# Vulnerabilities published in 2018 - [CVE-2018-6795](https://insights.sbomify.com/CVE-2018-6795/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6794](https://insights.sbomify.com/CVE-2018-6794/): Security feature bypass in n/a (medium 5.3) - [CVE-2018-6792](https://insights.sbomify.com/CVE-2018-6792/): SQL injection in n/a (high 8.8) - [CVE-2018-6791](https://insights.sbomify.com/CVE-2018-6791/): Command injection in n/a (medium 6.8) - [CVE-2018-6790](https://insights.sbomify.com/CVE-2018-6790/): Information disclosure in n/a (medium 5.3) - [CVE-2018-6789](https://insights.sbomify.com/CVE-2018-6789/): Exim Buffer Overflow (critical 9.8, exploited in the wild) - [CVE-2018-6788](https://insights.sbomify.com/CVE-2018-6788/): Denial of service in n/a (high 7.8) - [CVE-2018-6787](https://insights.sbomify.com/CVE-2018-6787/): Denial of service in n/a (high 7.8) - [CVE-2018-6786](https://insights.sbomify.com/CVE-2018-6786/): Denial of service in n/a (high 7.8) - [CVE-2018-6785](https://insights.sbomify.com/CVE-2018-6785/): Denial of service in n/a (high 7.8) - [CVE-2018-6784](https://insights.sbomify.com/CVE-2018-6784/): Denial of service in n/a (high 7.8) - [CVE-2018-6783](https://insights.sbomify.com/CVE-2018-6783/): Denial of service in n/a (high 7.8) - [CVE-2018-6782](https://insights.sbomify.com/CVE-2018-6782/): Denial of service in n/a (high 7.8) - [CVE-2018-6781](https://insights.sbomify.com/CVE-2018-6781/): Denial of service in n/a (high 7.8) - [CVE-2018-6780](https://insights.sbomify.com/CVE-2018-6780/): Denial of service in n/a (high 7.8) - [CVE-2018-6779](https://insights.sbomify.com/CVE-2018-6779/): Denial of service in n/a (high 7.8) - [CVE-2018-6778](https://insights.sbomify.com/CVE-2018-6778/): Denial of service in n/a (high 7.8) - [CVE-2018-6777](https://insights.sbomify.com/CVE-2018-6777/): Denial of service in n/a (high 7.8) - [CVE-2018-6776](https://insights.sbomify.com/CVE-2018-6776/): Denial of service in n/a (high 7.8) - [CVE-2018-6775](https://insights.sbomify.com/CVE-2018-6775/): Denial of service in n/a (high 7.8) - [CVE-2018-6774](https://insights.sbomify.com/CVE-2018-6774/): Denial of service in n/a (high 7.8) - [CVE-2018-6773](https://insights.sbomify.com/CVE-2018-6773/): Denial of service in n/a (high 7.8) - [CVE-2018-6772](https://insights.sbomify.com/CVE-2018-6772/): Denial of service in n/a (high 7.8) - [CVE-2018-6771](https://insights.sbomify.com/CVE-2018-6771/): Denial of service in n/a (high 7.8) - [CVE-2018-6770](https://insights.sbomify.com/CVE-2018-6770/): Denial of service in n/a (high 7.8) - [CVE-2018-6769](https://insights.sbomify.com/CVE-2018-6769/): Denial of service in n/a (high 7.8) - [CVE-2018-6768](https://insights.sbomify.com/CVE-2018-6768/): Denial of service in n/a (high 7.8) - [CVE-2018-6767](https://insights.sbomify.com/CVE-2018-6767/): Memory corruption in n/a (high 7.8) - [CVE-2018-6766](https://insights.sbomify.com/CVE-2018-6766/): Other in n/a (high 7.8) - [CVE-2018-6765](https://insights.sbomify.com/CVE-2018-6765/): Other in n/a (high 7.8) - [CVE-2018-6764](https://insights.sbomify.com/CVE-2018-6764/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6759](https://insights.sbomify.com/CVE-2018-6759/): Denial of service in n/a (medium 5.5) - [CVE-2018-6758](https://insights.sbomify.com/CVE-2018-6758/): Memory corruption in n/a (critical 9.8) - [CVE-2018-6757](https://insights.sbomify.com/CVE-2018-6757/): True Key (TK) Windows Client - Privilege Escalation vulnerability (high 7.5) - [CVE-2018-6756](https://insights.sbomify.com/CVE-2018-6756/): True Key (TK) Windows Client - Authentication Abuse vulnerability (high 7.8) - [CVE-2018-6755](https://insights.sbomify.com/CVE-2018-6755/): True Key (TK) Windows Client - Weak Directory Permission Vulnerability (high 7.2) - [CVE-2018-6707](https://insights.sbomify.com/CVE-2018-6707/): McAfee Agent Insecure usage of temporary files vulnerability (low 3.7) - [CVE-2018-6706](https://insights.sbomify.com/CVE-2018-6706/): McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerability (low 2.3) - [CVE-2018-6705](https://insights.sbomify.com/CVE-2018-6705/): McAfee Agent (MA) for Linux Privilege Escalation vulnerability (low 2.3) - [CVE-2018-6704](https://insights.sbomify.com/CVE-2018-6704/): McAfee Agent for Linux Privilege Escalation vulnerability (medium 4.7) - [CVE-2018-6703](https://insights.sbomify.com/CVE-2018-6703/): Remote Logging functionality had a use after free vulnerability in McAfee Agent (critical 9.8) - [CVE-2018-6700](https://insights.sbomify.com/CVE-2018-6700/): True Key (TK) - DLL Search Order Hijacking vulnerability (high 7.5) - [CVE-2018-6695](https://insights.sbomify.com/CVE-2018-6695/): Threat Intelligence Exchange Server (TIE Server) SSH host keys generation vulnerability (medium 6.1) - [CVE-2018-6693](https://insights.sbomify.com/CVE-2018-6693/): Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability (medium 5.6) - [CVE-2018-6692](https://insights.sbomify.com/CVE-2018-6692/): Wemo Insight Smart Plug - Remote Code Execution vulnerability (medium 5.9) - [CVE-2018-6690](https://insights.sbomify.com/CVE-2018-6690/): McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC (medium 6.1) - [CVE-2018-6689](https://insights.sbomify.com/CVE-2018-6689/): Data Loss Prevention Endpoint (DLPe) - Authentication Bypass vulnerability (high 7.0) - [CVE-2018-6687](https://insights.sbomify.com/CVE-2018-6687/): GetSusp (a free McAfee tool) update fixes an infinite loop vulnerability (CVE-2018-6687) (medium 6.5) - [CVE-2018-6686](https://insights.sbomify.com/CVE-2018-6686/): Drive Encryption (MDE) - Authentication Bypass vulnerability (high 7.0) - [CVE-2018-6683](https://insights.sbomify.com/CVE-2018-6683/): Security feature bypass in Data Loss Prevention (DLP) for Windows (high 7.2) - [CVE-2018-6682](https://insights.sbomify.com/CVE-2018-6682/): True Key (TK) - Cross Site Scripting Exposure (medium 5.9) - [CVE-2018-6681](https://insights.sbomify.com/CVE-2018-6681/): SB10244 - Network Security Management (NSM) - Abuse of Functionality vulnerability (medium 5.5) - [CVE-2018-6678](https://insights.sbomify.com/CVE-2018-6678/): McAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability (low 3.4) - [CVE-2018-6677](https://insights.sbomify.com/CVE-2018-6677/): McAfee Web Gateway (MWG) - Directory Traversal vulnerability (high 7.6) - [CVE-2018-6674](https://insights.sbomify.com/CVE-2018-6674/): Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges (medium 6.8) - [CVE-2018-6672](https://insights.sbomify.com/CVE-2018-6672/): SB10240 - ePolicy Orchestrator (ePO) - Information disclosure vulnerablity (medium 5.7) - [CVE-2018-6671](https://insights.sbomify.com/CVE-2018-6671/): SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability (medium 4.7) - [CVE-2018-6670](https://insights.sbomify.com/CVE-2018-6670/): External Entity Attack vulnerability in McAfee Common UI (CUI) (high 7.6) - [CVE-2018-6669](https://insights.sbomify.com/CVE-2018-6669/): Bypass Application Control through an ASP.NET form (medium 6.3) - [CVE-2018-6668](https://insights.sbomify.com/CVE-2018-6668/): Bypass Application Control with simple DLL (medium 6.1) - [CVE-2018-6667](https://insights.sbomify.com/CVE-2018-6667/): McAfee Web Gateway - Authentication Bypass vulnerability (critical 10.0) - [CVE-2018-6664](https://insights.sbomify.com/CVE-2018-6664/): Security feature bypass in Data Loss Prevention (DLP) Endpoint (medium 5.8) - [CVE-2018-6662](https://insights.sbomify.com/CVE-2018-6662/): SB10232 - McAfee Management of Native Encryption (MNE) - Privilege Escalation vulnerability (high 7.5) - [CVE-2018-6661](https://insights.sbomify.com/CVE-2018-6661/): TS102801 True Key DLL Side-Loading vulnerability (high 7.5) - [CVE-2018-6660](https://insights.sbomify.com/CVE-2018-6660/): SB10228 ePO Directory Traversal vulnerability (medium 6.2) - [CVE-2018-6659](https://insights.sbomify.com/CVE-2018-6659/): SB10228 ePO Reflected Cross-Site Scripting vulnerability (low 3.7) - [CVE-2018-6656](https://insights.sbomify.com/CVE-2018-6656/): Cross-site request forgery in n/a (medium 6.5) - [CVE-2018-6655](https://insights.sbomify.com/CVE-2018-6655/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-6654](https://insights.sbomify.com/CVE-2018-6654/): Information disclosure in n/a (high 8.8) - [CVE-2018-6653](https://insights.sbomify.com/CVE-2018-6653/): Weak cryptography in n/a (medium 5.3) - [CVE-2018-6651](https://insights.sbomify.com/CVE-2018-6651/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-6644](https://insights.sbomify.com/CVE-2018-6644/): Null dereference in n/a (high 7.5) - [CVE-2018-6643](https://insights.sbomify.com/CVE-2018-6643/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6641](https://insights.sbomify.com/CVE-2018-6641/): Use after free in n/a (critical 9.8) - [CVE-2018-6640](https://insights.sbomify.com/CVE-2018-6640/): Memory corruption in n/a (critical 9.8) - [CVE-2018-6639](https://insights.sbomify.com/CVE-2018-6639/): Memory corruption in n/a (critical 9.8) - [CVE-2018-6638](https://insights.sbomify.com/CVE-2018-6638/): Memory corruption in n/a (critical 9.8) - [CVE-2018-6635](https://insights.sbomify.com/CVE-2018-6635/): Security feature bypass in n/a (high 7.5) - [CVE-2018-6634](https://insights.sbomify.com/CVE-2018-6634/): Auth bypass in n/a (critical 9.8) - [CVE-2018-6633](https://insights.sbomify.com/CVE-2018-6633/): Denial of service in n/a (high 7.8) - [CVE-2018-6632](https://insights.sbomify.com/CVE-2018-6632/): Denial of service in n/a (high 7.8) - [CVE-2018-6631](https://insights.sbomify.com/CVE-2018-6631/): Denial of service in n/a (high 7.8) - [CVE-2018-6630](https://insights.sbomify.com/CVE-2018-6630/): Denial of service in n/a (high 7.8) - [CVE-2018-6629](https://insights.sbomify.com/CVE-2018-6629/): Denial of service in n/a (high 7.8) - [CVE-2018-6628](https://insights.sbomify.com/CVE-2018-6628/): Denial of service in n/a (high 7.8) - [CVE-2018-6627](https://insights.sbomify.com/CVE-2018-6627/): Denial of service in n/a (high 7.8) - [CVE-2018-6626](https://insights.sbomify.com/CVE-2018-6626/): Denial of service in n/a (high 7.8) - [CVE-2018-6625](https://insights.sbomify.com/CVE-2018-6625/): Denial of service in n/a (high 7.8) - [CVE-2018-6624](https://insights.sbomify.com/CVE-2018-6624/): Auth bypass in n/a (critical 9.8) - [CVE-2018-6623](https://insights.sbomify.com/CVE-2018-6623/): Privilege escalation in n/a (high 8.8) - [CVE-2018-6622](https://insights.sbomify.com/CVE-2018-6622/): An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the (high 7.1) - [CVE-2018-6621](https://insights.sbomify.com/CVE-2018-6621/): Denial of service in n/a (medium 6.5) - [CVE-2018-6619](https://insights.sbomify.com/CVE-2018-6619/): Weak cryptography in n/a (high 7.8) - [CVE-2018-6618](https://insights.sbomify.com/CVE-2018-6618/): Information disclosure in n/a (high 7.8) - [CVE-2018-6617](https://insights.sbomify.com/CVE-2018-6617/): Auth bypass in n/a (high 7.8) - [CVE-2018-6616](https://insights.sbomify.com/CVE-2018-6616/): Denial of service in n/a (medium 5.5) - [CVE-2018-6612](https://insights.sbomify.com/CVE-2018-6612/): Integer overflow in n/a (medium 5.5) - [CVE-2018-6611](https://insights.sbomify.com/CVE-2018-6611/): Memory corruption in n/a (high 8.8) - [CVE-2018-6610](https://insights.sbomify.com/CVE-2018-6610/): Information disclosure in n/a (high 7.5) - [CVE-2018-6609](https://insights.sbomify.com/CVE-2018-6609/): SQL injection in n/a (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/23/