VYPR

CVEs

101,977 total · page 1820 of 2,040

AllCriticalHighKEV
  • CVE-2017-17202HigFeb 15, 2018
    Huawei
    AR120-S
    risk 0.49cvss 7.5epss 0.01

    Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32,…

  • CVE-2017-17165HigFeb 15, 2018
    Huawei
    Quidway S5700
    risk 0.49cvss 7.5epss 0.01

    IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S2700 V200R005C00, V200R006C00, V200R007C00,…

  • CVE-2017-17157HigFeb 15, 2018
    Huawei
    NGFW Module
    risk 0.49cvss 7.5epss 0.01

    IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078,…

  • CVE-2017-17156HigFeb 15, 2018
    Huawei
    NGFW Module
    risk 0.49cvss 7.5epss 0.01

    IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078,…

  • CVE-2017-17155HigFeb 15, 2018
    Huawei
    NGFW Module
    risk 0.49cvss 7.5epss 0.01

    IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078,…

  • CVE-2017-17154HigFeb 15, 2018
    Huawei
    NGFW Module
    risk 0.49cvss 7.5epss 0.01

    IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078,…

  • CVE-2017-17153HigFeb 15, 2018
    Huawei
    NGFW Module
    risk 0.49cvss 7.5epss 0.01

    IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078,…

  • CVE-2017-15349HigFeb 15, 2018
    Huawei
    CloudEngine 7800
    risk 0.49cvss 7.5epss 0.01

    Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00…

  • CVE-2017-15348HigFeb 15, 2018
    Huawei
    NGFW Module
    risk 0.49cvss 7.5epss 0.01

    Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, USG9500 V500R001C00 have an insufficient input validation vulnerability. An…

  • CVE-2017-15344HigFeb 15, 2018
    Huawei
    AR3200
    risk 0.49cvss 7.5epss 0.01

    Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote…

  • CVE-2017-15343HigFeb 15, 2018
    Huawei
    AR3200
    risk 0.49cvss 7.5epss 0.01

    Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote…

  • CVE-2017-15342HigFeb 15, 2018
    Huawei
    Te60
    risk 0.49cvss 7.5epss 0.01

    Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00, eSpace U1981 V200R003C30SPC100 have a denial of service vulnerability. The software does not correctly calculate the rest size in a buffer when handling SSL connections. A remote unauthenticated attacker could send…

  • CVE-2017-15341HigFeb 15, 2018
    Huawei
    Te40
    risk 0.49cvss 7.5epss 0.01

    Huawei AR3200 V200R008C20, V200R008C30, TE40 V600R006C00, TE50 V600R006C00, TE60 V600R006C00 have a denial of service vulnerability. The software decodes X.509 certificate in an improper way. A remote unauthenticated attacker could send a crafted X.509 certificate to the device.…

  • CVE-2017-15329HigFeb 15, 2018
    Huawei
    Uma
    risk 0.57cvss 8.8epss 0.01

    Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends crafted HTTP requests that contain malicious SQL statements to the affected system. Due to a lack of input validation on…

  • CVE-2017-18087HigFeb 15, 2018
    Atlassian
    Bitbucket Server
    risk 0.49cvss 7.5epss 0.02

    The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk…

  • CVE-2018-7055HigFeb 15, 2018
    risk 0.49cvss 7.5epss 0.01

    GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.

  • CVE-2017-18189HigFeb 15, 2018
    Sound Exchange Project
    SoX
    risk 0.49cvss 7.5epss 0.05

    In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service.

  • CVE-2017-12726HigFeb 15, 2018
    Smiths Medical
    Medfusion 4000 Wireless Syringe Infusion Pump
    risk 0.48cvss 7.3epss 0.01

    A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths…

  • CVE-2017-12724HigFeb 15, 2018
    Smiths Medical
    Medfusion 4000 Wireless Syringe Infusion Pump
    risk 0.53cvss 8.1epss 0.01

    A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump contains hardcoded credentials, which are not fully initialized. The FTP server is only accessible if the…

  • CVE-2017-12720HigFeb 15, 2018
    Smiths Medical
    Medfusion 4000 Wireless Syringe Infusion Pump
    risk 0.53cvss 8.1epss 0.02

    An Improper Access Control issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump does not require authentication if the pump is configured to allow FTP connections.

  • CVE-2017-12718HigFeb 15, 2018
    Smiths Medical
    Medfusion 4000 Wireless Syringe Infusion Pump
    risk 0.57cvss 8.1epss 0.13

    A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading to a buffer overflow, allowing remote…

  • CVE-2018-0866HigFeb 15, 2018
    Microsoft
    Internet Explorer
    risk 0.55cvss 7.5epss 0.44

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles…

  • CVE-2018-0861HigFeb 15, 2018
    Microsoft
    Edge
    risk 0.50cvss 7.5epss 0.15

    Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835,…

  • CVE-2018-0860HigFeb 15, 2018
    risk 0.01cvss 7.5epss 0.66

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from…

  • CVE-2018-0859HigFeb 15, 2018
    risk 0.43cvss 7.5epss 0.18

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from…

  • CVE-2018-0858HigFeb 15, 2018
    risk 0.43cvss 7.5epss 0.15

    ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838,…

  • CVE-2018-0857HigFeb 15, 2018
    risk 0.43cvss 7.5epss 0.16

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from…

  • CVE-2018-0856HigFeb 15, 2018
    risk 0.43cvss 7.5epss 0.16

    Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835,…

  • CVE-2018-0852HigFeb 15, 2018
    Microsoft
    Outlook
    risk 0.59cvss 8.8epss 0.20

    Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Outlook handles objects in memory, aka "Microsoft Office…

  • CVE-2018-0851HigFeb 15, 2018
    Microsoft
    Office
    risk 0.59cvss 8.8epss 0.20

    Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory,…

  • CVE-2018-0846HigFeb 15, 2018
    risk 0.51cvss 7.8epss 0.01

    The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of…

  • CVE-2018-0844HigFeb 15, 2018
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of…

  • CVE-2018-0842HigFeb 15, 2018
    Microsoft
    Windows Kernel
    risk 0.46cvss 7.0epss 0.01

    Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an elevation of privilege vulnerability due to how objects in memory are…

  • CVE-2018-0841HigFeb 15, 2018
    Microsoft
    Office 2016 Click-to-Run (C2R)
    risk 0.59cvss 8.8epss 0.20

    Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability"

  • CVE-2018-0840HigFeb 15, 2018
    Microsoft
    Internet Explorer
    risk 0.56cvss 7.5epss 0.54

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to…

  • CVE-2018-0838HigFeb 15, 2018
    risk 0.01cvss 7.5epss 0.66

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from…

  • CVE-2018-0837HigFeb 15, 2018
    risk 0.01cvss 7.5epss 0.66

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from…

  • CVE-2018-0836HigFeb 15, 2018
    risk 0.43cvss 7.5epss 0.16

    Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835,…

  • CVE-2018-0835HigFeb 15, 2018
    risk 0.01cvss 7.5epss 0.66

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from…

  • CVE-2018-0834HigFeb 15, 2018
    risk 0.00cvss 7.5epss 0.56

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from…

  • CVE-2018-0831HigFeb 15, 2018
    Microsoft
    Windows Server 2016
    risk 0.51cvss 7.8epss 0.01

    The Windows kernel in Windows 10 versions 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Kernel Elevation of Privilege Vulnerability".

  • CVE-2018-0828HigFeb 15, 2018
    Microsoft
    Windows Server 2016
    risk 0.51cvss 7.8epss 0.01

    Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, aka "Windows Elevation of Privilege Vulnerability".

  • CVE-2018-0826HigFeb 15, 2018
    Microsoft
    Windows Storage Services
    risk 0.49cvss 7.0epss 0.03

    Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Storage Services Elevation of Privilege…

  • CVE-2018-0825HigFeb 15, 2018
    Microsoft
    Windows
    risk 0.50cvss 7.5epss 0.17

    StructuredQuery in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how…

  • CVE-2018-0823HigFeb 15, 2018
    Microsoft
    Windows 10 1607
    risk 0.49cvss 7.0epss 0.03

    The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects, aka "Named Pipe File System Elevation of Privilege Vulnerability".

  • CVE-2018-0822HigFeb 15, 2018
    Microsoft
    Windows Server 2016
    risk 0.49cvss 7.0epss 0.03

    NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way NTFS handles objects, aka "Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability".

  • CVE-2018-0821HigFeb 15, 2018
    Microsoft
    Windows Server 2016
    risk 0.49cvss 7.0epss 0.02

    AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way constrained impersonations are handled, aka "Windows AppContainer Elevation Of Privilege Vulnerability".

  • CVE-2018-0820HigFeb 15, 2018
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the…

  • CVE-2018-0809HigFeb 15, 2018
    Microsoft
    Windows
    risk 0.46cvss 7.0epss 0.01

    The Windows kernel in Windows 10, versions 1703 and 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0742,…

  • CVE-2018-0756HigFeb 15, 2018
    Microsoft
    Windows Server 2016
    risk 0.51cvss 7.8epss 0.01

    The Windows kernel in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE…