VYPR

CVEs

408,092 total · page 5787 of 8,162

AllCriticalHighKEV
  • CVE-2019-5939MedMay 17, 2019
    Cybozu
    Garoon
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'.

  • CVE-2019-5938MedMay 17, 2019
    Cybozu
    Garoon
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'.

  • CVE-2019-5937MedMay 17, 2019
    Cybozu
    Garoon
    risk 0.35cvss 5.4epss 0.01

    Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user information.

  • CVE-2019-5936MedMay 17, 2019
    Cybozu
    Garoon
    risk 0.35cvss 5.4epss 0.02

    Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access privileges via the application 'Work Flow'.

  • CVE-2019-5935MedMay 17, 2019
    Cybozu
    Garoon
    risk 0.28cvss 4.3epss 0.01

    Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information.

  • CVE-2019-5934HigMay 17, 2019
    Cybozu
    Garoon
    risk 0.47cvss 7.2epss 0.01

    SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application 'logging'.

  • CVE-2019-5933MedMay 17, 2019
    Cybozu
    Garoon
    risk 0.28cvss 4.3epss 0.01

    Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view privileges via the application 'Bulletin'.

  • CVE-2019-5932MedMay 17, 2019
    Cybozu
    Garoon
    risk 0.31cvss 4.8epss 0.01

    Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Portal'.

  • CVE-2019-5931HigMay 17, 2019
    Cybozu
    Garoon
    risk 0.57cvss 8.7epss 0.01

    Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors.

  • CVE-2019-5930MedMay 17, 2019
    Cybozu
    Garoon
    risk 0.28cvss 4.3epss 0.01

    Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'.

  • CVE-2019-5929MedMay 17, 2019
    Cybozu
    Garoon
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'.

  • CVE-2019-5928MedMay 17, 2019
    Cybozu
    Garoon
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function.

  • CVE-2019-5883CriMay 17, 2019
    GitLab Inc.
    GitLab
    risk 0.59cvss 9.1epss 0.01

    An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 6.0 and later but before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. The issue comments feature could allow a user to comment on an issue which they shouldn't be allowed to.

  • CVE-2019-4279CriMay 17, 2019
    IBM
    Websphere Application Server
    risk 0.73cvss 9.8epss 0.80

    IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 160445.

  • CVE-2019-4119MedMay 17, 2019
    IBM
    Cloud Private
    risk 0.35cvss 5.3epss 0.01

    IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145.

  • CVE-2019-11114MedMay 17, 2019
    Intel
    Driver\&support Assistant
    risk 0.29cvss 4.4epss 0.00

    Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access.

  • CVE-2019-11095MedMay 17, 2019
    Intel
    Driver\&support Assistant
    risk 0.29cvss 4.4epss 0.00

    Insufficient access control in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable information disclosure via local access.

  • CVE-2019-11094HigMay 17, 2019
    Intel
    NUC Kit
    risk 0.51cvss 7.8epss 0.00

    Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.

  • CVE-2019-11093MedMay 17, 2019
    Intel
    Scs Discovery Utility
    risk 0.44cvss 6.7epss 0.00

    Unquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.

  • CVE-2019-11085HigMay 17, 2019
    Intel
    I915 Graphics
    risk 0.51cvss 7.8epss 0.00

    Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

  • CVE-2019-10139HigMay 17, 2019
    Ovirt
    Cockpit Ovirt
    risk 0.51cvss 7.8epss 0.00

    During HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var/lib/ovirt-hosted-engine-setup/cockpit/ansibleVarFileXXXXXX.var` which contains the admin and the appliance passwords as plain-text. At the of the deployment procedure, these files are…

  • CVE-2019-0172CriMay 17, 2019
    Intel
    Unite
    risk 0.64cvss 9.8epss 0.02

    A logic issue in Intel Unite(R) Client for Android prior to version 4.0 may allow a remote attacker to potentially enable escalation of privilege via network access.

  • CVE-2019-0171HigMay 17, 2019
    Intel
    Quartus
    risk 0.51cvss 7.8epss 0.00

    Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escalation of privilege via local access.

  • CVE-2019-0170MedMay 17, 2019
    Intel
    DAL
    risk 0.44cvss 6.7epss 0.00

    Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access.

  • CVE-2019-0153CriMay 17, 2019
    Intel
    CSME
    risk 0.64cvss 9.8epss 0.02

    Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

  • CVE-2019-0138HigMay 17, 2019
    Intel
    Acu Wizard
    risk 0.51cvss 7.8epss 0.00

    Improper directory permissions in Intel(R) ACU Wizard version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.

  • CVE-2019-0132HigMay 17, 2019
    Intel
    Unite
    risk 0.49cvss 7.5epss 0.02

    Data Corruption in Intel Unite(R) Client before version 3.3.176.13 may allow an unauthenticated user to potentially cause a denial of service via network access.

  • CVE-2019-0126MedMay 17, 2019
    Intel
    Silicon Reference Firmware
    risk 0.44cvss 6.7epss 0.00

    Insufficient access control in silicon reference firmware for Intel(R) Xeon(R) Scalable Processor, Intel(R) Xeon(R) Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.

  • CVE-2019-0120MedMay 17, 2019
    Intel
    Intel(R) Atom(R) Processor E3900 Series
    risk 0.29cvss 4.4epss 0.00

    Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor…

  • CVE-2019-0119MedMay 17, 2019
    Intel
    Compute Module
    risk 0.44cvss 6.7epss 0.00

    Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow a privileged user to potentially enable escalation of privilege…

  • CVE-2019-0116MedMay 17, 2019
    Intel
    Graphics Driver
    risk 0.29cvss 4.4epss 0.00

    An out of bound read in KMD module for Intel(R) Graphics Driver before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow a privileged user to potentially enable denial of service via local access.

  • CVE-2019-0115MedMay 17, 2019
    Intel
    Graphics Driver
    risk 0.36cvss 5.5epss 0.00

    Insufficient input validation in KMD module for Intel(R) Graphics Driver before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated user to potentially enable denial of service via local access.

  • CVE-2019-0114MedMay 17, 2019
    Intel
    Graphics Driver
    risk 0.31cvss 4.7epss 0.00

    A race condition in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated user to potentially enable a denial of service via local access.

  • CVE-2019-0113MedMay 17, 2019
    Intel
    Graphics Driver
    risk 0.36cvss 5.5epss 0.00

    Insufficient bounds checking in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated user to potentially enable a denial of service via local access.

  • CVE-2019-0099MedMay 17, 2019
    Intel
    SPS
    risk 0.44cvss 6.8epss 0.00

    Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

  • CVE-2019-0098MedMay 17, 2019
    Intel
    CSME
    risk 0.44cvss 6.8epss 0.00

    Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

  • CVE-2019-0097MedMay 17, 2019
    Intel
    AMT
    risk 0.32cvss 4.9epss 0.01

    Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access.

  • CVE-2019-0096HigMay 17, 2019
    Intel
    AMT
    risk 0.52cvss 8.0epss 0.00

    Out of bound write vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable escalation of privilege via adjacent network access.

  • CVE-2019-0094MedMay 17, 2019
    Intel
    AMT
    risk 0.28cvss 4.3epss 0.00

    Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access.

  • CVE-2019-0093MedMay 17, 2019
    Intel
    CSME
    risk 0.29cvss 4.4epss 0.00

    Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access.

  • CVE-2019-0092MedMay 17, 2019
    Intel
    AMT
    risk 0.44cvss 6.8epss 0.00

    Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

  • CVE-2019-0091HigMay 17, 2019
    Intel
    CSME
    risk 0.51cvss 7.8epss 0.01

    Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.

  • CVE-2019-0090HigMay 17, 2019
    Intel
    Server Platform Services
    risk 0.46cvss 7.1epss 0.00

    Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable…

  • CVE-2019-0089MedMay 17, 2019
    Intel
    SPS
    risk 0.44cvss 6.7epss 0.00

    Improper data sanitization vulnerability in subsystem in Intel(R) SPS before versions SPS_E5_04.00.04.381.0, SPS_E3_04.01.04.054.0, SPS_SoC-A_04.00.04.181.0, and SPS_SoC-X_04.00.04.086.0 may allow a privileged user to potentially enable escalation of privilege via local access.

  • CVE-2019-0086HigMay 17, 2019
    Intel
    CSME
    risk 0.51cvss 7.8epss 0.00

    Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.

  • CVE-2018-3701HigMay 17, 2019
    Intel
    PROSet/Wireless WiFi software
    risk 0.51cvss 7.8epss 0.00

    Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.

  • CVE-2018-20500HigMay 17, 2019
    GitLab Inc.
    GitLab
    risk 0.49cvss 7.5epss 0.01

    An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token in the CI/CD settings could not be reset. This was a security risk if one of…

  • CVE-2018-19585HigMay 17, 2019
    GitLab Inc.
    GitLab
    risk 0.46cvss 7.5epss 0.15

    GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol.

  • CVE-2018-17181CriMay 17, 2019
    Openemr
    Openemr
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsql.class.php.

  • CVE-2018-17180MedMay 17, 2019
    Openemr
    Openemr
    risk 0.35cvss 5.3epss 0.02

    An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/download_template.php.