CVEs

129,940 total · page 2139 of 2,599

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2019-1378	Microsoft Windows 10 Update Assistant	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'.
CVE-2019-1371	Microsoft Internet Explorer	Hig	0.49	7.5	0.07		Oct 10, 2019	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
CVE-2019-1366	Microsoft Edge	Hig	0.43	7.5	0.10		Oct 10, 2019	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1335.
CVE-2019-1364	Microsoft Windows	Hig	0.54	7.8	0.03		Oct 10, 2019	An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1362.
CVE-2019-1362	Microsoft Windows	Hig	0.51	7.8	0.02		Oct 10, 2019	An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1364.
CVE-2019-1359	Microsoft Windows	Hig	0.52	7.8	0.19		Oct 10, 2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1358.
CVE-2019-1358	Microsoft Windows	Hig	0.57	7.8	0.76		Oct 10, 2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1359.
CVE-2019-1342	Microsoft Windows Error Reporting	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1315, CVE-2019-1339.
CVE-2019-1341	Microsoft Windows Power Service	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore Key function, aka 'Windows Power Service Elevation of Privilege Vulnerability'.
CVE-2019-1340	Microsoft Windows	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'.…
CVE-2019-1339	Microsoft Windows Error Reporting	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1315, CVE-2019-1342.
CVE-2019-1336	Microsoft Windows Update Client	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1323.
CVE-2019-1335	Microsoft Edge	Hig	0.43	7.5	0.10		Oct 10, 2019	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1366.
CVE-2019-1333	Microsoft Windows Remote Desktop	Hig	0.58	8.8	0.16		Oct 10, 2019	A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
CVE-2019-1331	Microsoft Excel	Hig	0.59	8.8	0.20		Oct 10, 2019	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.
CVE-2019-1327	Microsoft Excel	Hig	0.58	8.8	0.14		Oct 10, 2019	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1331.
CVE-2019-1326	Microsoft Windows Remote Desktop Protocol (RDP)	Hig	0.49	7.5	0.06		Oct 10, 2019	A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.
CVE-2019-1323	Microsoft Windows Update Client	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336.
CVE-2019-1322	Microsoft Windows	Hig	0.73	7.8	0.19	KEV	Oct 10, 2019	An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.
CVE-2019-1321	Microsoft Windows CloudStore	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List (DACL), aka 'Microsoft Windows CloudStore Elevation of Privilege Vulnerability'.
CVE-2019-1320	Microsoft Windows	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1322, CVE-2019-1340.
CVE-2019-1319	Microsoft Windows Error Reporting	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
CVE-2019-1317	Microsoft Windows	Hig	0.48	7.3	0.01		Oct 10, 2019	A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'.
CVE-2019-1316	Microsoft Windows Setup	Hig	0.51	7.8	0.01		Oct 10, 2019	An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, aka 'Microsoft Windows Setup Elevation of Privilege Vulnerability'.
CVE-2019-1315	Microsoft Windows Error Reporting	Hig	0.69	7.8	0.03	KEV	Oct 10, 2019	An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342.
CVE-2019-1311	Microsoft Windows Imaging API	Hig	0.54	7.8	0.36		Oct 10, 2019	A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.
CVE-2019-1308	Microsoft Edge	Hig	0.43	7.5	0.10		Oct 10, 2019	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1335, CVE-2019-1366.
CVE-2019-1307	Microsoft Edge	Hig	0.43	7.5	0.10		Oct 10, 2019	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1308, CVE-2019-1335, CVE-2019-1366.
CVE-2019-1239	Microsoft VBScript engine	Hig	0.49	7.5	0.08		Oct 10, 2019	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1238.
CVE-2019-1060	Microsoft XML Core Services MSXML parser	Hig	0.58	8.8	0.14		Oct 10, 2019	A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.
CVE-2019-13921	Siemens Foundation Simatic Winac Rtx \(f\) 2010	Hig	0.49	7.5	0.01		Oct 10, 2019	A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if…
CVE-2019-10936	Siemens Foundation Devices	Hig	0.49	7.5	0.02		Oct 10, 2019	Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
CVE-2019-10923	Siemens Foundation Scalance X200irt Firmware	Hig	0.49	7.5	0.01		Oct 10, 2019	An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
CVE-2019-17431	Fastadmin Fastadmin	Hig	0.57	8.8	0.01		Oct 10, 2019	An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability.
CVE-2019-17419	Metinfo Metinfo	Hig	0.47	7.2	0.01		Oct 10, 2019	An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=admin_user&a=doGetUserInfo id parameter.
CVE-2019-17418	Metinfo Metinfo	Hig	0.51	7.2	0.48		Oct 10, 2019	An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997.
CVE-2019-5700	Nvidia Shield TV Experience	Hig	0.51	7.8	0.01		Oct 9, 2019	NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields of the boot image, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.
CVE-2019-5699	Nvidia Shield TV Experience	Hig	0.51	7.8	0.00		Oct 9, 2019	NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra bootloader contains a vulnerability where the software performs an incorrect bounds check, which may lead to buffer overflow resulting in escalation of privileges and code execution. escalation of privileges, and…
CVE-2019-17414	Tinylcy vino	Hig	0.49	7.5	0.02		Oct 9, 2019	tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource temporarily unavailable" error and daemon crash) via a long URL.
CVE-2019-17366	Citrix Systems Application Delivery Management	Hig	0.57	8.8	0.01		Oct 9, 2019	Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control.
CVE-2019-17365	Nix Nix	Hig	0.51	7.8	0.00		Oct 9, 2019	Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable.
CVE-2019-5053	NitroPDF NitroPDF	Hig	0.51	7.8	0.01		Oct 9, 2019	An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability.
CVE-2019-5050	NitroPDF NitroPDF	Hig	0.51	7.8	0.03		Oct 9, 2019	A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.
CVE-2019-5048	NitroPDF NitroPDF	Hig	0.51	7.8	0.02		Oct 9, 2019	A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.
CVE-2019-5047	NitroPDF NitroPDF	Hig	0.51	7.8	0.01		Oct 9, 2019	An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability.
CVE-2019-5046	NitroPDF NitroPDF	Hig	0.51	7.8	0.02		Oct 9, 2019	A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would…
CVE-2019-5045	NitroPDF NitroPDF	Hig	0.51	7.8	0.02		Oct 9, 2019	A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would…
CVE-2019-15023	Zingbox Inspector	Hig	0.49	7.5	0.01		Oct 9, 2019	A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party integrations being stored in cleartext in device configuration.
CVE-2019-15022	Zingbox Inspector	Hig	0.49	7.5	0.01		Oct 9, 2019	A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be susceptible to ARP spoofing.
CVE-2019-15018	Zingbox Inspector	Hig	0.49	7.5	0.01		Oct 9, 2019	A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance to a different customer tenant.

CVE-2019-1378HigOct 10, 2019
Microsoft
Windows 10 Update Assistant
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'.
CVE-2019-1371HigOct 10, 2019
Microsoft
Internet Explorer
risk 0.49cvss 7.5epss 0.07
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
CVE-2019-1366HigOct 10, 2019
Microsoft
Edge
risk 0.43cvss 7.5epss 0.10
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1335.
CVE-2019-1364HigOct 10, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1362.
CVE-2019-1362HigOct 10, 2019
Microsoft
Windows
risk 0.51cvss 7.8epss 0.02
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1364.
CVE-2019-1359HigOct 10, 2019
Microsoft
Windows
risk 0.52cvss 7.8epss 0.19
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1358.
CVE-2019-1358HigOct 10, 2019
Microsoft
Windows
risk 0.57cvss 7.8epss 0.76
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1359.
CVE-2019-1342HigOct 10, 2019
Microsoft
Windows Error Reporting
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1315, CVE-2019-1339.
CVE-2019-1341HigOct 10, 2019
Microsoft
Windows Power Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore Key function, aka 'Windows Power Service Elevation of Privilege Vulnerability'.
CVE-2019-1340HigOct 10, 2019
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'.…
CVE-2019-1339HigOct 10, 2019
Microsoft
Windows Error Reporting
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1315, CVE-2019-1342.
CVE-2019-1336HigOct 10, 2019
Microsoft
Windows Update Client
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1323.
CVE-2019-1335HigOct 10, 2019
Microsoft
Edge
risk 0.43cvss 7.5epss 0.10
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1366.
CVE-2019-1333HigOct 10, 2019
Microsoft
Windows Remote Desktop
risk 0.58cvss 8.8epss 0.16
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
CVE-2019-1331HigOct 10, 2019
Microsoft
Excel
risk 0.59cvss 8.8epss 0.20
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.
CVE-2019-1327HigOct 10, 2019
Microsoft
Excel
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1331.
CVE-2019-1326HigOct 10, 2019
Microsoft
Windows Remote Desktop Protocol (RDP)
risk 0.49cvss 7.5epss 0.06
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.
CVE-2019-1323HigOct 10, 2019
Microsoft
Windows Update Client
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336.
CVE-2019-1322HigKEVOct 10, 2019
Microsoft
Windows
risk 0.73cvss 7.8epss 0.19
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.
CVE-2019-1321HigOct 10, 2019
Microsoft
Windows CloudStore
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List (DACL), aka 'Microsoft Windows CloudStore Elevation of Privilege Vulnerability'.
