VYPR

CVEs

129,938 total · page 2161 of 2,599

AllCriticalHighKEV
  • CVE-2019-8034HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.05

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead…

  • CVE-2019-8033HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.05

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead…

  • CVE-2019-8032HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-8021HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-8020HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-8019HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to…

  • CVE-2019-8018HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-8014HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.09

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability. Successful exploitation could lead to…

  • CVE-2019-8013HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead…

  • CVE-2019-8012HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-8011HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-8010HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-8008HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.57cvss 8.8epss 0.04

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability. Successful exploitation could…

  • CVE-2019-8007HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-8005HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-8004HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-8002HigAug 20, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-4424HigAug 20, 2019
    IBM
    Business Automation Workflow
    risk 0.53cvss 8.2epss 0.02

    IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory…

  • CVE-2019-4340HigAug 20, 2019
    IBM
    Security Guardium Big Data Intelligence
    risk 0.53cvss 8.2epss 0.02

    IBM Security Guardium Big Data Intelligence 4.0 (SonarG) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID:…

  • CVE-2019-4338HigAug 20, 2019
    IBM
    Security Guardium Big Data Intelligence
    risk 0.49cvss 7.5epss 0.02

    IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417.

  • CVE-2019-2134HigAug 20, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In phFriNfc_ExtnsTransceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product:…

  • CVE-2019-2133HigAug 20, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android.…

  • CVE-2019-2132HigAug 20, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    It is possible to overlay the VPN dialog by a malicious application. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2…

  • CVE-2019-2131HigAug 20, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    An application with overlay permission can display overlays on top of settings UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1…

  • CVE-2019-2128HigAug 20, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In ACELP_4t64_fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:…

  • CVE-2019-2127HigAug 20, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.…

  • CVE-2019-2126HigAug 20, 2019
    Google
    Android
    risk 0.58cvss 8.8epss 0.06

    In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android.…

  • CVE-2019-2125HigAug 20, 2019
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privilege, granting privileges to a local app without the user's informed consent, with no additional privileges needed. User…

  • CVE-2019-2122HigAug 20, 2019
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference in the handling of the default case between the WindowManager and the Settings. This could lead to a local escalation of privilege with no additional execution privileges needed.…

  • CVE-2019-2121HigAug 20, 2019
    Google
    Android
    risk 0.46cvss 7.0epss 0.00

    In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android.…

  • CVE-2019-2120HigAug 20, 2019
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In OatFileAssistant::GenerateOatFile of oat_file_assistant.cc, there is a possible file corruption issue due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2019-13520HigAug 20, 2019
    Alpha5
    Smart Loader
    risk 0.51cvss 7.8epss 0.03

    Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. An attacker could use specially crafted project files to overflow the buffer and execute code under the privileges of the application.

  • CVE-2019-11924HigAug 20, 2019
    Facebook
    fizz
    risk 0.49cvss 7.5epss 0.02

    A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion. This issue affects versions v2019.01.28.00 and above of fizz, until v2019.08.05.00.

  • CVE-2019-4460HigAug 20, 2019
    IBM
    API Connect
    risk 0.49cvss 7.5epss 0.03

    IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID:…

  • CVE-2019-4433HigAug 20, 2019
    IBM
    Infosphere Global Name Management
    risk 0.54cvss 8.2epss 0.04

    IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or…

  • CVE-2019-4419HigAug 20, 2019
    IBM
    Intelligent Operations Center
    risk 0.53cvss 8.2epss 0.02

    IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162737.

  • CVE-2019-4402HigAug 20, 2019
    IBM
    API Connect
    risk 0.49cvss 7.5epss 0.02

    IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service via an unprotected API. IBM X-Force ID: 162263.

  • CVE-2019-4310HigAug 20, 2019
    IBM
    Security Guardium Big Data Intelligence
    risk 0.49cvss 7.5epss 0.02

    IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036.

  • CVE-2019-4294HigAug 20, 2019
    IBM
    Datapower Gateway
    risk 0.51cvss 7.8epss 0.01

    IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection…

  • CVE-2019-4253HigAug 20, 2019
    IBM
    Informix Dynamic Server
    risk 0.51cvss 7.8epss 0.00

    IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gain root access privileges. IBM X-Force ID: 159941.

  • CVE-2019-4117HigAug 20, 2019
    IBM
    Cloud Private
    risk 0.57cvss 8.8epss 0.01

    IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158116.

  • CVE-2019-3968HigAug 20, 2019
    Openemr
    Openemr
    risk 0.58cvss 8.8epss 0.10

    In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface when creating a new form.

  • CVE-2019-10745HigAug 20, 2019
    Assign Deep Project
    Assign Deep
    risk 0.42cvss 7.5epss 0.01

    assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload.

  • CVE-2018-1796HigAug 20, 2019
    IBM
    Informix Dynamic Server
    risk 0.51cvss 7.8epss 0.00

    IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. IBM X-Force ID: 149426.

  • CVE-2019-11209HigAug 20, 2019
    TIBCO Software
    Ftl
    risk 0.57cvss 8.8epss 0.01

    The realm configuration component of TIBCO Software Inc.'s TIBCO FTL Community Edition, TIBCO FTL Developer Edition, TIBCO FTL Enterprise Edition contains a vulnerability that theoretically fails to properly enforce access controls. This issue affects TIBCO FTL Community Edition…

  • CVE-2017-18523HigAug 20, 2019
    WordPress
    Eelv Newsletter
    risk 0.57cvss 8.8epss 0.01

    The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.

  • CVE-2019-15238HigAug 20, 2019
    WordPress
    Cforms2
    risk 0.57cvss 8.8epss 0.01

    The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.

  • CVE-2017-18569HigAug 20, 2019
    WordPress
    My Wp Translate
    risk 0.57cvss 8.8epss 0.01

    The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.

  • CVE-2016-10915HigAug 20, 2019
    Supsystic
    Popup
    risk 0.57cvss 8.8epss 0.01

    The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.

  • CVE-2016-10914HigAug 20, 2019
    WordPress
    Add From Server
    risk 0.57cvss 8.8epss 0.01

    The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file.