CVEs

408,041 total · page 5851 of 8,161

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2019-0644	Microsoft Edge	Hig	0.50	7.5	0.11		Mar 5, 2019	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,…
CVE-2019-0643	Microsoft Edge	Med	0.28	4.3	0.05		Mar 5, 2019	An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'.
CVE-2019-0642	Microsoft Edge	Hig	0.50	7.5	0.11		Mar 5, 2019	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,…
CVE-2019-0641	Microsoft Edge	Med	0.39	5.9	0.03		Mar 5, 2019	A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
CVE-2019-0640	Microsoft Edge	Hig	0.50	7.5	0.11		Mar 5, 2019	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,…
CVE-2019-0637	Microsoft Windows	Hig	0.49	7.5	0.04		Mar 5, 2019	A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to cellular network connections, aka 'Windows Defender Firewall Security Feature Bypass Vulnerability'.
CVE-2019-0636	Microsoft Windows	Med	0.36	5.5	0.02		Mar 5, 2019	An information vulnerability exists when Windows improperly discloses file information, aka 'Windows Information Disclosure Vulnerability'.
CVE-2019-0635	Microsoft Windows Hyper-V	Med	0.40	6.2	0.02		Mar 5, 2019	An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.
CVE-2019-0634	Microsoft Edge	Hig	0.50	7.5	0.10		Mar 5, 2019	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0645, CVE-2019-0650.
CVE-2019-0633	Microsoft Windows	Hig	0.58	8.8	0.13		Mar 5, 2019	A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630.
CVE-2019-0632	Microsoft Windows	Hig	0.51	7.8	0.01		Mar 5, 2019	A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0631.
CVE-2019-0631	Microsoft Windows	Hig	0.51	7.8	0.01		Mar 5, 2019	A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0632.
CVE-2019-0630	Microsoft Windows	Hig	0.59	8.8	0.17		Mar 5, 2019	A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.
CVE-2019-0628	Microsoft Win32K	Med	0.36	5.5	0.02		Mar 5, 2019	An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
CVE-2019-0627	Microsoft Windows	Hig	0.51	7.8	0.01		Mar 5, 2019	A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0631, CVE-2019-0632.
CVE-2019-0626	Microsoft Windows Server DHCP service	Cri	0.69	9.8	0.69		Mar 5, 2019	A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
CVE-2019-0625	Microsoft Windows	Hig	0.52	7.8	0.16		Mar 5, 2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598,…
CVE-2019-0623	Microsoft Windows	Hig	0.51	7.8	0.06		Mar 5, 2019	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
CVE-2019-0621	Microsoft Windows Kernel	Med	0.36	5.5	0.02		Mar 5, 2019	An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0661, CVE-2019-0663.
CVE-2019-0619	Microsoft Windows	Med	0.43	6.5	0.08		Mar 5, 2019	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0660,…
CVE-2019-0618	Microsoft Windows Graphics Device Interface	Hig	0.63	8.8	0.67		Mar 5, 2019	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0662.
CVE-2019-0616	Microsoft Windows	Med	0.43	6.5	0.08		Mar 5, 2019	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0619, CVE-2019-0660,…
CVE-2019-0615	Microsoft Windows	Med	0.43	6.5	0.08		Mar 5, 2019	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660,…
CVE-2019-0613	Microsoft .net Framework	Hig	0.58	8.8	0.15		Mar 5, 2019	A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET…
CVE-2019-0610	Microsoft Edge	Hig	0.50	7.5	0.11		Mar 5, 2019	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,…
CVE-2019-0607	Microsoft Edge	Hig	0.50	7.5	0.11		Mar 5, 2019	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,…
CVE-2019-0606	Microsoft Internet Explorer	Hig	0.50	7.5	0.11		Mar 5, 2019	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
CVE-2019-0605	Microsoft Edge	Hig	0.50	7.5	0.12		Mar 5, 2019	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0607,…
CVE-2019-0604	Microsoft Sharepoint Server	Cri	0.93	9.8	1.00	KEV	Mar 5, 2019	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
CVE-2019-0602	Microsoft Windows	Med	0.43	6.5	0.08		Mar 5, 2019	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660,…
CVE-2019-0601	Microsoft Human Interface Devices	Med	0.31	4.7	0.02		Mar 5, 2019	An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0600.
