VYPR

CVEs

1,665 total · page 25 of 34

AllCriticalHighKEV
  • CVE-2019-9874CriKEVMay 31, 2019
    Sitecore
    CMS
    risk 0.82cvss 9.8epss 0.84

    Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter…

  • CVE-2019-9670CriKEVMay 29, 2019
    VMware
    Zimbra Collaboration Suite
    risk 0.80cvss 9.8epss 1.00

    mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.

  • CVE-2018-13383MedKEVMay 29, 2019
    Fortinet
    Fortios
    risk 0.49cvss 4.3epss 0.34

    A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to…

  • CVE-2018-7841CriKEVMay 22, 2019
    U.motion
    U.motion Builder Software Version 1.3.4
    risk 0.84cvss 9.8epss 0.73

    A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered.

  • CVE-2019-11634CriKEVMay 22, 2019
    Citrix Systems
    Workspace
    risk 0.82cvss 9.8epss 0.08

    Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

  • CVE-2019-0903HigKEVMay 16, 2019
    Microsoft
    Windows Graphics Device Interface
    risk 0.71cvss 8.8epss 0.22

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

  • CVE-2019-0863HigKEVMay 16, 2019
    Microsoft
    Windows Error Reporting
    risk 0.66cvss 7.8epss 0.05

    An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.

  • CVE-2019-0708CriKEVMay 16, 2019
    Microsoft
    Remote Desktop Services
    risk 0.93cvss 9.8epss 1.00

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution…

  • CVE-2018-14839CriKEVMay 14, 2019
    LG
    N1A1 NAS
    risk 0.83cvss 9.8epss 0.89

    LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.

  • CVE-2019-3568CriKEVMay 14, 2019
    Whatsapp
    Whatsapp
    risk 0.79cvss 9.8epss 0.39

    A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp…

  • CVE-2019-11510CriKEVMay 8, 2019
    Ivanti
    Connect Secure
    risk 0.94cvss 10.0epss 1.00

    In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .

  • CVE-2018-4063HigKEVMay 6, 2019
    Sierrawireless
    AirLink ES450
    risk 0.71cvss 8.8epss 0.28

    An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can…

  • CVE-2017-18368CriKEVMay 2, 2019
    Zyxel
    P660HN-T1A
    risk 0.86cvss 9.8epss 0.95

    The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page…

  • CVE-2019-3929CriKEVApr 30, 2019
    Infocus
    Liteshow3 Firmware
    risk 0.87cvss 9.8epss 0.99

    The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware…

  • CVE-2019-9621HigKEVApr 30, 2019
    VMware
    Zimbra Collaboration Suite
    risk 0.63cvss 7.5epss 0.81

    Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.

  • CVE-2019-2725CriKEVApr 26, 2019
    Oracle Corporation
    Weblogic Server
    risk 0.93cvss 9.8epss 1.00

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2019-11539HigKEVApr 26, 2019
    Ivanti
    Connect Secure
    risk 0.76cvss 7.2epss 0.99

    In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before…

  • CVE-2019-2616HigKEVApr 23, 2019
    Oracle Corporation
    Fusion Middleware
    risk 0.69cvss 7.2epss 0.92

    Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated…

  • CVE-2019-3398HigKEVApr 18, 2019
    Atlassian
    Confluence
    risk 0.80cvss 8.8epss 0.97

    Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space…

  • CVE-2019-0859HigKEVApr 9, 2019
    Microsoft
    Windows
    risk 0.63cvss 7.8epss 0.04

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.

  • CVE-2019-0841HigKEVApr 9, 2019
    Microsoft
    Windows AppX Deployment Service
    risk 0.75cvss 7.8epss 0.41

    An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.

  • CVE-2019-0803HigKEVApr 9, 2019
    Microsoft
    Windows
    risk 0.69cvss 7.8epss 0.45

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.

  • CVE-2019-0752HigKEVApr 9, 2019
    Microsoft
    Internet Explorer
    risk 0.76cvss 7.5epss 0.82

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.

  • CVE-2019-0808HigKEVApr 9, 2019
    Microsoft
    Windows
    risk 0.70cvss 7.8epss 0.53

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.

  • CVE-2019-0797HigKEVApr 9, 2019
    Microsoft
    Win32K
    risk 0.63cvss 7.8epss 0.02

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.

