VYPR

CVEs

408,318 total · page 5597 of 8,167

AllCriticalHighKEV
  • CVE-2019-0151MedNov 14, 2019
    Intel
    Processors
    risk 0.44cvss 6.7epss 0.00

    Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

  • CVE-2019-0124HigNov 14, 2019
    Intel
    6th Generation Core Processors
    risk 0.51cvss 7.8epss 0.00

    Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting TXT, may allow a privileged user to potentially enable escalation of privilege via local access.

  • CVE-2019-0123HigNov 14, 2019
    Intel
    6th Generation Core Processors
    risk 0.51cvss 7.8epss 0.00

    Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to potentially enable escalation of privilege via local access.

  • CVE-2019-0117MedNov 14, 2019
    Intel
    SGX
    risk 0.29cvss 4.4epss 0.00

    Insufficient access control in protected memory subsystem for Intel(R) SGX for 6th, 7th, 8th, 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Xeon(R) Processor E3-1500 v5, v6 Families; Intel(R) Xeon(R) E-2100 & E-2200 Processor Families with Intel(R) Processor…

  • CVE-2018-12207MedNov 14, 2019
    Intel
    Processors
    risk 0.42cvss 6.5epss 0.01

    Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.

  • CVE-2013-4108CriNov 14, 2019
    Cryptocat Project
    Cryptocat
    risk 0.64cvss 9.8epss 0.02

    Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.

  • CVE-2013-4106MedNov 14, 2019
    Cryptocat
    Cryptocat
    risk 0.40cvss 6.1epss 0.01

    A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.

  • CVE-2019-18939CriNov 14, 2019
    eQ-3
    Homematic CCU2
    risk 0.67cvss 9.8epss 0.41

    eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi and exec1.cgi scripts, which execute TCL script content from an HTTP POST…

  • CVE-2019-18938CriNov 14, 2019
    eQ-3
    Homematic CCU2
    risk 0.66cvss 9.8epss 0.34

    eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi script for payload upload and the testtcl.cgi script for its execution.

  • CVE-2019-18937CriNov 14, 2019
    eQ-3
    Homematic CCU2
    risk 0.66cvss 9.8epss 0.34

    eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi script, which executes TCL script content from an HTTP POST request.

  • CVE-2019-11139MedNov 14, 2019
    Intel
    Xeon 5120 Firmware
    risk 0.39cvss 6.0epss 0.00

    Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

  • CVE-2019-11135MedNov 14, 2019
    Intel
    CPU
    risk 0.43cvss 6.5epss 0.03

    TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

  • CVE-2019-11112HigNov 14, 2019
    Intel
    Graphics Driver
    risk 0.51cvss 7.8epss 0.00

    Memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver before 26.20.100.6813 (DCH) or 26.20.100.6812 may allow an authenticated user to potentially enable escalation of privilege via local access.

  • CVE-2019-0185MedNov 14, 2019
    Intel
    Core(TM) Processor families
    risk 0.36cvss 5.5epss 0.00

    Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor families; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 families; Intel(R) Xeon(R) E-2100 and E-2200 Processor families with Intel(R) Processor…

  • CVE-2019-0155HigNov 14, 2019
    Intel
    Graphics Driver
    risk 0.51cvss 7.8epss 0.01

    Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R)…

  • CVE-2019-0154MedNov 14, 2019
    Intel
    Celeron J3355 Firmware
    risk 0.36cvss 5.5epss 0.01

    Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R)…

  • CVE-2019-0150MedNov 14, 2019
    Intel
    Ethernet Controller X710 Tm4 Firmware
    risk 0.33cvss 5.1epss 0.00

    Insufficient access control in firmware Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow a privileged user to potentially enable a denial of service via local access.

  • CVE-2019-0149MedNov 14, 2019
    Intel
    Ethernet Controller X710 Tm4 Firmware
    risk 0.36cvss 5.5epss 0.00

    Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.

