VYPR

CVEs

129,940 total · page 2145 of 2,599

AllCriticalHighKEV
  • CVE-2019-16996HigSep 30, 2019
    Metinfo
    Metinfo
    risk 0.48cvss 7.2epss 0.12

    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_admin&a=dopara&app_type=shop id parameter.

  • CVE-2019-16995HigSep 30, 2019
    Linux
    Kernel
    risk 0.42cvss 7.5epss 0.04

    In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

  • CVE-2019-16745HigSep 30, 2019
    Ebrigade
    Ebrigade
    risk 0.57cvss 8.8epss 0.02

    eBrigade before 5.0 has evenement_choice.php chxCal SQL Injection.

  • CVE-2019-16744HigSep 30, 2019
    Ebrigade
    Ebrigade
    risk 0.57cvss 8.8epss 0.02

    eBrigade before 5.0 has evenements.php cid SQL Injection.

  • CVE-2019-16743HigSep 30, 2019
    Ebrigade
    Ebrigade
    risk 0.57cvss 8.8epss 0.02

    eBrigade before 5.0 has evenement_ical.php evenement SQL Injection.

  • CVE-2017-18636HigSep 30, 2019
    CDG
    CDG
    risk 0.49cvss 7.5epss 0.02

    CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.

  • CVE-2019-16993HigSep 30, 2019
    PhpBB
    phpBB
    risk 0.50cvss 8.8epss 0.01

    In phpBB before 3.1.7-PL1, includes/acp/acp_bbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator…

  • CVE-2019-16992HigSep 30, 2019
    Keybase
    Keybase
    risk 0.49cvss 7.5epss 0.01

    The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a user's…

  • CVE-2019-3746HigSep 27, 2019
    EMC Corporation
    Integrated Data Protection Appliance
    risk 0.57cvss 8.8epss 0.02

    Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts to the ACM API. An authenticated remote user may exploit this vulnerability to launch a brute-force authentication attack in order to gain access to the system.

  • CVE-2019-3736HigSep 27, 2019
    EMC Corporation
    Integrated Data Protection Appliance
    risk 0.47cvss 7.2epss 0.01

    Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may potentially use a support tool to decrypt encrypted passwords stored locally on the…

  • CVE-2019-11927HigSep 27, 2019
    Whatsapp
    Whatsapp
    risk 0.51cvss 7.8epss 0.01

    An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version…

  • CVE-2019-9463HigSep 27, 2019
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions:…

  • CVE-2019-9462HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9432HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

  • CVE-2019-9430HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9429HigSep 27, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9425HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9424HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide the unlock pattern can be ignored. Product: AndroidVersions: Android-10Android ID: A-110941092

  • CVE-2019-9423HigSep 27, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions:…

  • CVE-2019-9422HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9419HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9413HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9407HigSep 27, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In notification management of the service manager, there is a possible permissions bypass. This could lead to local escalation of privilege by preventing user notification, with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

  • CVE-2019-9405HigSep 27, 2019
    Google
    Android
    risk 0.57cvss 8.8epss 0.01

    In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112890225

  • CVE-2019-9404HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9402HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9401HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9400HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9398HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9397HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9396HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9395HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9394HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9393HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9390HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9389HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9388HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

  • CVE-2019-9387HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9386HigSep 27, 2019
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    In NFC server, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions:…

  • CVE-2019-9382HigSep 27, 2019
    Google
    Android
    risk 0.57cvss 8.8epss 0.01

    In libeffects, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120874654

  • CVE-2019-9381HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122677612

  • CVE-2019-9378HigSep 27, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In the Activity Manager service, there is a possible permission bypass due to incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:…

  • CVE-2019-9367HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9363HigSep 27, 2019
    Google
    Android
    risk 0.57cvss 8.8epss 0.01

    In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-123584306

  • CVE-2019-9358HigSep 27, 2019
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to a to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9357HigSep 27, 2019
    Google
    Android
    risk 0.57cvss 8.8epss 0.01

    In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112662995

  • CVE-2019-9355HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9350HigSep 27, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129562815

  • CVE-2019-9346HigSep 27, 2019
    Google
    Android
    risk 0.57cvss 8.8epss 0.01

    In libstagefright, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID:…

  • CVE-2019-9343HigSep 27, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:…