VYPR

CVEs

408,430 total · page 5526 of 8,169

AllCriticalHighKEV
  • CVE-2019-16018MedJan 26, 2020
    Cisco Systems, Inc.
    iOS Xr
    risk 0.42cvss 6.5epss 0.01

    A vulnerability in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of a…

  • CVE-2019-16015MedJan 26, 2020
    Cisco Systems, Inc.
    Data Center Analytics Framework
    risk 0.40cvss 6.1epss 0.01

    A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface of an affected system. The…

  • CVE-2019-16008MedJan 26, 2020
    Cisco Systems, Inc.
    IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware
    risk 0.35cvss 5.4epss 0.01

    A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of an affected system. The…

  • CVE-2019-16005HigJan 26, 2020
    Cisco Systems, Inc.
    Webex Video Mesh
    risk 0.47cvss 7.2epss 0.04

    A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The vulnerability is due to improper validation of user-supplied input by the web-based management…

  • CVE-2019-16003MedJan 26, 2020
    Cisco Systems, Inc.
    Ucs Director
    risk 0.35cvss 5.3epss 0.01

    A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is due to an issue in the authentication logic of the web-based management…

  • CVE-2019-15989HigJan 26, 2020
    Cisco Systems, Inc.
    iOS Xr
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the implementation of the Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of a BGP update…

  • CVE-2019-15278MedJan 26, 2020
    Cisco Systems, Inc.
    Finesse
    risk 0.40cvss 6.1epss 0.01

    A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it…

  • CVE-2019-15255MedJan 26, 2020
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.42cvss 6.5epss 0.01

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to…

  • CVE-2019-12629HigJan 26, 2020
    Cisco Systems, Inc.
    Sd Wan Firmware
    risk 0.47cvss 7.2epss 0.02

    A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for…

  • CVE-2019-12619MedJan 26, 2020
    Cisco Systems, Inc.
    SD-WAN Solution vManage
    risk 0.42cvss 6.5epss 0.01

    A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An…

  • CVE-2020-7981CriJan 25, 2020
    Rubygeocoder
    Geocoder
    risk 0.57cvss 9.8epss 0.01

    sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when within_bounding_box is used in conjunction with untrusted sw_lat, sw_lng, ne_lat, or ne_lng data.

  • CVE-2020-7980CriJan 25, 2020
    Intellian
    Aptus
    risk 0.73cvss 9.8epss 0.83

    Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.

  • CVE-2020-7596HigJan 25, 2020
    codecov
    Nodejs Uploader
    risk 0.57cvss 8.8epss 0.02

    Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.

  • CVE-2013-1744CriJan 25, 2020
    IRIS
    IRIS citations management tool
    risk 0.67cvss 9.8epss 0.05

    IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands.

  • CVE-2012-6613HigJan 25, 2020
    Dlink
    DSR-250N
    risk 0.47cvss 7.2epss 0.02

    D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of the admin password for the admin account.

  • CVE-2012-6494MedJan 25, 2020
    Rapid7
    Nexpose
    risk 0.40cvss 6.1epss 0.01

    Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain unauthorized access.

  • CVE-2012-6345HigJan 25, 2020
    Novell
    Zenworks Configuration Management
    risk 0.49cvss 7.5epss 0.01

    Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.

  • CVE-2012-6344MedJan 25, 2020
    Novell
    Zenworks Configuration Management
    risk 0.40cvss 6.1epss 0.01

    Novell ZENworks Configuration Management before 11.2.4 allows XSS.

  • CVE-2019-5183CriJan 25, 2020
    AMD
    Atidxx64
    risk 0.59cvss 9.0epss 0.02

    An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002. A specially crafted pixel shader can cause a type confusion issue, leading to potential code execution. An attacker can provide a…

  • CVE-2019-5147HigJan 25, 2020
    AMD
    Atidxx64
    risk 0.56cvss 8.6epss 0.02

    An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability…

  • CVE-2019-5146HigJan 25, 2020
    AMD
    Atidxx64
    risk 0.56cvss 8.6epss 0.02

    An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13025.10004. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability…

  • CVE-2019-5124HigJan 25, 2020
    AMD
    Atidxx64
    risk 0.56cvss 8.6epss 0.02

    An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability…

  • CVE-2020-5226MedJan 24, 2020
    Simplesamlphp
    Simplesamlphp
    risk 0.29cvss 4.4epss 0.01

    Cross-site scripting in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script allows error reports to be submitted and sent to the system administrator. Starting with SimpleSAMLphp 1.18.0, a new SimpleSAML\Utils\EMail class was introduced to handle sending emails,…

  • CVE-2019-1386Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1377Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1360Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1355Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1353CriJan 24, 2020
    Git
    Git
    risk 0.64cvss 9.8epss 0.02

    An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux (also known as "WSL") while accessing a working directory on a regular Windows drive, none…

  • CVE-2019-1348LowJan 24, 2020
    Git
    Git
    risk 0.14cvss 3.3epss 0.00

    An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting…

  • CVE-2019-1312Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1304Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1288Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1281Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1279Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1276Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1275Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1210Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1207Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1191Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1189Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1165Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1160Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1135Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1115Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1114Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1066Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1061Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1058Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1042Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none

  • CVE-2019-1020Jan 24, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none