VYPR

CVEs

129,930 total · page 2188 of 2,599

AllCriticalHighKEV
  • CVE-2019-2257HigJun 14, 2019
    Qualcomm
    MDM9150
    risk 0.51cvss 7.8epss 0.00

    Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607,…

  • CVE-2018-5913HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

  • CVE-2018-5911HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 675, SD 712 / SD…

  • CVE-2018-5903HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640,…

  • CVE-2018-5883HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 636,…

  • CVE-2018-3583HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W,…

  • CVE-2018-13919HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

  • CVE-2018-13910HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

  • CVE-2018-13909HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.46cvss 7.0epss 0.00

    Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

  • CVE-2018-13908HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

  • CVE-2018-13902HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2018-11939HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCA6574AU, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD…

  • CVE-2018-11934HigJun 14, 2019
    Qualcomm
    MDM9150
    risk 0.51cvss 7.8epss 0.00

    Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150,…

  • CVE-2018-11929HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 425, SD…

  • CVE-2018-11819HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD…

  • CVE-2019-12822HigJun 14, 2019
    Embedthis
    Goahead
    risk 0.49cvss 7.5epss 0.09

    In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as demonstrated by a colon on a line by itself.

  • CVE-2019-11770HigJun 14, 2019
    Eclipse
    Buildship
    risk 0.53cvss 8.1epss 0.01

    In Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is resolving dependencies over HTTP instead of HTTPS. Any of these artifacts could have been MITM to maliciously compromise them and infect the build artifacts that were produced.…

  • CVE-2019-11582HigJun 14, 2019
    Atlassian
    Sourcetree
    risk 0.58cvss 8.8epss 0.05

    An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackers to gain remote code execution through the use of a crafted URI.

  • CVE-2019-12818HigJun 14, 2019
    Linux
    Kernel
    risk 0.49cvss 7.5epss 0.06

    An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects…

  • CVE-2019-12802HigJun 13, 2019
    Radare
    Radare2
    risk 0.51cvss 7.8epss 0.02

    In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact (invalid memory access in r_egg_lang_parsechar; invalid…

  • CVE-2019-12799HigJun 13, 2019
    Shopware
    Shopware
    risk 0.65cvss 8.8epss 0.54

    In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, which can result in an arbitrary deserialization if the right class is instantiated. An attacker can leverage this deserialization to…

  • CVE-2019-11117HigJun 13, 2019
    Intel
    Omni Path Fabric Manager Gui
    risk 0.51cvss 7.8epss 0.00

    Improper permissions in the installer for Intel(R) Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable escalation of privilege via local attack.

  • CVE-2019-0164HigJun 13, 2019
    Intel
    Turbo Boost Max Technology 3.0
    risk 0.47cvss 7.3epss 0.00

    Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.

  • CVE-2019-0136HigJun 13, 2019
    Intel
    PROSet/Wireless WiFi software
    risk 0.48cvss 7.4epss 0.04

    Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

  • CVE-2019-0130HigJun 13, 2019
    Intel
    Accelerated Storage Manager
    risk 0.48cvss 7.4epss 0.02

    Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.

  • CVE-2019-0128HigJun 13, 2019
    Intel
    Chipset Device Software
    risk 0.51cvss 7.8epss 0.01

    Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access.

  • CVE-2018-3702HigJun 13, 2019
    ITE Tech
    Consumer Infrared Driver
    risk 0.51cvss 7.8epss 0.00

    Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

  • CVE-2019-0315HigJun 12, 2019
    SAP
    Netweaver Process Integration
    risk 0.49cvss 7.5epss 0.01

    Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50 and SAP_XIPCK 7.10 to 7.11, 7.20, 7.30) allows an attacker to access…

  • CVE-2019-7845HigJun 12, 2019
    Adobe Inc.
    Flashplayer
    risk 0.58cvss 8.8epss 0.06

    Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

  • CVE-2019-5442HigJun 12, 2019
    Pippo
    Pippo
    risk 0.49cvss 7.5epss 0.01

    XML Entity Expansion (Billion Laughs Attack) on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that…

  • CVE-2019-10971HigJun 12, 2019
    DeviceNet Safety
    Network Configurator
    risk 0.51cvss 7.8epss 0.01

    The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application's direct control and outside the intended directories.

  • CVE-2019-9676HigJun 12, 2019
    Dahua
    IP Camera
    risk 0.51cvss 7.8epss 0.00

    Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the function of redirection display for serial port printing information, which can not be used by product basic functions.…

  • CVE-2019-3946HigJun 12, 2019
    Fujielectric
    V Server
    risk 0.49cvss 7.5epss 0.02

    Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can crash vserver.exe due to an integer overflow in the UDP message handling logic.

  • CVE-2019-6584HigJun 12, 2019
    Siemens Foundation
    LOGO!8
    risk 0.57cvss 8.8epss 0.01

    A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS LOGO!8 (6ED1052-xyy08-0BA0 FS:01 / Firmware version < V1.82.02). The integrated webserver does not invalidate the Session ID upon user…

  • CVE-2019-6582HigJun 12, 2019
    Siemens Foundation
    Siveillance Vms
    risk 0.46cvss 7.1epss 0.01

    A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All versions <…

  • CVE-2019-6581HigJun 12, 2019
    Siemens Foundation
    Siveillance VMS 2017 R2
    risk 0.57cvss 8.8epss 0.01

    A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All versions <…

  • CVE-2019-6571HigJun 12, 2019
    Siemens Foundation
    LOGO!8
    risk 0.49cvss 7.5epss 0.02

    A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS LOGO!8 (6ED1052-xyy08-0BA0 FS:01 / Firmware version < V1.82.02). An attacker with network access to port 10005/tcp of the LOGO! device…

  • CVE-2019-10925HigJun 12, 2019
    Siemens Foundation
    SIMATIC MV400 family
    risk 0.46cvss 7.1epss 0.02

    A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network…

  • CVE-2019-1080HigJun 12, 2019
    Microsoft
    browsers
    risk 0.49cvss 7.5epss 0.03

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who…

  • CVE-2019-1069HigKEVJun 12, 2019
    Microsoft
    Task Scheduler Service
    risk 0.69cvss 7.8epss 0.06

    An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would…

  • CVE-2019-1065HigJun 12, 2019
    Microsoft
    Windows Kernel
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete…

  • CVE-2019-1064HigKEVJun 12, 2019
    Microsoft
    Windows AppX Deployment Service
    risk 0.69cvss 7.8epss 0.07

    An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view,…

  • CVE-2019-1055HigJun 12, 2019
    Microsoft
    browsers
    risk 0.49cvss 7.5epss 0.03

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who…

  • CVE-2019-1045HigJun 12, 2019
    Microsoft
    Windows Network File System
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way that the Windows Network File System (NFS) handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally…

  • CVE-2019-1041HigJun 12, 2019
    Microsoft
    Windows Kernel
    risk 0.46cvss 7.0epss 0.01

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete…

  • CVE-2019-1038HigJun 12, 2019
    Microsoft
    browsers
    risk 0.49cvss 7.5epss 0.03

    A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully…

  • CVE-2019-1035HigJun 12, 2019
    Microsoft
    Word
    risk 0.51cvss 7.8epss 0.07

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user.…

  • CVE-2019-1034HigJun 12, 2019
    Microsoft
    Word
    risk 0.51cvss 7.8epss 0.05

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user.…

  • CVE-2019-1028HigJun 12, 2019
    Microsoft
    Windows Audio Service
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the…

  • CVE-2019-1027HigJun 12, 2019
    Microsoft
    Windows Audio Service
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the…