VYPR

CVEs

408,092 total · page 5783 of 8,162

AllCriticalHighKEV
  • CVE-2017-8341MedMay 22, 2019
    Open-Xchange
    Ox App Suite
    risk 0.35cvss 5.3epss 0.01

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.

  • CVE-2017-8340HigMay 22, 2019
    Open-Xchange
    Ox App Suite
    risk 0.57cvss 8.8epss 0.01

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

  • CVE-2017-6912HigMay 22, 2019
    Open-Xchange
    Ox App Suite
    risk 0.57cvss 8.8epss 0.01

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

  • CVE-2017-5984MedMay 22, 2019
    Libav
    Libav
    risk 0.42cvss 6.5epss 0.01

    In libavcodec in Libav 9.21, ff_h264_execute_ref_pic_marking() has a heap-based buffer over-read.

  • CVE-2017-5871MedMay 22, 2019
    Odcms
    Odoo
    risk 0.35cvss 5.4epss 0.03

    Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact is: obtain sensitive information (remote).

  • CVE-2017-5864MedMay 22, 2019
    Open-Xchange
    Ox App Suite
    risk 0.40cvss 6.1epss 0.01

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).

  • CVE-2017-5863CriMay 22, 2019
    Open-Xchange
    Ox App Suite
    risk 0.64cvss 9.8epss 0.01

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

  • CVE-2019-7844MedMay 22, 2019
    Adobe Inc.
    Media Encoder
    risk 0.43cvss 6.5epss 0.09

    Adobe Media Encoder version 13.0.2 has an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2019-7842HigMay 22, 2019
    Adobe Inc.
    Media Encoder
    risk 0.58cvss 8.8epss 0.09

    Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability. Successful exploitation could lead to remote code execution.

  • CVE-2019-7841HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-7837HigMay 22, 2019
    Adobe Inc.
    Flash Player Desktop Runtime
    risk 0.58cvss 8.8epss 0.10

    Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

  • CVE-2019-7836HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-7835CriMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.07

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could…

  • CVE-2019-7834CriMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…

  • CVE-2018-12886HigMay 22, 2019
    GNU
    Gcc
    risk 0.46cvss 8.1epss 0.03

    stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows…

  • CVE-2017-9809MedMay 22, 2019
    OX Software GmbH
    OX App Suite
    risk 0.35cvss 5.3epss 0.01

    OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure.

  • CVE-2019-8443HigMay 22, 2019
    Atlassian
    Jira
    risk 0.53cvss 8.1epss 0.03

    The ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers who have obtained access to administrator's session to access the ViewUpgrades administrative resource without…

  • CVE-2019-8442HigMay 22, 2019
    Atlassian
    Jira
    risk 0.54cvss 7.5epss 0.60

    The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to access files in the Jira webroot under the META-INF directory via a lax path access…

  • CVE-2019-7833CriMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.07

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…

  • CVE-2019-7832CriMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.06

    Adobe Acrobat and Reader versions , 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2017.011.30142 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability.…

  • CVE-2019-7831HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.09

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…

  • CVE-2019-7830HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.10

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…

  • CVE-2019-7829HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.09

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds write vulnerability. Successful exploitation could…

  • CVE-2019-7828HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.14

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a heap overflow vulnerability. Successful exploitation could lead to…

  • CVE-2019-7827HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.14

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a heap overflow vulnerability. Successful exploitation could lead to…

  • CVE-2019-7826HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.09

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…

  • CVE-2019-7825HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.09

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds write vulnerability. Successful exploitation could…

  • CVE-2019-7824HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.11

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a buffer error vulnerability. Successful exploitation could lead to…

  • CVE-2019-7823MedMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.10

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier version, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful…

  • CVE-2019-7822HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.09

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds write vulnerability. Successful exploitation could…

  • CVE-2019-7821MedMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.10

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…

  • CVE-2019-7818HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.09

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds write vulnerability. Successful exploitation could…

  • CVE-2019-5627HigMay 22, 2019
    BlueCats
    Reveal
    risk 0.51cvss 7.8epss 0.00

    The iOS mobile application BlueCats Reveal before 5.14 stores the username and password in the app cache as base64 encoded strings, i.e. clear text. These persist in the cache even if the user logs out. This can allow an attacker to compromise the affected BlueCats network…

  • CVE-2019-5626HigMay 22, 2019
    BlueCats
    Reveal
    risk 0.51cvss 7.8epss 0.00

    The Android mobile application BlueCats Reveal before 3.0.19 stores the username and password in a clear text file. This file persists until the user logs out or the session times out from non-usage (30 days of no user activity). This can allow an attacker to compromise the…

  • CVE-2019-5625HigMay 22, 2019
    Halo Home
    Halo Home
    risk 0.46cvss 7.1epss 0.00

    The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an attacker to impersonate the…

  • CVE-2019-3403MedMay 22, 2019
    Atlassian
    Jira
    risk 0.39cvss 5.3epss 0.51

    The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.

  • CVE-2019-3402MedMay 22, 2019
    Atlassian
    Jira
    risk 0.40cvss 6.1epss 0.09

    The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the searchOwnerUserName parameter.

  • CVE-2019-3401MedMay 22, 2019
    Atlassian
    Jira
    risk 0.35cvss 5.3epss 0.13

    The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.

  • CVE-2019-12167MedMay 22, 2019
    Emerson Network Power
    Liebert Challenger
    risk 0.40cvss 6.1epss 0.01

    httpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr parameter.

  • CVE-2019-11536CriMay 22, 2019
    Kalkitech
    SYNC3000 Substation DCU GPC
    risk 0.64cvss 9.8epss 0.02

    Kalki Kalkitech SYNC3000 Substation DCU GPC v2.22.6, 2.23.0, 2.24.0, 3.0.0, 3.1.0, 3.1.16, 3.2.3, 3.2.6, 3.5.0, 3.6.0, and 3.6.1, when WebHMI is not installed, allows an attacker to inject client-side commands or scripts to be executed on the device with privileged access, aka…

  • CVE-2019-11231CriMay 22, 2019
    Get Simple.
    Getsimplecms
    risk 0.72cvss 9.8epss 0.72

    An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example). This vulnerability is triggered by an authenticated user; however, authentication can be…

  • CVE-2019-10132HigMay 22, 2019
    Libvirt
    Libvirt
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative…

  • CVE-2018-7202MedMay 22, 2019
    Projectsend
    Projectsend
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered in ProjectSend before r1053. XSS exists in the "Name" field on the My Account page.

  • CVE-2018-14729HigMay 22, 2019
    Discuz
    Discuz\!
    risk 0.58cvss 8.8epss 0.10

    The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.

  • CVE-2017-6514MedMay 22, 2019
    WordPress
    WordPress
    risk 0.35cvss 5.3epss 0.03

    WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring.

  • CVE-2019-11841MedMay 22, 2019
    Golang
    Crypto
    risk 0.32cvss 5.9epss 0.02

    A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP Message Format specification in RFC 4880 chapter 7, a cleartext signed message can contain one or more optional "Hash"…

  • CVE-2019-11634CriKEVMay 22, 2019
    Citrix Systems
    Workspace
    risk 0.82cvss 9.8epss 0.08

    Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

  • CVE-2019-7820HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.11

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a type confusion vulnerability. Successful exploitation could lead to…

  • CVE-2019-7817HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.10

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…

  • CVE-2019-7814HigMay 22, 2019
    Adobe Inc.
    Acrobat
    risk 0.58cvss 8.8epss 0.10

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…