VYPR

CVEs

408,391 total · page 5560 of 8,168

AllCriticalHighKEV
  • CVE-2019-19232HigDec 19, 2019
    Sudo Project
    Sudo
    risk 0.49cvss 7.5epss 0.03

    In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a…

  • CVE-2019-17527CriDec 19, 2019
    JS JOBS FREE
    JS JOBS FREE
    risk 0.64cvss 9.8epss 0.01

    dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter.

  • CVE-2019-16871CriDec 19, 2019
    Beckhoff
    Twincat
    risk 0.64cvss 9.8epss 0.05

    Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.

  • CVE-2019-8256CriDec 19, 2019
    Adobe Inc.
    Coldfusion
    risk 0.64cvss 9.8epss 0.04

    ColdFusion versions Update 6 and earlier have an insecure inherited permissions of default installation directory vulnerability. Successful exploitation could lead to privilege escalation.

  • CVE-2019-8255CriDec 19, 2019
    Adobe Inc.
    Brackets
    risk 0.64cvss 9.8epss 0.07

    Brackets versions 1.14 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

  • CVE-2019-8254HigDec 19, 2019
    Adobe Inc.
    Photoshop
    risk 0.51cvss 7.8epss 0.03

    Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

  • CVE-2019-8253HigDec 19, 2019
    Adobe Inc.
    Photoshop
    risk 0.51cvss 7.8epss 0.03

    Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

  • CVE-2019-11294MedDec 19, 2019
    Cloudfoundry
    Cloud Controller
    risk 0.28cvss 4.3epss 0.01

    Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.

  • CVE-2019-19910MedDec 19, 2019
    MediaWiki
    Mediawiki
    risk 0.40cvss 6.1epss 0.01

    The MinervaNeue Skin in MediaWiki from 2019-11-05 to 2019-12-13 (1.35 and/or 1.34) mishandles certain HTML attributes, as demonstrated by IMG onmouseover= (impact is XSS) and IMG src=http (impact is disclosing the client's IP address). This can occur within a talk page topical…

  • CVE-2019-19909HigDec 19, 2019
    Public Knowledge Project
    Open Journal Systems
    risk 0.57cvss 8.8epss 0.01

    An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2. Code injection can occur in the OJS report generator if an authenticated Journal Manager user visits a crafted URL, because unserialize is used.

  • CVE-2019-18181HigDec 19, 2019
    Arista
    Cloudvision Portal
    risk 0.51cvss 7.8epss 0.00

    In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated…

  • CVE-2019-19907CriDec 19, 2019
    Kopano
    Groupware Core
    risk 0.64cvss 9.8epss 0.02

    HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data.

  • CVE-2019-19906HigDec 19, 2019
    Carnegie Mellon University
    Cyrus Sasl
    risk 0.42cvss 7.5epss 0.08

    cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.

  • CVE-2019-19905CriDec 19, 2019
    Nethack
    Nethack
    risk 0.57cvss 9.8epss 0.03

    NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that allow users to upload their own configuration files.

  • CVE-2019-18955MedDec 19, 2019
    Lansweeper
    Lansweeper
    risk 0.40cvss 6.1epss 0.01

    The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within changelog as of 02 Dec 2019.

  • CVE-2019-18615MedDec 19, 2019
    Arista
    Cloudvision Portal
    risk 0.32cvss 4.9epss 0.00

    In CloudVision Portal (CVP) for all releases in the 2018.2 Train, under certain conditions, the application logs user passwords in plain text for certain API calls, potentially leading to user password exposure. This only affects CVP environments where: 1. Devices have enable…

  • CVE-2019-17633HigDec 19, 2019
    Eclipse
    Che
    risk 0.57cvss 8.8epss 0.01

    For Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a malicious web site could trigger the start of an arbitrary Che workspace. Che with no authentication and no TLS is not usually deployed on a public network but is often used for local…

  • CVE-2019-16465HigDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-16464CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-11780HigDec 19, 2019
    Odcms
    Odoo
    risk 0.53cvss 8.1epss 0.02

    Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.

  • CVE-2019-16463CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to…

  • CVE-2019-16462CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16461HigDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-16460CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to…

  • CVE-2019-16459CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16458HigDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-16457HigDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-16456HigDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-16455CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to…

  • CVE-2019-16454CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary…

  • CVE-2019-16453CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.06

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16452CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.06

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16451CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.69cvss 9.8epss 0.35

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16450CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary…

  • CVE-2019-16449HigDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…

  • CVE-2019-16448CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16446CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to…

  • CVE-2019-16445CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16444CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.03

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a binary planting (default folder privilege escalation) vulnerability. Successful…

  • CVE-2019-19903MedDec 19, 2019
    Backdropcms
    Backdrop CMS
    risk 0.24cvss 4.8epss 0.01

    An issue was discovered in Backdrop CMS 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying file type descriptions created by administrators. An attacker could potentially craft a specialized description, then have an administrator execute scripting when…

  • CVE-2019-19902HigDec 19, 2019
    Backdropcms
    Backdrop CMS
    risk 0.47cvss 7.2epss 0.01

    An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows the upload of entire-site configuration archives through the user interface or command line. It does not sufficiently check uploaded archives for invalid data, allowing…

  • CVE-2019-19901MedDec 19, 2019
    Backdropcms
    Backdrop CMS
    risk 0.31cvss 4.8epss 0.01

    An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying certain block descriptions created by administrators. An attacker could potentially craft a specialized description, then have an…

  • CVE-2019-19900MedDec 19, 2019
    Backdropcms
    Backdrop CMS
    risk 0.31cvss 4.8epss 0.01

    An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying content type names in the content creation interface. An attacker could potentially craft a specialized content type name, then have an…

  • CVE-2019-7487HigDec 19, 2019
    SonicWall
    Sonicos
    risk 0.51cvss 7.8epss 0.00

    Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution.

  • CVE-2019-7486HigDec 19, 2019
    SonicWall
    SMA100
    risk 0.57cvss 8.8epss 0.02

    Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier.

  • CVE-2019-7485HigDec 19, 2019
    SonicWall
    SMA100
    risk 0.57cvss 8.8epss 0.02

    Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.

  • CVE-2019-7484MedDec 19, 2019
    SonicWall
    SMA100
    risk 0.42cvss 6.5epss 0.01

    Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.

  • CVE-2019-7483HigKEVDec 19, 2019
    SonicWall
    SMA100
    risk 0.61cvss 7.5epss 0.04

    In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

  • CVE-2019-7482CriDec 19, 2019
    SonicWall
    SMA100
    risk 0.64cvss 9.8epss 0.09

    Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.

  • CVE-2019-15006MedDec 19, 2019
    Atlassian
    Confluence
    risk 0.42cvss 6.5epss 0.02

    There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence…