VYPR

CVEs

410,413 total · page 5272 of 8,209

AllCriticalHighKEV
  • CVE-2012-6155Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2012-6154Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2012-5555Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2012-5528Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2011-4978Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2011-4977Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2011-4976Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2011-4975Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2011-4974Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2010-5116Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2010-5115Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2010-5114Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2010-5113Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2010-5112Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2020-7207MedNov 5, 2020
    HPE
    ProLiant Gen10 Servers
    risk 0.44cvss 6.8epss 0.01

    A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the server motherboard. To mitigate this issue, ensure your server is always…

  • CVE-2020-6877HigNov 5, 2020
    Zte
    ZXA10 eODN
    risk 0.57cvss 8.8epss 0.01

    A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication password of the handheld terminal and access the device illegally for operation. This affects: ZXA10 eODN V2.3P2T1

  • CVE-2020-25837HigNov 5, 2020
    Microfocus
    Self Service Password Reset
    risk 0.49cvss 7.5epss 0.01

    Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information.

  • CVE-2020-25662MedNov 5, 2020
    Linux
    Kernel
    risk 0.35cvss 5.3epss 0.01

    A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions of…

  • CVE-2020-25661HigNov 5, 2020
    Linux
    Kernel
    risk 0.49cvss 7.5epss 0.02

    A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing…

  • CVE-2020-17510CriNov 5, 2020
    Apache
    Shiro
    risk 0.57cvss 9.8epss 0.08

    Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

  • CVE-2020-13537HigNov 5, 2020
    Moxa
    Mxview
    risk 0.51cvss 7.8epss 0.01

    An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary.By default MXViewService, which starts as a NT…

  • CVE-2020-13536HigNov 5, 2020
    Moxa
    Mxview
    risk 0.51cvss 7.8epss 0.01

    An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary. By default MXViewService, which starts as a NT…

  • CVE-2020-6015MedNov 5, 2020
    Checkpoint
    Endpoint Security
    risk 0.36cvss 5.5epss 0.00

    Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage of service log files in non-standard locations.

  • CVE-2020-5946HigNov 5, 2020
    F5, Inc.
    BIG-IP Advanced WAF
    risk 0.49cvss 7.5epss 0.01

    In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances, certain format client-side alerts sent to the BIG-IP virtual server configured with DataSafe may cause the Traffic Management Microkernel (TMM) to restart,…

  • CVE-2020-5945HigNov 5, 2020
    F5, Inc.
    Big IP
    risk 0.55cvss 8.4epss 0.01

    In BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, undisclosed TMUI page contains a stored cross site scripting vulnerability (XSS). The issue allows a minor privilege escalation for resource admin to escalate to full admin.

  • CVE-2020-5944MedNov 5, 2020
    F5, Inc.
    BIG-IQ
    risk 0.28cvss 4.3epss 0.01

    In BIG-IQ 7.1.0, accessing the DoS Summary events and DNS Overview pages in the BIG-IQ system interface returns an error message due to disabled Grafana reverse proxy in web service configuration. F5 has done further review of this vulnerability and has re-classified it as a…

  • CVE-2020-5943MedNov 5, 2020
    F5, Inc.
    Big IP
    risk 0.42cvss 6.5epss 0.01

    In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed through the REST interface, the protected fields are obfuscated in the REST response, not protected via a SecureVault cryptogram as TMSH does. One example of protected fields is the GTM…

  • CVE-2020-5942HigNov 5, 2020
    BIG-IP
    PEM
    risk 0.49cvss 7.5epss 0.01

    In BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when processing Capabilities-Exchange-Answer (CEA) packets with certain attributes from the Policy and Charging Rules Function (PCRF) server, the…

  • CVE-2020-5941HigNov 5, 2020
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5, using the RESOLV::lookup command within an iRule may cause the Traffic Management Microkernel (TMM) to generate a core file and restart. This issue occurs when data exceeding the maximum limit of a hostname passes to the…

  • CVE-2020-5940MedNov 5, 2020
    risk 0.35cvss 5.4epss 0.01

    In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.3, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface (TMUI), also known as the BIG-IP Configuration utility.

  • CVE-2020-5939HigNov 5, 2020
    risk 0.49cvss 7.5epss 0.01

    In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.3, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, and 13.1.0-13.1.3.4, BIG-IP Virtual Edition (VE) systems on VMware, with an Intel-based 85299 Network Interface Controller (NIC) card and Single Root I/O Virtualization (SR-IOV) enabled on vSphere,…

  • CVE-2020-5793HigNov 5, 2020
    Tenable
    Nessus
    risk 0.51cvss 7.8epss 0.00

    A vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1.0 for Windows could allow an authenticated local attacker to copy user-supplied files to a specially constructed path in a specifically named user directory. An attacker could…

  • CVE-2020-24439LowNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.18cvss 2.8epss 0.01

    Acrobat Reader DC for macOS versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a security feature bypass. While the practical security impact is minimal, a defense-in-depth fix has been implemented to further…

  • CVE-2020-24438LowNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.22cvss 3.3epss 0.04

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability that could result in a memory address leak. Exploitation of this issue requires user interaction in that a victim…

  • CVE-2020-24437HigNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.54cvss 7.8epss 0.47

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the…

  • CVE-2020-24436HigNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.52cvss 7.8epss 0.17

    Acrobat Pro DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds write vulnerability that could result in writing past the end of an allocated memory structure. An attacker could leverage this…

  • CVE-2020-24435HigNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.55cvss 7.8epss 0.53

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a heap-based buffer overflow vulnerability in the submitForm function, potentially resulting in arbitrary code execution in the context of the…

  • CVE-2020-24434LowNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.22cvss 3.3epss 0.03

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass…

  • CVE-2020-24433HigNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.52cvss 7.8epss 0.16

    Adobe Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a local privilege escalation vulnerability that could enable a user without administrator privileges to delete arbitrary files and…

  • CVE-2020-24432MedNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.44cvss 6.7epss 0.11

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) and Adobe Acrobat Pro DC 2017.011.30175 (and earlier) are affected by an improper input validation vulnerability that could result in arbitrary JavaScript…

  • CVE-2020-24431MedNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.29cvss 4.4epss 0.02

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a security feature bypass that could result in dynamic library code injection by the Adobe Reader process. Exploitation of this issue…

  • CVE-2020-24430HigNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.52cvss 7.8epss 0.19

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability when handling malicious JavaScript. This vulnerability could result in arbitrary code execution in the context of…

  • CVE-2020-24429HigNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.50cvss 7.7epss 0.03

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a signature verification bypass that could result in local privilege escalation. Exploitation of this issue requires user interaction…

  • CVE-2020-24428HigNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.50cvss 7.7epss 0.02

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a time-of-check time-of-use (TOCTOU) race condition vulnerability that could result in local privilege escalation. Exploitation of…

  • CVE-2020-24427LowNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.22cvss 3.3epss 0.02

    Acrobat Reader versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an input validation vulnerability when decoding a crafted codec that could result in the disclosure of sensitive memory. An attacker could leverage…

  • CVE-2020-24426LowNov 5, 2020
    Adobe Inc.
    Acrobat
    risk 0.22cvss 3.3epss 0.03

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass…

  • CVE-2009-5106Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2009-5105Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2009-5104Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2009-5070Nov 5, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none