VYPR

CVEs

130,168 total · page 1897 of 2,604

  • CVE-2021-22153HigMay 13, 2021
    risk 0.48cvss 7.3epss 0.01

    A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine…

  • CVE-2021-31215HigMay 13, 2021
    risk 0.57cvss 8.8epss 0.03

    SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling.

  • CVE-2020-36197HigMay 13, 2021
    risk 0.48cvss 7.1epss 0.18

    An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to compromise the security of the software by gaining privileges, reading sensitive information, executing commands, evading…

  • CVE-2021-22155HigMay 13, 2021
    risk 0.57cvss 8.8epss 0.01

    An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) version(s) 10.1, 9.1 and earlier could allow an attacker to potentially gain access to the application in the context of the targeted user’s…

  • CVE-2021-23134HigMay 12, 2021
    risk 0.51cvss 7.8epss 0.00

    Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

  • CVE-2021-32611HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.01

    A NULL pointer dereference vulnerability exists in eXcall_api.c in Antisip eXosip2 through 5.2.0 when handling certain 3xx redirect responses.

  • CVE-2021-32572HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.02

    Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as demonstrated by reading the /etc/passwd file.

  • CVE-2021-31519HigMay 12, 2021
    risk 0.47cvss 7.3epss 0.00

    An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an…

  • CVE-2021-28649HigMay 12, 2021
    risk 0.47cvss 7.3epss 0.00

    An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator…

  • CVE-2021-20202HigMay 12, 2021
    risk 0.47cvss 7.3epss 0.00

    A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, allowing the attacker to have access to the contents that keycloak stores in this directory. The highest threat from this…

  • CVE-2020-27840HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.04

    A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to…

  • CVE-2021-27398HigMay 12, 2021
    risk 0.51cvss 7.8epss 0.01

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than…

  • CVE-2021-27397HigMay 12, 2021
    risk 0.51cvss 7.8epss 0.01

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a memory corruption condition. An attacker could leverage this…

  • CVE-2021-27396HigMay 12, 2021
    risk 0.51cvss 7.8epss 0.01

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than…

  • CVE-2021-27386HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.02

    A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels…

  • CVE-2021-27385HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.03

    A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels…

  • CVE-2021-27383HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.02

    A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels…

  • CVE-2021-25662HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.02

    A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels…

  • CVE-2021-25661HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels…

  • CVE-2021-25660HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels…

  • CVE-2021-20277HigMay 12, 2021
    risk 0.42cvss 7.5epss 0.04

    A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.

  • CVE-2020-28393HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.02

    An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).

  • CVE-2020-25242HigMay 12, 2021
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants) (All versions). Specially crafted packets sent to…

  • CVE-2021-23892HigMay 12, 2021
    risk 0.53cvss 8.2epss 0.00

    By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW) installation process, a local user can perform a privilege escalation attack to obtain administrator privileges for the purpose…

  • CVE-2021-23891HigMay 12, 2021
    risk 0.51cvss 7.8epss 0.00

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by impersonating a client token which could lead to the bypassing of MTP self-defense.

  • CVE-2021-23872HigMay 12, 2021
    risk 0.51cvss 7.8epss 0.00

    Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the IOCTL interface.

  • CVE-2021-32606HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.00

    In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST support.)

  • CVE-2021-20313HigMay 11, 2021
    risk 0.42cvss 7.5epss 0.02

    A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality.

  • CVE-2021-20312HigMay 11, 2021
    risk 0.42cvss 7.5epss 0.02

    A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest…

  • CVE-2021-20311HigMay 11, 2021
    risk 0.42cvss 7.5epss 0.01

    A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker processed by an application using ImageMagick. The…

  • CVE-2021-20310HigMay 11, 2021
    risk 0.42cvss 7.5epss 0.01

    A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The…

  • CVE-2021-20309HigMay 11, 2021
    risk 0.42cvss 7.5epss 0.02

    A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this…

  • CVE-2021-31936HigMay 11, 2021
    risk 0.48cvss 7.4epss 0.03

    Microsoft Accessibility Insights for Web Information Disclosure Vulnerability

  • CVE-2021-31214HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.03

    Visual Studio Code Remote Code Execution Vulnerability

  • CVE-2021-31213HigMay 11, 2021
    risk 0.55cvss 7.8epss 0.53

    Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability

  • CVE-2021-31211HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.03

    Visual Studio Code Remote Code Execution Vulnerability

  • CVE-2021-31208HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.01

    Windows Container Manager Service Elevation of Privilege Vulnerability

  • CVE-2021-31204HigMay 11, 2021
    risk 0.48cvss 7.3epss 0.01

    .NET and Visual Studio Elevation of Privilege Vulnerability

  • CVE-2021-31200HigMay 11, 2021
    risk 0.47cvss 7.2epss 0.02

    Common Utilities Remote Code Execution Vulnerability

  • CVE-2021-31198HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.05

    Microsoft Exchange Server Remote Code Execution Vulnerability

  • CVE-2021-31194HigMay 11, 2021
    risk 0.57cvss 8.8epss 0.02

    OLE Automation Remote Code Execution Vulnerability

  • CVE-2021-31193HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.01

    Windows SSDP Service Elevation of Privilege Vulnerability

  • CVE-2021-31192HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.02

    Windows Media Foundation Core Remote Code Execution Vulnerability

  • CVE-2021-31190HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.01

    Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

  • CVE-2021-31188HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.01

    Windows Graphics Component Elevation of Privilege Vulnerability

  • CVE-2021-31187HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.01

    Windows WalletService Elevation of Privilege Vulnerability

  • CVE-2021-31186HigMay 11, 2021
    risk 0.48cvss 7.4epss 0.03

    Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

  • CVE-2021-31182HigMay 11, 2021
    risk 0.46cvss 7.1epss 0.01

    Microsoft Bluetooth Driver Spoofing Vulnerability

  • CVE-2021-31181HigMay 11, 2021
    risk 0.63cvss 8.8epss 0.29

    Microsoft SharePoint Remote Code Execution Vulnerability

  • CVE-2021-31180HigMay 11, 2021
    risk 0.51cvss 7.8epss 0.02

    Microsoft Office Graphics Remote Code Execution Vulnerability