CVE-2019-0600	Microsoft Human Interface Devices	Med	0.31	4.7	0.02		Mar 5, 2019	An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601.
CVE-2019-0599	Microsoft Windows	Hig	0.52	7.8	0.20		Mar 5, 2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598,…
CVE-2019-0598	Microsoft Windows	Hig	0.52	7.8	0.20		Mar 5, 2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0599,…
CVE-2019-0597	Microsoft Windows	Hig	0.52	7.8	0.16		Mar 5, 2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0598, CVE-2019-0599,…
CVE-2019-0596	Microsoft Windows	Hig	0.52	7.8	0.16		Mar 5, 2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599,…
CVE-2019-0595	Microsoft Windows	Hig	0.52	7.8	0.19		Mar 5, 2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599,…
CVE-2019-0594	Microsoft Sharepoint Server	Hig	0.58	8.8	0.12		Mar 5, 2019	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.
CVE-2019-0593	Microsoft Edge	Hig	0.50	7.5	0.20		Mar 5, 2019	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0605, CVE-2019-0607,…
CVE-2019-0591	Microsoft Edge	Hig	0.50	7.5	0.11		Mar 5, 2019	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607,…
CVE-2019-0590	Microsoft Edge	Hig	0.50	7.5	0.11		Mar 5, 2019	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607,…
CVE-2019-0540	Microsoft Office	Med	0.37	5.5	0.13		Mar 5, 2019	A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
CVE-2019-9213	Linux Kernel	Med	0.39	5.5	0.06		Mar 5, 2019	In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
CVE-2019-9576	WordPress Blog2social	Med	0.40	6.1	0.01		Mar 5, 2019	The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.
CVE-2019-9575	Quizandsurveymaster Quiz And Survey Master	Med	0.40	6.1	0.02		Mar 5, 2019	The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.
CVE-2019-9574	WordPress Wp Human Resource Management	Hig	0.49	7.5	0.02		Mar 5, 2019	The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role.
CVE-2019-9573	WordPress Wp Human Resource Management	Hig	0.49	7.5	0.02		Mar 5, 2019	The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications.
CVE-2019-3922	Alcatel Lucent I-240W-Q GPON ONT	Cri	0.64	9.8	0.05		Mar 5, 2019	The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, unauthenticated attacker to /GponForm/fsetup_Form. An attacker can leverage this vulnerability to potentially…
CVE-2019-3921	Alcatel Lucent I-240W-Q GPON ONT	Hig	0.62	8.8	0.18		Mar 5, 2019	The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially…
CVE-2019-3920	Alcatel Lucent I-240W-Q GPON ONT	Hig	0.58	8.8	0.04		Mar 5, 2019	The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?script/.

CVE-2019-0644HigMar 5, 2019
Microsoft
Edge
risk 0.50cvss 7.5epss 0.11
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,…
CVE-2019-0643MedMar 5, 2019
Microsoft
Edge
risk 0.28cvss 4.3epss 0.05
An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'.
CVE-2019-0642HigMar 5, 2019
Microsoft
Edge
risk 0.50cvss 7.5epss 0.11
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,…
CVE-2019-0641MedMar 5, 2019
Microsoft
Edge
risk 0.39cvss 5.9epss 0.03
A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
CVE-2019-0640HigMar 5, 2019
Microsoft
Edge
risk 0.50cvss 7.5epss 0.11
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,…
CVE-2019-0637HigMar 5, 2019
Microsoft
Windows
risk 0.49cvss 7.5epss 0.04
A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to cellular network connections, aka 'Windows Defender Firewall Security Feature Bypass Vulnerability'.
CVE-2019-0636MedMar 5, 2019
Microsoft
Windows
risk 0.36cvss 5.5epss 0.02
An information vulnerability exists when Windows improperly discloses file information, aka 'Windows Information Disclosure Vulnerability'.
CVE-2019-0635MedMar 5, 2019
Microsoft
Windows Hyper-V
risk 0.40cvss 6.2epss 0.02
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.
CVE-2019-0634HigMar 5, 2019
Microsoft
Edge
risk 0.50cvss 7.5epss 0.10
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0645, CVE-2019-0650.
CVE-2019-0633HigMar 5, 2019
Microsoft
Windows
risk 0.58cvss 8.8epss 0.13
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630.
