VYPR

CVEs

129,958 total · page 2100 of 2,600

AllCriticalHighKEV
  • CVE-2020-2097HigJan 15, 2020
    Jenkins Project
    Sounds
    risk 0.50cvss 8.8epss 0.01

    Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jenkins.

  • CVE-2020-2093HigJan 15, 2020
    Jenkins Project
    Health Advisor By Cloudbees
    risk 0.50cvss 8.8epss 0.01

    A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient.

  • CVE-2020-2092HigJan 15, 2020
    Jenkins Project
    Robot Framework
    risk 0.50cvss 8.8epss 0.01

    Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing users with Job/Configure to have Jenkins parse crafted XML documents.

  • CVE-2020-2091HigJan 15, 2020
    Jenkins Project
    Amazon Ec2
    risk 0.46cvss 8.1epss 0.01

    A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL within the AWS region using attacker-specified credentials IDs obtained through another method.

  • CVE-2020-2090HigJan 15, 2020
    Jenkins Project
    Amazon Ec2
    risk 0.50cvss 8.8epss 0.01

    A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an attacker-specified URL within the AWS region using attacker-specified credentials IDs obtained through another method.

  • CVE-2019-18412HigJan 15, 2020
    Jetbrains
    Idetalk
    risk 0.49cvss 7.5epss 0.01

    JetBrains IDETalk plugin before version 193.4099.10 allows XXE

  • CVE-2015-5466HigJan 15, 2020
    Silicon Integrated Systems
    WindowsXP Display Manager
    risk 0.54cvss 7.8epss 0.01

    Silicon Integrated Systems XGI WindowsXP Display Manager (aka XGI VGA Driver Manager and VGA Display Manager) 6.14.10.1090 allows local users to gain privileges via a crafted 0x96002404 IOCTL call.

  • CVE-2015-8549HigJan 15, 2020
    Pyamf
    Pyamf
    risk 0.39cvss 7.1epss 0.02

    XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format (AMF) payload.

  • CVE-2015-7556HigJan 15, 2020
    Delegate
    Delegate
    risk 0.54cvss 7.8epss 0.01

    DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program.

  • CVE-2012-1326HigJan 15, 2020
    Cisco Systems, Inc.
    Ironport Web Security Appliance
    risk 0.48cvss 7.4epss 0.01

    Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks

  • CVE-2012-0070HigJan 15, 2020
    Spamdyke
    Spamdyke
    risk 0.49cvss 7.5epss 0.01

    spamdyke prior to 4.2.1: STARTTLS reveals plaintext

  • CVE-2012-1563HigJan 15, 2020
    Joomla
    Joomla!
    risk 0.52cvss 7.5epss 0.09

    Joomla! before 2.5.3 allows Admin Account Creation.

  • CVE-2012-1562HigJan 15, 2020
    Joomla
    Joomla!
    risk 0.49cvss 7.5epss 0.01

    Joomla! core before 2.5.3 allows unauthorized password change.

  • CVE-2020-1609HigJan 15, 2020
    Juniper Networks
    Junos
    risk 0.57cvss 8.8epss 0.01

    When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the…

  • CVE-2020-1608HigJan 15, 2020
    Juniper Networks
    Junos
    risk 0.49cvss 7.5epss 0.01

    Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband Edge (BBE) service may trigger a kernel crash (vmcore), causing the device to reboot. The issue is specific to the processing of packets destined to BBE clients…

  • CVE-2020-1607HigJan 15, 2020
    Juniper Networks
    Junos
    risk 0.49cvss 7.5epss 0.01

    Insufficient Cross-Site Scripting (XSS) protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target user's J-Web session and perform administrative actions on the Junos device as the targeted user. This issue affects Juniper…

  • CVE-2020-1605HigJan 15, 2020
    Juniper Networks
    Junos
    risk 0.57cvss 8.8epss 0.01

    When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may then arbitrarily execute commands as root on the…

  • CVE-2020-1603HigJan 15, 2020
    Juniper Networks
    Junos
    risk 0.56cvss 8.6epss 0.01

    Specific IPv6 packets sent by clients processed by the Routing Engine (RE) are improperly handled. These IPv6 packets are designed to be blocked by the RE from egressing the RE. Instead, the RE allows these specific IPv6 packets to egress the RE, at which point a mbuf memory…

  • CVE-2020-1602HigJan 15, 2020
    Juniper Networks
    Junos
    risk 0.46cvss 7.1epss 0.01

    When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may remotely take over the code execution of the…

  • CVE-2020-7058HigJan 15, 2020
    Cacti (software)
    Cacti
    risk 0.57cvss 8.8epss 0.02

    data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm.

  • CVE-2020-0653HigJan 14, 2020
    Microsoft
    Excel
    risk 0.52cvss 7.8epss 0.21

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650, CVE-2020-0651.

  • CVE-2020-0652HigJan 14, 2020
    Microsoft
    Office
    risk 0.52cvss 7.8epss 0.17

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Memory Corruption Vulnerability'.

  • CVE-2020-0651HigJan 14, 2020
    Microsoft
    Excel
    risk 0.52cvss 7.8epss 0.17

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650, CVE-2020-0653.

  • CVE-2020-0650HigJan 14, 2020
    Microsoft
    Excel
    risk 0.52cvss 7.8epss 0.17

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0651, CVE-2020-0653.

  • CVE-2020-0644HigJan 14, 2020
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists when Microsoft Windows implements predictable memory section names, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0635.

  • CVE-2020-0642HigJan 14, 2020
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0624.

  • CVE-2020-0641HigJan 14, 2020
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'.

  • CVE-2020-0640HigJan 14, 2020
    Microsoft
    Internet Explorer
    risk 0.49cvss 7.5epss 0.09

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.

  • CVE-2020-0638HigKEVJan 14, 2020
    Microsoft
    Update Notification Manager
    risk 0.69cvss 7.8epss 0.02

    An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.

  • CVE-2020-0636HigJan 14, 2020
    Microsoft
    Windows Subsystem For Linux
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.

  • CVE-2020-0635HigJan 14, 2020
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0644.

  • CVE-2020-0634HigJan 14, 2020
    Microsoft
    Windows Common Log File System Driver
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.

  • CVE-2020-0633HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625,…

  • CVE-2020-0632HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625,…

  • CVE-2020-0631HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625,…

  • CVE-2020-0630HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625,…

  • CVE-2020-0629HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625,…

  • CVE-2020-0628HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625,…

  • CVE-2020-0627HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625,…

  • CVE-2020-0626HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625,…

  • CVE-2020-0625HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0626,…

  • CVE-2020-0624HigJan 14, 2020
    Microsoft
    Win32K
    risk 0.51cvss 7.8epss 0.02

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0642.

  • CVE-2020-0623HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0625, CVE-2020-0626,…

  • CVE-2020-0620HigJan 14, 2020
    Microsoft
    Cryptographic Services
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Microsoft Cryptographic Services Elevation of Privilege Vulnerability'.

  • CVE-2020-0614HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,…

  • CVE-2020-0613HigJan 14, 2020
    Microsoft
    Windows Search Indexer
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,…

  • CVE-2020-0612HigJan 14, 2020
    Microsoft
    Windows Remote Desktop Gateway
    risk 0.49cvss 7.5epss 0.05

    A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability'.

  • CVE-2020-0611HigJan 14, 2020
    Microsoft
    Windows Remote Desktop
    risk 0.49cvss 7.5epss 0.07

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.

  • CVE-2020-0606HigJan 14, 2020
    Microsoft
    .net Framework
    risk 0.59cvss 8.8epss 0.17

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code…

  • CVE-2020-0605HigJan 14, 2020
    Microsoft
    .net Framework
    risk 0.59cvss 8.8epss 0.17

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code…