# Vulnerabilities published in 2018 - [CVE-2018-6346](https://insights.sbomify.com/CVE-2018-6346/): Denial of service in Proxygen (high 7.5) - [CVE-2018-6345](https://insights.sbomify.com/CVE-2018-6345/): Memory corruption in HHVM (critical 9.8) - [CVE-2018-6344](https://insights.sbomify.com/CVE-2018-6344/): Memory corruption in WhatsApp for Android (high 7.5) - [CVE-2018-6343](https://insights.sbomify.com/CVE-2018-6343/): Proxygen fails to validate that a secondary auth manager is set before dereferencing it. (high 7.5) - [CVE-2018-6342](https://insights.sbomify.com/CVE-2018-6342/): react-dev-utils on Windows vulnerable to Remote Code Execution (critical 9.8) - [CVE-2018-6341](https://insights.sbomify.com/CVE-2018-6341/): Cross-Site Scripting in react-dom (medium 6.1) - [CVE-2018-6340](https://insights.sbomify.com/CVE-2018-6340/): Information disclosure in HHVM (high 8.1) - [CVE-2018-6339](https://insights.sbomify.com/CVE-2018-6339/): Memory corruption in WhatsApp Business for Android (critical 9.8) - [CVE-2018-6337](https://insights.sbomify.com/CVE-2018-6337/): Weak cryptography in HHVM (high 7.5) - [CVE-2018-6336](https://insights.sbomify.com/CVE-2018-6336/): Security feature bypass in osquery (high 7.8) - [CVE-2018-6335](https://insights.sbomify.com/CVE-2018-6335/): Denial of service in HHVM (high 7.5) - [CVE-2018-6334](https://insights.sbomify.com/CVE-2018-6334/): Other in HHVM (critical 9.8) - [CVE-2018-6333](https://insights.sbomify.com/CVE-2018-6333/): Nuclide Improper Input Validation (critical 9.8) - [CVE-2018-6332](https://insights.sbomify.com/CVE-2018-6332/): Denial of service in HHVM (medium 5.9) - [CVE-2018-6331](https://insights.sbomify.com/CVE-2018-6331/): Deserialization in Buck (critical 9.8) - [CVE-2018-6330](https://insights.sbomify.com/CVE-2018-6330/): SQL injection in n/a (high 8.8) - [CVE-2018-6329](https://insights.sbomify.com/CVE-2018-6329/): SQL injection in n/a (critical 9.8) - [CVE-2018-6328](https://insights.sbomify.com/CVE-2018-6328/): Auth bypass in n/a (critical 9.8) - [CVE-2018-6324](https://insights.sbomify.com/CVE-2018-6324/): Open redirect in n/a (medium 6.1) - [CVE-2018-6323](https://insights.sbomify.com/CVE-2018-6323/): Integer overflow in n/a (high 7.8) - [CVE-2018-6322](https://insights.sbomify.com/CVE-2018-6322/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6321](https://insights.sbomify.com/CVE-2018-6321/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6320](https://insights.sbomify.com/CVE-2018-6320/): Other in n/a (critical 9.8) - [CVE-2018-6319](https://insights.sbomify.com/CVE-2018-6319/): Null dereference in n/a (medium 5.5) - [CVE-2018-6318](https://insights.sbomify.com/CVE-2018-6318/): Other in n/a (high 7.8) - [CVE-2018-6317](https://insights.sbomify.com/CVE-2018-6317/): Information disclosure in n/a (critical 9.1) - [CVE-2018-6316](https://insights.sbomify.com/CVE-2018-6316/): Security feature bypass in n/a (high 7.5) - [CVE-2018-6315](https://insights.sbomify.com/CVE-2018-6315/): Integer overflow in n/a (high 8.8) - [CVE-2018-6313](https://insights.sbomify.com/CVE-2018-6313/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-6312](https://insights.sbomify.com/CVE-2018-6312/): Hardcoded credentials in n/a (high 7.2) - [CVE-2018-6311](https://insights.sbomify.com/CVE-2018-6311/): Missing authorization in n/a (medium 6.8) - [CVE-2018-6308](https://insights.sbomify.com/CVE-2018-6308/): SQL injection in n/a (critical 9.8) - [CVE-2018-6307](https://insights.sbomify.com/CVE-2018-6307/): Use after free in LibVNC (high 8.1) - [CVE-2018-6306](https://insights.sbomify.com/CVE-2018-6306/): Code injection in Kaspersky Password Manager (high 7.8) - [CVE-2018-6305](https://insights.sbomify.com/CVE-2018-6305/): Denial of service in Gemalto's Sentinel LDK RTE (high 7.5) - [CVE-2018-6304](https://insights.sbomify.com/CVE-2018-6304/): Denial of service in Gemalto's Sentinel LDK RTE (high 7.5) - [CVE-2018-6303](https://insights.sbomify.com/CVE-2018-6303/): Denial of service in Hanwha Techwin Smartcams (high 7.5) - [CVE-2018-6302](https://insights.sbomify.com/CVE-2018-6302/): Denial of service in Hanwha Techwin Smartcams (high 7.5) - [CVE-2018-6301](https://insights.sbomify.com/CVE-2018-6301/): Missing authorization in Hanwha Techwin Smartcams (high 7.5) - [CVE-2018-6300](https://insights.sbomify.com/CVE-2018-6300/): Auth bypass in Hanwha Techwin Smartcams (critical 9.8) - [CVE-2018-6299](https://insights.sbomify.com/CVE-2018-6299/): Auth bypass in Hanwha Techwin Smartcams (critical 9.8) - [CVE-2018-6298](https://insights.sbomify.com/CVE-2018-6298/): Code injection in Hanwha Techwin Smartcams (critical 9.8) - [CVE-2018-6297](https://insights.sbomify.com/CVE-2018-6297/): Memory corruption in Hanwha Techwin Smartcams (critical 9.8) - [CVE-2018-6296](https://insights.sbomify.com/CVE-2018-6296/): Security feature bypass in Hanwha Techwin Smartcams (medium 5.3) - [CVE-2018-6295](https://insights.sbomify.com/CVE-2018-6295/): Weak cryptography in Hanwha Techwin Smartcams (critical 9.8) - [CVE-2018-6294](https://insights.sbomify.com/CVE-2018-6294/): Auth bypass in Hanwha Techwin Smartcams (critical 9.8) - [CVE-2018-6293](https://insights.sbomify.com/CVE-2018-6293/): Path traversal in Saperion Web Client (high 7.5) - [CVE-2018-6292](https://insights.sbomify.com/CVE-2018-6292/): Code injection in Saperion Web Client (critical 9.8) - [CVE-2018-6291](https://insights.sbomify.com/CVE-2018-6291/): Cross-site scripting in Kaspersky Secure Mail Gateway (medium 6.1) - [CVE-2018-6290](https://insights.sbomify.com/CVE-2018-6290/): Privilege escalation in Kaspersky Secure Mail Gateway (high 7.8) - [CVE-2018-6289](https://insights.sbomify.com/CVE-2018-6289/): Code injection in Kaspersky Secure Mail Gateway (critical 9.8) - [CVE-2018-6288](https://insights.sbomify.com/CVE-2018-6288/): Cross-site request forgery in Kaspersky Secure Mail Gateway (high 8.8) - [CVE-2018-6271](https://insights.sbomify.com/CVE-2018-6271/): Memory corruption in Android (high 7.8) - [CVE-2018-6269](https://insights.sbomify.com/CVE-2018-6269/): Null dereference in Jetson Tegra TX2 (high 7.8) - [CVE-2018-6268](https://insights.sbomify.com/CVE-2018-6268/): Use after free in Android (high 7.8) - [CVE-2018-6267](https://insights.sbomify.com/CVE-2018-6267/): Other in Android (high 7.8) - [CVE-2018-6266](https://insights.sbomify.com/CVE-2018-6266/): Information disclosure in GeForce Experience (medium 5.5) - [CVE-2018-6265](https://insights.sbomify.com/CVE-2018-6265/): Privilege escalation in GeForce Experience (high 7.8) - [CVE-2018-6263](https://insights.sbomify.com/CVE-2018-6263/): Privilege escalation in GeForce Experience (high 7.8) - [CVE-2018-6262](https://insights.sbomify.com/CVE-2018-6262/): Information disclosure in GeForce Experience (low 2.5) - [CVE-2018-6261](https://insights.sbomify.com/CVE-2018-6261/): Misconfiguration in GeForce Experience (high 7.0) - [CVE-2018-6260](https://insights.sbomify.com/CVE-2018-6260/): Information disclosure in GPU Graphics Driver (medium 5.5) - [CVE-2018-6259](https://insights.sbomify.com/CVE-2018-6259/): Information disclosure in NVIDIA GeForce Experience (low 2.5) - [CVE-2018-6258](https://insights.sbomify.com/CVE-2018-6258/): Information disclosure in NVIDIA GeForce Experience (medium 4.7) - [CVE-2018-6257](https://insights.sbomify.com/CVE-2018-6257/): Missing authorization in NVIDIA GeForce Experience (high 7.0) - [CVE-2018-6254](https://insights.sbomify.com/CVE-2018-6254/): Information disclosure in Android (low 3.3) - [CVE-2018-6253](https://insights.sbomify.com/CVE-2018-6253/): Denial of service in GPU Display Driver (medium 5.5) - [CVE-2018-6252](https://insights.sbomify.com/CVE-2018-6252/): Denial of service in GPU Display Driver (medium 5.5) - [CVE-2018-6251](https://insights.sbomify.com/CVE-2018-6251/): Memory corruption in GPU Display Driver (high 