CVE-2019-1320HigOct 10, 2019
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1322, CVE-2019-1340.
CVE-2019-1319HigOct 10, 2019
Microsoft
Windows Error Reporting
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
CVE-2019-1317HigOct 10, 2019
Microsoft
Windows
risk 0.48cvss 7.3epss 0.01
A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'.
CVE-2019-1316HigOct 10, 2019
Microsoft
Windows Setup
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, aka 'Microsoft Windows Setup Elevation of Privilege Vulnerability'.
CVE-2019-1315HigKEVOct 10, 2019
Microsoft
Windows Error Reporting
risk 0.69cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342.
CVE-2019-1311HigOct 10, 2019
Microsoft
Windows Imaging API
risk 0.54cvss 7.8epss 0.36
A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.
CVE-2019-1308HigOct 10, 2019
Microsoft
Edge
risk 0.43cvss 7.5epss 0.10
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1335, CVE-2019-1366.
CVE-2019-1307HigOct 10, 2019
Microsoft
Edge
risk 0.43cvss 7.5epss 0.10
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1308, CVE-2019-1335, CVE-2019-1366.
CVE-2019-1239HigOct 10, 2019
Microsoft
VBScript engine
risk 0.49cvss 7.5epss 0.08
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1238.
CVE-2019-1060HigOct 10, 2019
Microsoft
XML Core Services MSXML parser
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.
CVE-2019-13921HigOct 10, 2019
Siemens Foundation
Simatic Winac Rtx \(f\) 2010
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if…
CVE-2019-10936HigOct 10, 2019
Siemens Foundation
Devices
risk 0.49cvss 7.5epss 0.02
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
CVE-2019-10923HigOct 10, 2019
Siemens Foundation
Scalance X200irt Firmware
risk 0.49cvss 7.5epss 0.01
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
CVE-2019-17431HigOct 10, 2019
Fastadmin
Fastadmin
risk 0.57cvss 8.8epss 0.01
An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability.
CVE-2019-17419HigOct 10, 2019
Metinfo
Metinfo
risk 0.47cvss 7.2epss 0.01
An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=admin_user&a=doGetUserInfo id parameter.
CVE-2019-17418HigOct 10, 2019
Metinfo
Metinfo
risk 0.51cvss 7.2epss 0.48
An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997.
CVE-2019-5700HigOct 9, 2019
Nvidia
Shield TV Experience
risk 0.51cvss 7.8epss 0.01
NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields of the boot image, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.
CVE-2019-5699HigOct 9, 2019
Nvidia
Shield TV Experience
risk 0.51cvss 7.8epss 0.00
NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra bootloader contains a vulnerability where the software performs an incorrect bounds check, which may lead to buffer overflow resulting in escalation of privileges and code execution. escalation of privileges, and…
CVE-2019-17414HigOct 9, 2019
Tinylcy
vino
risk 0.49cvss 7.5epss 0.02
tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource temporarily unavailable" error and daemon crash) via a long URL.
CVE-2019-17366HigOct 9, 2019
Citrix Systems
Application Delivery Management
risk 0.57cvss 8.8epss 0.01
Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control.
CVE-2019-17365HigOct 9, 2019
Nix
Nix
risk 0.51cvss 7.8epss 0.00
Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable.
CVE-2019-5053HigOct 9, 2019
NitroPDF
NitroPDF
risk 0.51cvss 7.8epss 0.01
An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability.
CVE-2019-5050HigOct 9, 2019
NitroPDF
NitroPDF
risk 0.51cvss 7.8epss 0.03
A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.
CVE-2019-5048HigOct 9, 2019
NitroPDF
NitroPDF
risk 0.51cvss 7.8epss 0.02
A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.
CVE-2019-5047HigOct 9, 2019
NitroPDF
NitroPDF
risk 0.51cvss 7.8epss 0.01
An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability.
CVE-2019-5046HigOct 9, 2019
NitroPDF
NitroPDF
risk 0.51cvss 7.8epss 0.02
A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would…
CVE-2019-5045HigOct 9, 2019
NitroPDF
NitroPDF
risk 0.51cvss 7.8epss 0.02
A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would…
CVE-2019-15023HigOct 9, 2019
Zingbox
Inspector
risk 0.49cvss 7.5epss 0.01
A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party integrations being stored in cleartext in device configuration.
CVE-2019-15022HigOct 9, 2019
Zingbox
Inspector
risk 0.49cvss 7.5epss 0.01
A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be susceptible to ARP spoofing.
CVE-2019-15018HigOct 9, 2019
Zingbox
Inspector
risk 0.49cvss 7.5epss 0.01
A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance to a different customer tenant.