  • CVE-2019-0148MedNov 14, 2019
    Intel
    Ethernet Controller X710 Tm4 Firmware
    risk 0.36cvss 5.5epss 0.00

    Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.

  • CVE-2019-0147MedNov 14, 2019
    Intel
    Ethernet Controller X710 Tm4 Firmware
    risk 0.36cvss 5.5epss 0.00

    Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.

  • CVE-2019-0146MedNov 14, 2019
    Intel
    i40e driver
    risk 0.36cvss 5.5epss 0.00

    Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.

  • CVE-2019-0145HigNov 14, 2019
    Intel
    Ethernet Controller X710 Tm4 Firmware
    risk 0.51cvss 7.8epss 0.00

    Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.

  • CVE-2019-0144MedNov 14, 2019
    Intel
    Ethernet Controller X710 Tm4 Firmware
    risk 0.42cvss 6.5epss 0.00

    Unhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potentially enable a denial of service via local access.

  • CVE-2019-0143MedNov 14, 2019
    Intel
    Ethernet Controller X710 Tm4 Firmware
    risk 0.36cvss 5.5epss 0.00

    Unhandled exception in Kernel-mode drivers for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.

  • CVE-2019-0142HigNov 14, 2019
    Intel
    Ethernet Controller X710 Tm4 Firmware
    risk 0.53cvss 8.2epss 0.00

    Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.

  • CVE-2019-0140HigNov 14, 2019
    Intel
    Ethernet Controller X710 Tm4 Firmware
    risk 0.57cvss 8.8epss 0.01

    Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access.

  • CVE-2019-0139MedNov 14, 2019
    Intel
    Ethernet Controller X710 Tm4 Firmware
    risk 0.44cvss 6.7epss 0.00

    Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access.

  • CVE-2013-4109MedNov 14, 2019
    Cryptocat
    Cryptocat
    risk 0.40cvss 6.1epss 0.02

    An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.

  • CVE-2013-3072CriNov 14, 2019
    Netgear
    Wndr4700 Firmware
    risk 0.64cvss 9.8epss 0.02

    An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to access the web administration…

  • CVE-2013-3070HigNov 14, 2019
    Netgear
    Wndr4700
    risk 0.49cvss 7.5epss 0.02

    An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which discloses the PSK of the wireless LAN.

  • CVE-2013-3073CriNov 14, 2019
    Netgear
    Wndr4700 Firmware
    risk 0.64cvss 9.8epss 0.04

    A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34.

  • CVE-2019-16110HigNov 14, 2019
    Blade
    Shadow
    risk 0.53cvss 8.1epss 0.02

    The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream.

  • CVE-2019-15744LowNov 14, 2019
    Sony
    Xperia XZs
    risk 0.21cvss 3.3epss 0.00

    The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyaki_softbank/keyaki_softbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys contains a pre-installed app with a package name of jp.softbank.mb.tdrl app (versionCode=1413005, versionName=1.3.0)…

  • CVE-2019-15743MedNov 14, 2019
    Sony
    Xperia Touch
    risk 0.36cvss 5.5epss 0.00

    The Sony Xperia Touch Android device with a build fingerprint of Sony/blanc_windy/blanc_windy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user/dev-keys contains a pre-installed app with a package name of com.sonymobile.android.maintenancetool.testmic app (versionCode=24,…

  • CVE-2019-15475MedNov 14, 2019
    Xiaomi
    Mi A3
    risk 0.36cvss 5.5epss 0.00

    The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onc_eea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized…

  • CVE-2019-15474MedNov 14, 2019
    Xiaomi
    Cepheus Android
    risk 0.36cvss 5.5epss 0.00

    The Xiaomi Cepheus Android device with a build fingerprint of Xiaomi/cepheus/cepheus:9/PKQ1.181121.001/V10.2.6.0.PFAMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows…

  • CVE-2019-15473MedNov 14, 2019
    Xiaomi
    Mi A2 Lite
    risk 0.36cvss 5.5epss 0.00