7.8) - [CVE-2018-6250](https://insights.sbomify.com/CVE-2018-6250/): Null dereference in GPU Display Driver (high 8.8) - [CVE-2018-6249](https://insights.sbomify.com/CVE-2018-6249/): Null dereference in GPU Display Driver (high 8.8) - [CVE-2018-6248](https://insights.sbomify.com/CVE-2018-6248/): Memory corruption in GPU Display Driver (high 8.8) - [CVE-2018-6247](https://insights.sbomify.com/CVE-2018-6247/): Null dereference in GPU Display Driver (high 8.8) - [CVE-2018-6246](https://insights.sbomify.com/CVE-2018-6246/): Information disclosure in Android (medium 5.3) - [CVE-2018-6243](https://insights.sbomify.com/CVE-2018-6243/): Other in Tegra TLK Widevine Trust Application (high 7.8) - [CVE-2018-6242](https://insights.sbomify.com/CVE-2018-6242/): Memory corruption in Some NVIDIA Tegra Mobile Processors (medium 6.8) - [CVE-2018-6241](https://insights.sbomify.com/CVE-2018-6241/): Other in Android (high 7.8) - [CVE-2018-6240](https://insights.sbomify.com/CVE-2018-6240/): Memory corruption in Android (high 7.8) - [CVE-2018-6239](https://insights.sbomify.com/CVE-2018-6239/): Information disclosure in Jetson TX2 (medium 5.5) - [CVE-2018-6237](https://insights.sbomify.com/CVE-2018-6237/): Denial of service in Trend Micro Smart Protection Server (Standalone) (high 7.5) - [CVE-2018-6236](https://insights.sbomify.com/CVE-2018-6236/): Race condition in Trend Micro Maximum Security (high 7.0) - [CVE-2018-6235](https://insights.sbomify.com/CVE-2018-6235/): Memory corruption in Trend Micro Maximum Security (high 7.8) - [CVE-2018-6234](https://insights.sbomify.com/CVE-2018-6234/): Information disclosure in Trend Micro Maximum Security (medium 5.5) - [CVE-2018-6233](https://insights.sbomify.com/CVE-2018-6233/): Memory corruption in Trend Micro Maximum Security (high 7.8) - [CVE-2018-6232](https://insights.sbomify.com/CVE-2018-6232/): Memory corruption in Trend Micro Maximum Security (high 7.8) - [CVE-2018-6231](https://insights.sbomify.com/CVE-2018-6231/): Command injection in Trend Micro Smart Protection Server (Standalone) (critical 9.8) - [CVE-2018-6230](https://insights.sbomify.com/CVE-2018-6230/): SQL injection in Trend Micro Email Encryption Gateway (medium 6.8) - [CVE-2018-6229](https://insights.sbomify.com/CVE-2018-6229/): SQL injection in Trend Micro Email Encryption Gateway (critical 9.8) - [CVE-2018-6228](https://insights.sbomify.com/CVE-2018-6228/): SQL injection in Trend Micro Email Encryption Gateway (critical 9.8) - [CVE-2018-6227](https://insights.sbomify.com/CVE-2018-6227/): Cross-site scripting in Trend Micro Email Encryption Gateway (medium 5.4) - [CVE-2018-6226](https://insights.sbomify.com/CVE-2018-6226/): Cross-site scripting in Trend Micro Email Encryption Gateway (medium 5.4) - [CVE-2018-6225](https://insights.sbomify.com/CVE-2018-6225/): XML external entity in Trend Micro Email Encryption Gateway (medium 4.3) - [CVE-2018-6224](https://insights.sbomify.com/CVE-2018-6224/): Cross-site request forgery in Trend Micro Email Encryption Gateway (high 8.8) - [CVE-2018-6223](https://insights.sbomify.com/CVE-2018-6223/): Missing authorization in Trend Micro Email Encryption Gateway (critical 9.8) - [CVE-2018-6222](https://insights.sbomify.com/CVE-2018-6222/): Command injection in Trend Micro Email Encryption Gateway (high 7.8) - [CVE-2018-6221](https://insights.sbomify.com/CVE-2018-6221/): Code injection in Trend Micro Email Encryption Gateway (high 8.1) - [CVE-2018-6220](https://insights.sbomify.com/CVE-2018-6220/): File upload in Trend Micro Email Encryption Gateway (critical 9.8) - [CVE-2018-6219](https://insights.sbomify.com/CVE-2018-6219/): Other in Trend Micro Email Encryption Gateway (medium 6.5) - [CVE-2018-6218](https://insights.sbomify.com/CVE-2018-6218/): Other in Trend Micro User-Mode Hooking (UMH) Module (high 7.0) - [CVE-2018-6217](https://insights.sbomify.com/CVE-2018-6217/): Denial of service in n/a (medium 5.5) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/26/