VYPR

CVEs

132,213 total · page 1336 of 2,645

AllCriticalHighKEV
  • CVE-2021-34982HigMay 7, 2024
    Netgear
    Multiple Routers
    risk 0.57cvss 8.8epss 0.01

    NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this…

  • CVE-2021-34975HigMay 7, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34974HigMay 7, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2021-34971HigMay 7, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in…

  • CVE-2021-34968HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34967HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Line Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34966HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor FileAttachment Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2021-34965HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Squiggly Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34964HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34963HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34962HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Caret Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34961HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Ink Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34960HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34959HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Square Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34958HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Text Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34957HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Highlight Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34956HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34955HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34954HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor StrikeOut Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34953HigMay 7, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Use of Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that…

  • CVE-2021-34952HigMay 7, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2021-34950HigMay 7, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34948HigMay 7, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Square Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34947HigMay 7, 2024
    Netgear
    R7800
    risk 0.57cvss 8.8epss 0.01

    NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 routers. Authentication is not required to exploit this vulnerability. The…

  • CVE-2024-4030HigMay 7, 2024
    Python (programming language)
    Python
    risk 0.39cvss 7.1epss 0.00

    On Windows a directory returned by tempfile.mkdtemp() would not always have permissions set to restrict reading and writing to the temporary directory by other users, instead usually inheriting the correct permissions from the default location. Alternate configurations or users…

  • CVE-2024-34346HigMay 7, 2024
    Denoland
    Deno
    risk 0.55cvss 8.4epss 0.00

    Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. The Deno sandbox may be unexpectedly weakened by allowing file read/write access to privileged files in various locations on Unix and Windows platforms. For example, reading `/proc/self/environ` may…

  • CVE-2024-27273HigMay 7, 2024
    IBM
    Aix
    risk 0.53cvss 8.1epss 0.00

    IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead to privilege escalation. IBM X-Force ID: 284903.

  • CVE-2024-23713HigMay 7, 2024
    Google
    NotificationManagerService
    risk 0.51cvss 7.8epss 0.00

    In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is…

  • CVE-2024-23710HigMay 7, 2024
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed.…

  • CVE-2024-23708HigMay 7, 2024
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…

  • CVE-2024-23707HigMay 7, 2024
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In multiple locations, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

  • CVE-2024-23706HigMay 7, 2024
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In multiple locations, there is a possible bypass of health data permissions due to an improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2024-23705HigMay 7, 2024
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

  • CVE-2024-23704HigMay 7, 2024
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…

  • CVE-2024-0043HigMay 7, 2024
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for…

  • CVE-2024-0042HigMay 7, 2024
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead to local bypass of DRM content protection with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2024-0025HigMay 7, 2024
    Google
    ActivityManagerService
    risk 0.51cvss 7.8epss 0.00

    In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2024-0024HigMay 7, 2024
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for…

  • CVE-2024-34315HigMay 7, 2024
    Cmseasy
    Cmseasy
    risk 0.49cvss 7.5epss 0.01

    CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fckedit_action method of /admin/template_admin.php. This vulnerability allows attackers to read arbitrary files.

  • CVE-2024-25513HigMay 7, 2024
    Ruvar
    Ruvaroa
    risk 0.51cvss 7.8epss 0.00

    RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_download.aspx.

  • CVE-2024-25512HigMay 7, 2024
    Ruvar
    Ruvaroa
    risk 0.53cvss 8.1epss 0.01

    RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter at /Bulletin/AttachDownLoad.aspx.

  • CVE-2024-33149HigMay 7, 2024
    risk 0.53cvss 8.1epss 0.00

    J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myProcessList function.

  • CVE-2024-33148HigMay 7, 2024
    Cxcxcxcxcxcxcxc
    cxcxcxcxcxc
    risk 0.47cvss 7.3epss 0.00

    J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the list function.

  • CVE-2024-33147HigMay 7, 2024
    Cxcxcxcxcxcxcxc
    cxcxcxcxcxc
    risk 0.57cvss 8.8epss 0.01

    J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authRoleList function.

  • CVE-2024-29207HigMay 7, 2024
    Ubiquiti Inc
    Unifi Connect Ev Station
    risk 0.49cvss 7.5epss 0.00

    An Improper Certificate Validation could allow a malicious actor with access to an adjacent network to take control of the system. Affected Products: UniFi Connect Application (Version 3.7.9 and earlier) UniFi Connect EV Station (Version 1.1.18 and earlier) UniFi…

  • CVE-2024-29150HigMay 7, 2024
    Alcatel Lucent
    ALE NOE deskphone
    risk 0.57cvss 8.8epss 0.00

    An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of improper privilege management, an authenticated attacker is able to create symlinks to sensitive and protected data in…

  • CVE-2024-29149HigMay 7, 2024
    Alcatel Lucent
    ALE NOE deskphone
    risk 0.48cvss 7.4epss 0.00

    An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of a time-of-check time-of-use vulnerability, an authenticated attacker is able to replace the verified firmware image…

  • CVE-2024-33144HigMay 7, 2024
    risk 0.57cvss 8.8epss 0.01

    J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml.

  • CVE-2024-33139HigMay 7, 2024
    risk 0.49cvss 7.5epss 0.01

    J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function.

  • CVE-2024-34523HigMay 7, 2024
    Inclusive Design
    AChecker
    risk 0.49cvss 7.5epss 0.01

    AChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php path parameter by using Unauthenticated Path Traversal. This occurs through readfile in PHP. NOTE: This vulnerability only affects products that are no longer supported by the…