VYPR

CVEs

112,922 total · page 1062 of 2,259

AllCriticalHighKEV
  • CVE-2020-28369HigDec 12, 2023
    Etrust
    Privilege Management For Windows
    risk 0.51cvss 7.8epss 0.00

    In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp.

  • CVE-2020-12614HigDec 12, 2023
    Etrust
    Privilege Management For Windows
    risk 0.51cvss 7.8epss 0.00

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is…

  • CVE-2020-12612HigDec 12, 2023
    Etrust
    Privilege Management For Windows
    risk 0.51cvss 7.8epss 0.00

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program to elevate, it can typically be found within the Program Files (x86) folder and therefore uses the %ProgramFiles(x86)% environment variable. However, when this same…

  • CVE-2020-12615HigDec 12, 2023
    Etrust
    Privilege Management For Windows
    risk 0.51cvss 7.8epss 0.00

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary…

  • CVE-2023-49692HigDec 12, 2023
    Siemens Foundation
    SCALANCE M804PB
    risk 0.47cvss 7.2epss 0.01

    A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router…

  • CVE-2023-49691HigDec 12, 2023
    Siemens Foundation
    SCALANCE M804PB
    risk 0.47cvss 7.2epss 0.01

    A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router…

  • CVE-2023-48428HigDec 12, 2023
    SINEC INS
    SINEC INS
    risk 0.47cvss 7.2epss 0.01

    A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service…

  • CVE-2023-48427HigDec 12, 2023
    Siemens Foundation
    Sinec Ins
    risk 0.53cvss 8.1epss 0.00

    A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. This could allow an attacker to intercept credentials that are sent to the UMC server as well as to…

  • CVE-2023-46285HigDec 12, 2023
    Siemens Foundation
    Opcenter Quality
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…

  • CVE-2023-46284HigDec 12, 2023
    Siemens Foundation
    Opcenter Quality
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…

  • CVE-2023-46283HigDec 12, 2023
    Siemens Foundation
    Opcenter Quality
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…

  • CVE-2023-46282HigDec 12, 2023
    Siemens Foundation
    Opcenter Quality
    risk 0.46cvss 7.1epss 0.00

    A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…

  • CVE-2023-46281HigDec 12, 2023
    Siemens Foundation
    Opcenter Quality
    risk 0.46cvss 7.1epss 0.01

    A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…

  • CVE-2023-46156HigDec 12, 2023
    Siemens Foundation
    Simatic S7 1500 CPU Firmware
    risk 0.49cvss 7.5epss 0.01

    Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.

  • CVE-2023-38380HigDec 12, 2023
    Siemens Foundation
    SIMATIC CP 1242-7 V2
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS…

  • CVE-2022-47375HigDec 12, 2023
    Siemens Foundation
    SIPLUS S7-400 CPU 414-3 PN/DP
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…

  • CVE-2022-47374HigDec 12, 2023
    Siemens Foundation
    SIPLUS S7-400 CPU 414-3 PN/DP
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…

  • CVE-2023-49713HigDec 12, 2023
    Jtekt Electronics Corporation
    HMI GC-A2 series
    risk 0.49cvss 7.5epss 0.01

    Denial-of-service (DoS) vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

  • CVE-2023-49143HigDec 12, 2023
    Jtekt Electronics Corporation
    HMI GC-A2 series
    risk 0.49cvss 7.5epss 0.01

    Denial-of-service (DoS) vulnerability exists in rfe service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

  • CVE-2023-49140HigDec 12, 2023
    Jtekt Electronics Corporation
    HMI GC-A2 series
    risk 0.49cvss 7.5epss 0.01

    Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

  • CVE-2023-41963HigDec 12, 2023
    Jtekt Electronics Corporation
    HMI GC-A2 series
    risk 0.49cvss 7.5epss 0.01

    Denial-of-service (DoS) vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

  • CVE-2022-42784HigDec 12, 2023
    Siemens Foundation
    LOGO!
    risk 0.49cvss 7.6epss 0.00

    A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3),…

  • CVE-2023-48677HigDec 12, 2023
    Acronis
    Cyber Protect Home Office
    risk 0.51cvss 7.8epss 0.00

    Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build…

  • CVE-2023-45316HigDec 12, 2023
    Mattermost
    Mattermost
    risk 0.47cvss 7.3epss 0.00

    Mattermost fails to validate if a relative path is passed in /plugins/playbooks/api/v0/telemetry/run/<telem_run_id> as a telemetry run ID, allowing an attacker to use a path traversal payload that points to a different endpoint leading to a CSRF attack.

  • CVE-2023-41623HigDec 12, 2023
    Emlog
    Emlog
    risk 0.47cvss 7.2epss 0.01

    Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php.

  • CVE-2023-48641HigDec 12, 2023
    Archer
    Archer Platform
    risk 0.49cvss 7.5epss 0.00

    Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user…

  • CVE-2023-41119HigDec 12, 2023
    Enterprisedb
    Postgres Advanced Server
    risk 0.57cvss 8.8epss 0.01

    An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contains the function _dbms_aq_move_to_exception_queue that may be used to elevate a user's…

  • CVE-2023-41118HigDec 12, 2023
    Enterprisedb
    Postgres Advanced Server
    risk 0.57cvss 8.8epss 0.01

    An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It may allow an authenticated user to bypass authorization requirements and access underlying…

  • CVE-2023-41117HigDec 12, 2023
    Enterprisedb
    Postgres Advanced Server
    risk 0.57cvss 8.8epss 0.01

    An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, and functions that run SECURITY DEFINER but are inadequately…

  • CVE-2023-6709HigDec 12, 2023
    Mlflow
    Mlflow
    risk 0.50cvss 8.8epss 0.01

    Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.

  • CVE-2023-6542HigDec 12, 2023
    Emarsys
    SDK for Android
    risk 0.46cvss 7.1epss 0.00

    Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker could navigate to…

  • CVE-2023-49580HigDec 12, 2023
    SAP
    Gui For Windows
    risk 0.47cvss 7.3epss 0.00

    SAP GUI for Windows and SAP GUI for Java - versions SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the…

  • CVE-2023-42926HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42912HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42911HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42910HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.57cvss 8.8epss 0.01

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42909HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42908HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42907HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42906HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42905HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42904HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42903HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42902HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42901HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

  • CVE-2023-42899HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. Processing an image may lead to arbitrary code execution.

  • CVE-2023-42890HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.57cvss 8.8epss 0.03

    The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 10.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2. Processing web content may lead to arbitrary code execution.

  • CVE-2023-42886HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A user may be able to cause unexpected app termination or arbitrary code execution.

  • CVE-2023-42882HigDec 12, 2023
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing an image may lead to arbitrary code execution.

  • CVE-2023-42481HigDec 12, 2023
    SAP
    Commerce Cloud
    risk 0.53cvss 8.1epss 0.01

    In SAP Commerce Cloud - versions HY_COM 1905, HY_COM 2005, HY_COM2105, HY_COM 2011, HY_COM 2205, COM_CLOUD 2211, a locked B2B user can misuse the forgotten password functionality to un-block his user account again and re-gain access if SAP Commerce Cloud - Composable Storefront…