VYPR

CVEs

408,117 total · page 5779 of 8,163

AllCriticalHighKEV
  • CVE-2019-7019CriMay 24, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

  • CVE-2019-7018CriMay 24, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.04

    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

  • CVE-2019-10685MedMay 24, 2019
    Heidelberg
    Prinect Archiver
    risk 0.43cvss 6.1epss 0.02

    A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0.

  • CVE-2018-17843CriMay 24, 2019
    ADD Clicking MLM Software
    ADD Clicking MLM Software
    risk 0.64cvss 9.8epss 0.02

    SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and…

  • CVE-2018-12624MedMay 24, 2019
    Eventum
    Eventum
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter.

  • CVE-2017-18375HigMay 24, 2019
    Ampache
    Ampache
    risk 0.57cvss 8.8epss 0.02

    Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php.

  • CVE-2016-10759CriMay 24, 2019
    Precurio
    Precurio
    risk 0.64cvss 9.8epss 0.04

    The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads.

  • CVE-2016-10758HigMay 24, 2019
    Phpkit
    Phpkit
    risk 0.57cvss 8.8epss 0.02

    PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the image_name parameter.

  • CVE-2016-10757HigMay 24, 2019
    Redaxo
    Redaxo
    risk 0.57cvss 8.8epss 0.01

    In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php.

  • CVE-2016-10756HigMay 24, 2019
    Kliqqi CMS
    Kliqqi CMS
    risk 0.57cvss 8.8epss 0.01

    Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself.

  • CVE-2016-10755HigMay 24, 2019
    AbanteCart
    AbanteCart
    risk 0.57cvss 8.8epss 0.01

    AbanteCart 1.2.8 allows SQL Injection via the source_language parameter to admin/controller/pages/localisation/language.php and core/lib/language_manager.php, or via POST data to admin/controller/pages/tool/backup.php and admin/model/tool/backup.php.

  • CVE-2016-10754HigMay 24, 2019
    Vtiger
    vTiger
    risk 0.57cvss 8.8epss 0.01

    modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter.

  • CVE-2016-10753HigMay 24, 2019
    E107
    E107
    risk 0.57cvss 8.8epss 0.02

    e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC.

  • CVE-2016-10752CriMay 24, 2019
    Serendipity
    Serendipity
    risk 0.64cvss 9.8epss 0.02

    serendipity_moveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename.

  • CVE-2016-10751HigMay 24, 2019
    Osclass
    Osclass
    risk 0.47cvss 7.2epss 0.03

    osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&action=ajax_upload.

  • CVE-2019-8346MedMay 24, 2019
    Zohocorp
    Manageengine Adselfservice Plus
    risk 0.40cvss 6.1epss 0.04

    In Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site Scripting (XSS) vulnerability allows for an unauthenticated manipulation of the JavaScript code by injecting the HTTP form parameter adscsrf. An attacker can use this to capture a user's AD…

  • CVE-2019-2726MedMay 24, 2019
    Oracle Corporation
    Enterprise Manager Ops Center
    risk 0.41cvss 6.3epss 0.01

    Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Services Integration). The supported version that is affected is 12.3.3. Difficult to exploit vulnerability allows low privileged attacker with network access…

  • CVE-2019-2250HigMay 24, 2019
    Qualcomm
    Snapdragon Compute
    risk 0.51cvss 7.8epss 0.00

    Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150,…

  • CVE-2019-2248HigMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2019-2247HigMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,…

  • CVE-2019-2245CriMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2019-2244CriMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2019-11604MedMay 24, 2019
    Quest
    Kace Systems Management Appliance
    risk 0.40cvss 6.1epss 0.02

    An issue was discovered in Quest KACE Systems Management Appliance before 9.1. The script at /service/kbot_service_notsoap.php is vulnerable to unauthenticated reflected XSS when user-supplied input to the METHOD GET parameter is processed by the web application. Since the…

  • CVE-2019-10848MedMay 24, 2019
    Computrols
    CBAS
    risk 0.38cvss 5.3epss 0.08

    Computrols CBAS 18.0.0 allows Username Enumeration.

  • CVE-2019-10847HigMay 24, 2019
    Computrols
    CBAS
    risk 0.60cvss 8.8epss 0.02

    Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.

  • CVE-2019-10143HigMay 24, 2019
    FreeRADIUS
    Freeradius
    risk 0.46cvss 7.0epss 0.00

    It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a…

  • CVE-2018-19613MedMay 24, 2019
    Westermo
    DR-250
    risk 0.42cvss 6.5epss 0.01

    Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.

  • CVE-2018-19612HigMay 24, 2019
    Westermo
    DR-250
    risk 0.57cvss 8.8epss 0.02

    The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code.

  • CVE-2018-18060MedMay 24, 2019
    Bitdefender
    Bitdefender Engine
    risk 0.35cvss 5.3epss 0.01

    An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other…

  • CVE-2018-18059MedMay 24, 2019
    Bitdefender
    Bitdefender Engine
    risk 0.35cvss 5.3epss 0.01

    An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other…

  • CVE-2018-18058MedMay 24, 2019
    Bitdefender
    Scan Engines
    risk 0.35cvss 5.3epss 0.01

    An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a division-by-zero circumstance. Paired with other vulnerabilities,…

  • CVE-2018-13925CriMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2018-13920HigMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm…

  • CVE-2018-13899HigMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650,…

  • CVE-2018-13895HigMay 24, 2019
    Qualcomm
    RCS app
    risk 0.51cvss 7.8epss 0.00

    Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access to phone in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

  • CVE-2018-13887CriMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8909W,…

  • CVE-2018-13886CriMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2018-13885MedMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655,…

  • CVE-2018-12013HigMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2018-12012HigMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    While updating blacklisting region shared buffered memory region is not validated against newly updated black list, causing boot-up to be compromised in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…

  • CVE-2018-12005MedMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650,…

  • CVE-2018-12004MedMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206,…

  • CVE-2018-11976MedMay 24, 2019
    Qualcomm
    IPQ8074
    risk 0.36cvss 5.5epss 0.00

    ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,…

  • CVE-2018-11968HigMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…

  • CVE-2018-11967HigMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocated from userspace currently in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

  • CVE-2018-11953CriMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,…

  • CVE-2018-11949CriMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 425, SD…

  • CVE-2018-11940CriMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD…

  • CVE-2018-11937CriMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD…

  • CVE-2018-11936CriMay 24, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memory access. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…