    The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/jasmine/jasmine_sprout:9/PKQ1.180904.001/V10.0.2.0.PDIMIFJ:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that…

  • CVE-2019-15472MedNov 14, 2019
    Xiaomi
    Mi A2 Lite
    risk 0.36cvss 5.5epss 0.00

    The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows…

  • CVE-2019-15471MedNov 14, 2019
    Xiaomi
    Mi Mix 2S
    risk 0.36cvss 5.5epss 0.00

    The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=27, versionName=8.1.0) that…

  • CVE-2019-15470MedNov 14, 2019
    Qualcomm
    com.qualcomm.qti.callenhancement
    risk 0.36cvss 5.5epss 0.00

    The Xiaomi Redmi Note 6 Pro Android device with a build fingerprint of xiaomi/tulip/tulip:8.1.0/OPM1.171019.011/V10.2.2.0.OEKMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=27, versionName=8.1.0) that…

  • CVE-2019-15469MedNov 14, 2019
    Xiaomi
    Mi Pad 4
    risk 0.36cvss 5.5epss 0.00

    The Xiaomi Mi Pad 4 Android device with a build fingerprint of Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=27, versionName=8.1.0) that allows…

  • CVE-2019-15468MedNov 14, 2019
    Xiaomi
    Mi A2 Lite
    risk 0.36cvss 5.5epss 0.00

    The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=QL1715_201812071953) that…

  • CVE-2019-15467LowNov 14, 2019
    Xiaomi
    Mi Mix 2S
    risk 0.21cvss 3.3epss 0.00

    The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=A2060_201801032053) that allows…

  • CVE-2019-15466LowNov 14, 2019
    Xiaomi
    Redmi 6 Pro
    risk 0.21cvss 3.3epss 0.00

    The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1,…

  • CVE-2019-15465HigNov 14, 2019
    Samsung Mobile
    com.samsung.android.themecenter
    risk 0.51cvss 7.8epss 0.00

    The Samsung J7 Pro Android device with a build fingerprint of samsung/j7y17lteubm/j7y17lte:8.1.0/M1AJQ/J730GMUBS6BSC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows…

  • CVE-2019-15464HigNov 14, 2019
    Samsung Mobile
    J7 Pro
    risk 0.51cvss 7.8epss 0.00

    The Samsung J7 Pro Android device with a build fingerprint of samsung/j7y17lteub/j7y17lte:8.1.0/M1AJQ/J730GUBS6BSC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows…

  • CVE-2019-15463HigNov 14, 2019
    Samsung Mobile
    com.samsung.android.themecenter
    risk 0.51cvss 7.8epss 0.00

    The Samsung j7popeltemtr Android device with a build fingerprint of samsung/j7popeltemtr/j7popeltemtr:8.1.0/M1AJQ/J727T1UVS5BSC2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0)…

  • CVE-2019-15462HigNov 14, 2019
    Samsung Mobile
    J7 Duo
    risk 0.51cvss 7.8epss 0.00

    The Samsung J7 Duo Android device with a build fingerprint of samsung/j7duolteub/j7duolte:8.0.0/R16NW/J720MUBS3ASB2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows…

  • CVE-2019-15461HigNov 14, 2019
    Samsung Mobile
    com.samsung.android.themecenter
    risk 0.51cvss 7.8epss 0.00

    The Samsung J7 Neo Android device with a build fingerprint of samsung/j7velteub/j7velte:8.1.0/M1AJQ/J701MUBS6BSB4:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows…

  • CVE-2019-15460HigNov 14, 2019
    Samsung Mobile
    com.samsung.android.themecenter
    risk 0.51cvss 7.8epss 0.00

    The Samsung J7 Neo Android device with a build fingerprint of samsung/j7veltedx/j7velte:8.1.0/M1AJQ/J701FXVS6BSC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows…