6934](https://insights.sbomify.com/CVE-2018-6934/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-6930](https://insights.sbomify.com/CVE-2018-6930/): Memory corruption in n/a (medium 6.5) - [CVE-2018-6928](https://insights.sbomify.com/CVE-2018-6928/): SQL injection in n/a (critical 9.8) - [CVE-2018-6927](https://insights.sbomify.com/CVE-2018-6927/): Integer overflow in n/a (high 7.8) - [CVE-2018-6926](https://insights.sbomify.com/CVE-2018-6926/): Command injection in n/a (high 7.2) - [CVE-2018-6925](https://insights.sbomify.com/CVE-2018-6925/): Null dereference in FreeBSD (medium 5.5) - [CVE-2018-6924](https://insights.sbomify.com/CVE-2018-6924/): Information disclosure in FreeBSD (high 7.1) - [CVE-2018-6923](https://insights.sbomify.com/CVE-2018-6923/): Denial of service in FreeBSD (high 7.5) - [CVE-2018-6922](https://insights.sbomify.com/CVE-2018-6922/): Denial of service in FreeBSD (medium 5.3) - [CVE-2018-6921](https://insights.sbomify.com/CVE-2018-6921/): Information disclosure in FreeBSD (medium 5.5) - [CVE-2018-6920](https://insights.sbomify.com/CVE-2018-6920/): Information disclosure in FreeBSD (medium 5.5) - [CVE-2018-6919](https://insights.sbomify.com/CVE-2018-6919/): Information disclosure in FreeBSD (high 7.5) - [CVE-2018-6918](https://insights.sbomify.com/CVE-2018-6918/): Denial of service in FreeBSD (high 7.5) - [CVE-2018-6917](https://insights.sbomify.com/CVE-2018-6917/): Integer overflow in FreeBSD (high 7.5) - [CVE-2018-6916](https://insights.sbomify.com/CVE-2018-6916/): Use after free in FreeBSD (critical 9.8) - [CVE-2018-6914](https://insights.sbomify.com/CVE-2018-6914/): Path traversal in n/a (high 7.5) - [CVE-2018-6913](https://insights.sbomify.com/CVE-2018-6913/): Memory corruption in n/a (critical 9.8) - [CVE-2018-6912](https://insights.sbomify.com/CVE-2018-6912/): Denial of service in n/a (medium 6.5) - [CVE-2018-6911](https://insights.sbomify.com/CVE-2018-6911/): Command injection in n/a (critical 9.8) - [CVE-2018-6910](https://insights.sbomify.com/CVE-2018-6910/): Information disclosure in n/a (high 7.5) - [CVE-2018-6909](https://insights.sbomify.com/CVE-2018-6909/): Other in n/a (medium 6.5) - [CVE-2018-6908](https://insights.sbomify.com/CVE-2018-6908/): Auth bypass in n/a (critical 9.8) - [CVE-2018-6907](https://insights.sbomify.com/CVE-2018-6907/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-6906](https://insights.sbomify.com/CVE-2018-6906/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6905](https://insights.sbomify.com/CVE-2018-6905/): Typo3 XSS Vulnerability (medium 4.8) - [CVE-2018-6904](https://insights.sbomify.com/CVE-2018-6904/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6903](https://insights.sbomify.com/CVE-2018-6903/): Business logic in n/a (high 8.8) - [CVE-2018-6902](https://insights.sbomify.com/CVE-2018-6902/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6900](https://insights.sbomify.com/CVE-2018-6900/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6893](https://insights.sbomify.com/CVE-2018-6893/): SQL injection in n/a (critical 9.8) - [CVE-2018-6892](https://insights.sbomify.com/CVE-2018-6892/): Memory corruption in n/a (critical 9.8) - [CVE-2018-6891](https://insights.sbomify.com/CVE-2018-6891/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6890](https://insights.sbomify.com/CVE-2018-6890/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-6889](https://insights.sbomify.com/CVE-2018-6889/): Open redirect in n/a (high 8.8) - [CVE-2018-6888](https://insights.sbomify.com/CVE-2018-6888/): Cross-site request forgery in n/a (high 8.0) - [CVE-2018-6885](https://insights.sbomify.com/CVE-2018-6885/): Path traversal in n/a (critical 9.8) - [CVE-2018-6883](https://insights.sbomify.com/CVE-2018-6883/): SQL injection in n/a (medium 4.9) - [CVE-2018-6882](https://insights.sbomify.com/CVE-2018-6882/): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild) - [CVE-2018-6881](https://insights.sbomify.com/CVE-2018-6881/): Information disclosure in n/a (medium 5.3) - [CVE-2018-6880](https://insights.sbomify.com/CVE-2018-6880/): Information disclosure in n/a (medium 5.3) - [CVE-2018-6879](https://insights.sbomify.com/CVE-2018-6879/): Business logic in n/a (high 8.8) - [CVE-2018-6878](https://insights.sbomify.com/CVE-2018-6878/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6876](https://insights.sbomify.com/CVE-2018-6876/): Memory corruption in n/a (medium 6.5) - [CVE-2018-6875](https://insights.sbomify.com/CVE-2018-6875/): Information disclosure in n/a (high 7.5) - [CVE-2018-6874](https://insights.sbomify.com/CVE-2018-6874/): Cross-Site Request Forgery (CSRF) in Auth0 (high 8.8) - [CVE-2018-6873](https://insights.sbomify.com/CVE-2018-6873/): Auth bypass in n/a (critical 9.8) - [CVE-2018-6872](https://insights.sbomify.com/CVE-2018-6872/): Denial of service in n/a (medium 5.5) - [CVE-2018-6871](https://insights.sbomify.com/CVE-2018-6871/): Server-side