VYPR

CVEs

409,372 total · page 5424 of 8,188

AllCriticalHighKEV
  • CVE-2019-17288May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17287May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17286May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17285May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17284May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17283May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17282May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17281May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17280May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17279May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17278May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2019-17277May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-5484May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2017-13654May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2017-13653May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2020-10690MedMay 8, 2020
    Linux
    Kernel
    risk 0.42cvss 6.5epss 0.00

    There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if…

  • CVE-2019-5499May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-5491May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-5480May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2017-15514May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2017-13657May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2017-13656May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2017-13655May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2017-13651May 8, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2020-11541MedMay 8, 2020
    Techsmith
    Snagit
    risk 0.36cvss 5.5epss 0.00

    In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity (XXE) injection issue exists that would allow a local attacker to exfiltrate data under the local Administrator account.

  • CVE-2019-14898HigMay 8, 2020
    Linux
    Kernel
    risk 0.46cvss 7.0epss 0.00

    The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget_not_zero or…

  • CVE-2019-10170MedMay 8, 2020
    Red Hat
    Keycloak
    risk 0.43cvss 6.6epss 0.01

    A flaw was found in the Keycloak admin console, where the realm management interface permits a script to be set via the policy. This flaw allows an attacker with authenticated user and realm management permissions to configure a malicious script to trigger and execute arbitrary…

  • CVE-2019-10169MedMay 8, 2020
    Red Hat
    Keycloak
    risk 0.43cvss 6.6epss 0.01

    A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execute arbitrary code with the permissions…

  • CVE-2020-7291HigMay 8, 2020
    McAfee
    Active Response
    risk 0.51cvss 7.8epss 0.00

    Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  • CVE-2020-7290HigMay 8, 2020
    McAfee
    Active Response
    risk 0.51cvss 7.8epss 0.00

    Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  • CVE-2020-7289HigMay 8, 2020
    McAfee
    Active Response
    risk 0.51cvss 7.8epss 0.00

    Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  • CVE-2020-7288HigMay 8, 2020
    McAfee
    Exploit Detection and Response (EDR) for Mac
    risk 0.51cvss 7.8epss 0.00

    Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Mac prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  • CVE-2020-7287HigMay 8, 2020
    McAfee
    Endpoint Detection And Response
    risk 0.51cvss 7.8epss 0.00

    Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Linux prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  • CVE-2020-7286HigMay 8, 2020
    McAfee
    Endpoint Detection And Response
    risk 0.51cvss 7.8epss 0.00

    Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  • CVE-2020-7285HigMay 8, 2020
    McAfee
    Mvision Endpoint
    risk 0.51cvss 7.8epss 0.00

    Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  • CVE-2020-7267HigMay 8, 2020
    McAfee
    Virusscan Enterprise
    risk 0.57cvss 8.8epss 0.00

    Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended…

  • CVE-2020-5741HigKEVMay 8, 2020
    Plexcor
    Media Server
    risk 0.68cvss 7.2epss 0.73

    Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.

  • CVE-2020-12680MedMay 8, 2020
    Avira
    Free Antivirus
    risk 0.36cvss 5.5epss 0.00

    Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user credentials. The functions of the executable file Avira.PWM.NativeMessaging.exe are aimed at collecting credentials stored in Chrome, Firefox, Opera, and Edge. The executable does not verify the…

  • CVE-2020-7266HigMay 8, 2020
    McAfee
    Virusscan Enterprise
    risk 0.57cvss 8.8epss 0.00

    Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an…

  • CVE-2020-7265HigMay 8, 2020
    McAfee
    Endpoint Security
    risk 0.57cvss 8.8epss 0.00

    Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved…

  • CVE-2020-7264HigMay 8, 2020
    McAfee
    Endpoint Security
    risk 0.57cvss 8.8epss 0.00

    Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file.…

  • CVE-2020-12026HigMay 8, 2020
    Advantech
    Webaccess
    risk 0.57cvss 8.8epss 0.02

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files outside the application’s control.

  • CVE-2020-12022CriMay 8, 2020
    Advantech
    Webaccess
    risk 0.64cvss 9.8epss 0.02

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject specially crafted input into memory where it can be executed.

  • CVE-2020-12018HigMay 8, 2020
    Advantech
    Webaccess
    risk 0.49cvss 7.5epss 0.02

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data.

  • CVE-2020-12014HigMay 8, 2020
    Advantech
    Webaccess
    risk 0.49cvss 7.5epss 0.02

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Input is not properly sanitized and may allow an attacker to inject SQL commands.

  • CVE-2020-12010HigMay 8, 2020
    Advantech
    Webaccess
    risk 0.46cvss 7.1epss 0.01

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow an authenticated user to use a specially crafted file to delete files outside the application’s control.

  • CVE-2020-12006CriMay 8, 2020
    Advantech
    Webaccess
    risk 0.64cvss 9.8epss 0.04

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files outside the application’s control.

  • CVE-2020-12002CriMay 8, 2020
    Advantech
    Webaccess
    risk 0.64cvss 9.8epss 0.09

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution.

  • CVE-2020-10638CriMay 8, 2020
    Advantech
    Webaccess
    risk 0.64cvss 9.8epss 0.07

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution.

  • CVE-2020-12735CriMay 8, 2020
    Domainmod
    Domainmod
    risk 0.64cvss 9.8epss 0.02

    reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover.