VYPR

CVEs

101,975 total · page 1576 of 2,040

AllCriticalHighKEV
  • CVE-2019-8204HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.57cvss 8.8epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8203HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution…

  • CVE-2019-8202HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8201HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8198HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8194HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8193HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8192HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution…

  • CVE-2019-8191HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.57cvss 8.8epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-8185HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8184HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8183HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.58cvss 8.8epss 0.13

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

  • CVE-2019-8182HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8181HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution…

  • CVE-2019-8180HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution…

  • CVE-2019-8179HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution…

  • CVE-2019-8178HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution…

  • CVE-2019-8177HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution…

  • CVE-2019-8176HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution…

  • CVE-2019-8175HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution…

  • CVE-2019-8174HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary…

  • CVE-2019-8171HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.57cvss 8.8epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-8170HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.58cvss 8.8epss 0.06

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

  • CVE-2019-8168HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8166HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.58cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a buffer overrun vulnerability. Successful exploitation could lead to arbitrary code execution .

  • CVE-2019-8165HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.57cvss 8.8epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-8164HigOct 17, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-8162HigOct 17, 2019
    Adobe Inc.
    Acrobat
    risk 0.53cvss 8.1epss 0.02

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a race condition vulnerability. Successful exploitation could lead to arbitrary code execution .

  • CVE-2019-18192HigOct 17, 2019
    GNU
    Guix
    risk 0.51cvss 7.8epss 0.00

    GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365.

  • CVE-2019-13410HigOct 17, 2019
    TOPMeeting
    TOPMeeting
    risk 0.49cvss 7.5epss 0.02

    TOPMeeting before version 8.8 (2019/08/19) shows attendees account and password in front end page that allows an attacker to obtain sensitive information by browsing the source code of the page.

  • CVE-2019-17119HigOct 17, 2019
    WiKID Systems
    2FA Enterprise Server
    risk 0.57cvss 8.8epss 0.02

    Multiple SQL injection vulnerabilities in Logs.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allow authenticated users to execute arbitrary SQL commands via the source or subString parameter.

  • CVE-2019-15627HigOct 17, 2019
    Trend Micro
    Deep Security Agent
    risk 0.49cvss 7.1epss 0.01

    Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to availability impact. Local OS access is required. Please note that only Windows agents are affected.

  • CVE-2019-15626HigOct 17, 2019
    Trend Micro
    Deep Security Manager
    risk 0.49cvss 7.5epss 0.02

    The Deep Security Manager application (Versions 10.0, 11.0 and 12.0), when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability.

  • CVE-2019-17118HigOct 17, 2019
    WiKID Systems
    2FA Enterprise Server
    risk 0.57cvss 8.8epss 0.01

    A CSRF issue in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows a remote attacker to trick an authenticated user into performing unintended actions such as (1) create or delete admin users; (2) create or delete groups; or (3) create, delete, enable, or disable normal…

  • CVE-2019-17117HigOct 17, 2019
    WiKID Systems
    2FA Enterprise Server
    risk 0.57cvss 8.8epss 0.02

    A SQL injection vulnerability in processPref.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows an authenticated user to execute arbitrary SQL commands via the processPref.jsp key parameter.

  • CVE-2019-16917HigOct 17, 2019
    risk 0.57cvss 8.8epss 0.02

    WiKID Enterprise 2FA (two factor authentication) Enterprise Server through 4.2.0-b2047 is vulnerable to SQL injection through the searchDevices.jsp endpoint. The uid and domain parameters are used, unsanitized, in a SQL query constructed in the buildSearchWhereClause function.

  • CVE-2019-14287HigOct 17, 2019
    Sudo Project
    Sudo
    risk 0.65cvss 8.8epss 0.64

    In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER=…

  • CVE-2019-11284HigOct 17, 2019
    risk 0.56cvss 8.6epss 0.01

    Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.

  • CVE-2019-11253HigOct 17, 2019
    Cri O
    Kubernetes
    risk 0.02cvss 7.5epss 0.26

    Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially…

  • CVE-2019-15850HigOct 17, 2019
    eQ-3
    Homematic CCU2
    risk 0.58cvss 8.8epss 0.16

    eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system.

  • CVE-2019-15849HigOct 17, 2019
    eQ-3
    Homematic CCU2
    risk 0.48cvss 7.3epss 0.01

    eQ-3 HomeMatic CCU3 firmware 3.41.11 allows session fixation. An attacker can create session IDs and send them to the victim. After the victim logs in to the session, the attacker can use that session. The attacker could create SSH logins after a valid session and easily…

  • CVE-2019-14423HigOct 17, 2019
    eQ-3
    Homematic CCU-Firmware
    risk 0.59cvss 8.8epss 0.20

    A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to execute system commands as root remotely via a simple HTTP request.

  • CVE-2019-17676HigOct 17, 2019
    Metinfo
    Metinfo
    risk 0.57cvss 8.8epss 0.01

    app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI.

  • CVE-2019-17675HigOct 17, 2019
    WordPress
    WordPress
    risk 0.50cvss 8.8epss 0.03

    WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.

  • CVE-2019-17673HigOct 17, 2019
    WordPress
    WordPress
    risk 0.42cvss 7.5epss 0.03

    WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.

  • CVE-2019-17666HigOct 17, 2019
    Linux
    Kernel
    risk 0.57cvss 8.8epss 0.03

    rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.

  • CVE-2019-17665HigOct 16, 2019
    Nationalsecurityagency
    Ghidra
    risk 0.51cvss 7.8epss 0.00

    NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory.

  • CVE-2019-17664HigOct 16, 2019
    Nationalsecurityagency
    Ghidra
    risk 0.51cvss 7.8epss 0.00

    NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser > Window > Python" option, Ghidra will try…

  • CVE-2019-17436HigOct 16, 2019
    Paloaltonetworks
    Globalprotect
    risk 0.46cvss 7.1epss 0.00

    A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 and earlier, that can allow non-root users to overwrite root files on the file system.

  • CVE-2019-16682HigOct 16, 2019
    risk 0.41cvss 7.3epss 0.01

    The url_redirect (aka URL redirect) extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Injection.