request forgery in n/a (critical 9.8) - [CVE-2018-6870](https://insights.sbomify.com/CVE-2018-6870/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6869](https://insights.sbomify.com/CVE-2018-6869/): Denial of service in n/a (medium 6.5) - [CVE-2018-6868](https://insights.sbomify.com/CVE-2018-6868/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6867](https://insights.sbomify.com/CVE-2018-6867/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6866](https://insights.sbomify.com/CVE-2018-6866/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6864](https://insights.sbomify.com/CVE-2018-6864/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6863](https://insights.sbomify.com/CVE-2018-6863/): SQL injection in n/a (critical 9.8) - [CVE-2018-6862](https://insights.sbomify.com/CVE-2018-6862/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6861](https://insights.sbomify.com/CVE-2018-6861/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6860](https://insights.sbomify.com/CVE-2018-6860/): File upload in n/a (high 8.8) - [CVE-2018-6859](https://insights.sbomify.com/CVE-2018-6859/): SQL injection in n/a (critical 9.8) - [CVE-2018-6858](https://insights.sbomify.com/CVE-2018-6858/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6857](https://insights.sbomify.com/CVE-2018-6857/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6856](https://insights.sbomify.com/CVE-2018-6856/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6855](https://insights.sbomify.com/CVE-2018-6855/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6854](https://insights.sbomify.com/CVE-2018-6854/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6853](https://insights.sbomify.com/CVE-2018-6853/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6852](https://insights.sbomify.com/CVE-2018-6852/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6851](https://insights.sbomify.com/CVE-2018-6851/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6849](https://insights.sbomify.com/CVE-2018-6849/): Information disclosure in n/a (medium 4.3) - [CVE-2018-6846](https://insights.sbomify.com/CVE-2018-6846/): Information disclosure in n/a (medium 5.3) - [CVE-2018-6845](https://insights.sbomify.com/CVE-2018-6845/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6844](https://insights.sbomify.com/CVE-2018-6844/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6843](https://insights.sbomify.com/CVE-2018-6843/): SQL injection in n/a (high 7.2) - [CVE-2018-6842](https://insights.sbomify.com/CVE-2018-6842/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6836](https://insights.sbomify.com/CVE-2018-6836/): Use after free in n/a (critical 9.8) - [CVE-2018-6835](https://insights.sbomify.com/CVE-2018-6835/): Etherpad Lite Access Restriction Bypass (critical 9.8) - [CVE-2018-6834](https://insights.sbomify.com/CVE-2018-6834/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6832](https://insights.sbomify.com/CVE-2018-6832/): Memory corruption in n/a (high 7.5) - [CVE-2018-6831](https://insights.sbomify.com/CVE-2018-6831/): Command injection in n/a (high 7.2) - [CVE-2018-6830](https://insights.sbomify.com/CVE-2018-6830/): Path traversal in n/a (high 7.5) - [CVE-2018-6829](https://insights.sbomify.com/CVE-2018-6829/): Weak cryptography in n/a (high 7.5) - [CVE-2018-6827](https://insights.sbomify.com/CVE-2018-6827/): Weak cryptography in n/a (high 8.1) - [CVE-2018-6826](https://insights.sbomify.com/CVE-2018-6826/): Code injection in n/a (high 7.5) - [CVE-2018-6825](https://insights.sbomify.com/CVE-2018-6825/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2018-6824](https://insights.sbomify.com/CVE-2018-6824/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6823](https://insights.sbomify.com/CVE-2018-6823/): Privilege escalation in n/a (critical 9.8) - [CVE-2018-6822](https://insights.sbomify.com/CVE-2018-6822/): Privilege escalation in n/a (critical 9.8) - [CVE-2018-6811](https://insights.sbomify.com/CVE-2018-6811/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6810](https://insights.sbomify.com/CVE-2018-6810/): Path traversal in n/a (high 7.5) - [CVE-2018-6809](https://insights.sbomify.com/CVE-2018-6809/): Privilege escalation in n/a (critical 9.8) - [CVE-2018-6808](https://insights.sbomify.com/CVE-2018-6808/): Path traversal in n/a (high 7.5) - [CVE-2018-6806](https://insights.sbomify.com/CVE-2018-6806/): Information disclosure in n/a (medium 6.5) - [CVE-2018-6799](https://insights.sbomify.com/CVE-2018-6799/): Memory corruption in n/a (high 8.8) - [CVE-2018-6798](https://insights.sbomify.com/CVE-2018-6798/): Information disclosure in n/a (high 7.5) - [CVE-2018-6797](https://insights.sbomify.com/CVE-2018-6797/): Memory corruption in n/a (critical 9.8) - [CVE-2018-6796](https://insights.sbomify.com/CVE-2018-6796/): Cross-site scripting in n/a (medium 5.4) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/22/