VYPR

CVEs

102,253 total · page 1687 of 2,046

AllCriticalHighKEV
  • CVE-2019-1003002HigJan 22, 2019
    Jenkins Project
    Pipeline: Declarative Plugin
    risk 0.03cvss 8.8epss 0.82

    A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jenkinsci/plugins/pipeline/modeldefinition/parser/Converter.groovy that allows attackers with Overall/Read permission to provide a pipeline…

  • CVE-2019-1003001HigJan 22, 2019
    Jenkins Project
    Pipeline: Groovy Plugin
    risk 0.03cvss 8.8epss 0.86

    A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShellFactory.java that allows attackers with Overall/Read…

  • CVE-2019-1003000HigJan 22, 2019
    Jenkins Project
    Script Security
    risk 0.04cvss 8.8epss 0.98

    A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins…

  • CVE-2019-6502HigJan 22, 2019
    Opensc Project
    libopensc
    risk 0.49cvss 7.5epss 0.02

    sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.

  • CVE-2019-6500HigJan 21, 2019
    Axway
    File Transfer Direct
    risk 0.49cvss 7.5epss 0.04

    In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring.

  • CVE-2019-6499HigJan 21, 2019
    Teradata
    Viewpoint
    risk 0.53cvss 8.1epss 0.01

    Teradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4 for the viewpoint database account (in viewpoint-portal\conf\server.xml) that could potentially be exploited by malicious users to compromise the affected system.

  • CVE-2019-6498HigJan 21, 2019
    Labapart
    Gattlib
    risk 0.61cvss 8.8epss 0.05

    GattLib 0.2 has a stack-based buffer over-read in gattlib_connect in dbus/gattlib.c because strncpy is misused.

  • CVE-2019-6496HigJan 20, 2019
    Marvell
    Avastar Wi-Fi
    risk 0.58cvss 8.8epss 0.07

    The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, allows remote attackers to execute arbitrary code or cause a denial of service (block pool overflow) via malformed Wi-Fi packets during identification of…

  • CVE-2018-5881HigJan 18, 2019
    Qualcomm
    Snapdragon Mobile
    risk 0.57cvss 8.8epss 0.00

    Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660,…

  • CVE-2018-5880HigJan 18, 2019
    Qualcomm
    Snapdragon Mobile
    risk 0.51cvss 7.8epss 0.00

    Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660

  • CVE-2018-5879HigJan 18, 2019
    Qualcomm
    Snapdragon Mobile
    risk 0.57cvss 8.8epss 0.00

    Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660

  • CVE-2018-5869HigJan 18, 2019
    Qualcomm
    QTEE
    risk 0.51cvss 7.8epss 0.00

    Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810

  • CVE-2018-5868HigJan 18, 2019
    Qualcomm
    WideVine
    risk 0.51cvss 7.8epss 0.00

    Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130

  • CVE-2018-5867HigJan 18, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD…

  • CVE-2018-15784HigJan 18, 2019
    Dell
    Dell Networking OS10
    risk 0.48cvss 7.4epss 0.01

    Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a…

  • CVE-2018-11998HigJan 18, 2019
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.00

    While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 427, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660,…

  • CVE-2018-11993HigJan 18, 2019
    Qualcomm
    Snapdragon Wear
    risk 0.57cvss 8.8epss 0.00

    Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdragon wear in versions MDM9206, MDM9607

  • CVE-2018-11288HigJan 18, 2019
    Qualcomm
    Snapdragon Mobile
    risk 0.51cvss 7.8epss 0.00

    Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the intended region in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD…

  • CVE-2018-11279HigJan 18, 2019
    Qualcomm
    Snapdragon
    risk 0.57cvss 8.8epss 0.01

    Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD…

  • CVE-2017-8276HigJan 18, 2019
    Qualcomm
    Snapdragon Mobile
    risk 0.51cvss 7.8epss 0.00

    Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD…

  • CVE-2017-18331HigJan 18, 2019
    Qualcomm
    Snapdragon Mobile
    risk 0.51cvss 7.8epss 0.00

    Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660

  • CVE-2019-6488HigJan 18, 2019
    GNU
    Glibc
    risk 0.51cvss 7.8epss 0.00

    The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for size_t in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as…

  • CVE-2019-3908HigJan 18, 2019
    Premisys
    Identicard
    risk 0.49cvss 7.5epss 0.02

    Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded and unchangeable. An attacker with access to these backups can decrypt them and obtain sensitive data.

  • CVE-2019-3907HigJan 18, 2019
    Premisys
    Identicard
    risk 0.49cvss 7.5epss 0.01

    Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).

  • CVE-2019-3906HigJan 18, 2019
    Premisys
    Identicard
    risk 0.57cvss 8.8epss 0.03

    Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.

  • CVE-2018-19722HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-19720HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.06

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an untrusted pointer…

  • CVE-2018-19713HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-19706HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-19701HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-19699HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-16047HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-16046HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.06

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16045HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass…

  • CVE-2018-16044HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.06

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass…

  • CVE-2018-16041HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-16038HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a out-of-bounds read…

  • CVE-2018-16035HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-16031HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-16029HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16027HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16026HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16025HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16021HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.09

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a heap overflow…

  • CVE-2018-16018HigJan 18, 2019
    Adobe Inc.
    Acrobat and Reader
    risk 0.58cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier, 2017.011.30110 and earlier version, and 2015.006.30461 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.

  • CVE-2018-16016HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.06

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds write…

  • CVE-2018-16014HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16011HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.08

    Adobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier, 2017.011.30110 and earlier version, and 2015.006.30461 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

  • CVE-2018-16008HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16004HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.51cvss 7.8epss 0.04

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an untrusted pointer…