  • CVE-2019-0703MedKEVApr 9, 2019
    Microsoft
    Windows
    risk 0.55cvss 6.5epss 0.10

    An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.

  • CVE-2019-0211HigKEVApr 8, 2019
    Apache
    HTTP Server
    risk 0.71cvss 7.8epss 0.65

    In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent…

  • CVE-2019-11001HigKEVApr 8, 2019
    Reolink
    RLC-410W
    risk 0.62cvss 7.2epss 0.38

    On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.

  • CVE-2018-4344HigKEVApr 3, 2019
    Apple Inc.
    tvOS
    risk 0.63cvss 7.8epss 0.03

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

  • CVE-2019-5418HigKEVMar 27, 2019
    Fedoraproject
    Fedora
    risk 0.65cvss 7.5epss 0.99

    There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.

  • CVE-2019-10068CriKEVMar 26, 2019
    Kentico
    Xperience
    risk 0.86cvss 9.8epss 0.96

    An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication…

  • CVE-2019-7609CriKEVMar 25, 2019
    Kibana
    Kibana
    risk 0.81cvss 10.0epss 0.95

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing…

  • CVE-2019-3396CriKEVMar 25, 2019
    Atlassian
    Confluence
    risk 0.93cvss 9.8epss 1.00

    The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2…

  • CVE-2019-9978MedKEVMar 24, 2019
    WordPress
    Social Warfare
    risk 0.61cvss 6.1epss 0.73

    The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.

  • CVE-2019-7238CriKEVMar 21, 2019
    Sonatype
    Nexus
    risk 0.75cvss 9.8epss 0.77

    Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

  • CVE-2019-1003030CriKEVMar 8, 2019
    Jenkins Project
    Pipeline: Groovy Plugin
    risk 0.21cvss 9.9epss 0.76

    A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.

  • CVE-2019-1003029CriKEVMar 8, 2019
    Jenkins Project
    Script Security
    risk 0.21cvss 9.9epss 0.74

    A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows…

  • CVE-2018-18809MedKEVMar 7, 2019
    TIBCO Software
    Jasperreports Server
    risk 0.61cvss 6.5epss 0.79

    The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports…

  • CVE-2019-0676MedKEVMar 5, 2019
    Microsoft
    Internet Explorer
    risk 0.55cvss 6.5epss 0.08

    An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.

  • CVE-2019-0604CriKEVMar 5, 2019
    Microsoft
    Sharepoint Server
    risk 0.93cvss 9.8epss 1.00

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

  • CVE-2019-6223HigKEVMar 5, 2019
    Apple Inc.
    macOS
    risk 0.61cvss 7.5epss 0.03

    A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.

  • CVE-2019-9082HigKEVFeb 24, 2019
    Thinkphp
    Thinkphp
    risk 0.73cvss 8.8epss 0.97

    ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.

  • CVE-2019-6340HigKEVFeb 21, 2019
    Drupal
    Drupal
    risk 0.68cvss 8.1epss 0.92

    Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions is met: The site has…

  • CVE-2019-8394MedKEVFeb 17, 2019
    Zohocorp
    Manageengine Servicedesk Plus
    risk 0.62cvss 6.5epss 0.63

    Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.

  • CVE-2018-20250HigKEVFeb 5, 2019
    WinRAR
    WinRAR
    risk 0.79cvss 7.8epss 0.96

    In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating…

  • CVE-2018-20753CriKEVFeb 5, 2019
    Kaseya
    VSA RMM
    risk 0.84cvss 9.8epss 0.29

    Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild.

  • CVE-2017-18362CriKEVFeb 5, 2019
    Connectwise
    ManagedITSync
    risk 0.89cvss 9.8epss 0.87

    ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware…

  • CVE-2019-1653HigKEVJan 24, 2019
    Cisco Systems, Inc.
    RV320
    risk 0.72cvss 7.5epss 1.00

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An…

  • CVE-2019-1652HigKEVJan 24, 2019
    Cisco Systems, Inc.
    RV320
    risk 0.69cvss 7.2epss 0.96

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due…

  • CVE-2018-13374MedKEVJan 22, 2019
    Fortinet
    Fortios
    risk 0.52cvss 4.3epss 0.38

    A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server…