CVE-2019-0632HigMar 5, 2019
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0631.
CVE-2019-0631HigMar 5, 2019
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0632.
CVE-2019-0630HigMar 5, 2019
Microsoft
Windows
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.
CVE-2019-0628MedMar 5, 2019
Microsoft
Win32K
risk 0.36cvss 5.5epss 0.02
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
CVE-2019-0627HigMar 5, 2019
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0631, CVE-2019-0632.
CVE-2019-0626CriMar 5, 2019
Microsoft
Windows Server DHCP service
risk 0.69cvss 9.8epss 0.69
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
CVE-2019-0625HigMar 5, 2019
Microsoft
Windows
risk 0.52cvss 7.8epss 0.16
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598,…
CVE-2019-0623HigMar 5, 2019
Microsoft
Windows
risk 0.51cvss 7.8epss 0.06
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
CVE-2019-0621MedMar 5, 2019
Microsoft
Windows Kernel
risk 0.36cvss 5.5epss 0.02
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0661, CVE-2019-0663.
CVE-2019-0619MedMar 5, 2019
Microsoft
Windows
risk 0.43cvss 6.5epss 0.08
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0660,…
CVE-2019-0618HigMar 5, 2019
Microsoft
Windows Graphics Device Interface
risk 0.63cvss 8.8epss 0.67
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0662.
CVE-2019-0616MedMar 5, 2019
Microsoft
Windows
risk 0.43cvss 6.5epss 0.08
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0619, CVE-2019-0660,…
CVE-2019-0615MedMar 5, 2019
Microsoft
Windows
risk 0.43cvss 6.5epss 0.08
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660,…
CVE-2019-0613HigMar 5, 2019
Microsoft
.net Framework
risk 0.58cvss 8.8epss 0.15
A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET…
CVE-2019-0610HigMar 5, 2019
Microsoft
Edge
risk 0.50cvss 7.5epss 0.11
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,…
CVE-2019-0607HigMar 5, 2019
Microsoft
Edge
risk 0.50cvss 7.5epss 0.11
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,…
CVE-2019-0606HigMar 5, 2019
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.11
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
CVE-2019-0605HigMar 5, 2019
Microsoft
Edge
risk 0.50cvss 7.5epss 0.12
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0607,…
CVE-2019-0604CriKEVMar 5, 2019
Microsoft
Sharepoint Server
risk 0.93cvss 9.8epss 1.00
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
CVE-2019-0602MedMar 5, 2019
Microsoft
Windows
risk 0.43cvss 6.5epss 0.08
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660,…
CVE-2019-0601MedMar 5, 2019
Microsoft
Human Interface Devices
risk 0.31cvss 4.7epss 0.02
An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0600.
CVE-2019-0600MedMar 5, 2019
Microsoft
Human Interface Devices
risk 0.31cvss 4.7epss 0.02
An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601.
CVE-2019-0599HigMar 5, 2019
Microsoft
Windows
risk 0.52cvss 7.8epss 0.20
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598,…
CVE-2019-0598HigMar 5, 2019
Microsoft
Windows
risk 0.52cvss 7.8epss 0.20
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0599,…
CVE-2019-0597HigMar 5, 2019
Microsoft
Windows
risk 0.52cvss 7.8epss 0.16
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0598, CVE-2019-0599,…
CVE-2019-0596HigMar 5, 2019
Microsoft
Windows
risk 0.52cvss 7.8epss 0.16
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599,…
CVE-2019-0595HigMar 5, 2019
Microsoft
Windows
risk 0.52cvss 7.8epss 0.19
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599,…
CVE-2019-0594HigMar 5, 2019
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.
CVE-2019-0593HigMar 5, 2019
Microsoft
Edge
risk 0.50cvss 7.5epss 0.20
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0605, CVE-2019-0607,…
CVE-2019-0591HigMar 5, 2019
Microsoft
Edge
risk 0.50cvss 7.5epss 0.11
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607,…
CVE-2019-0590HigMar 5, 2019
Microsoft
Edge
risk 0.50cvss 7.5epss 0.11
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607,…
CVE-2019-0540MedMar 5, 2019
Microsoft
Office
risk 0.37cvss 5.5epss 0.13
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
CVE-2019-9213MedMar 5, 2019
Linux
Kernel
risk 0.39cvss 5.5epss 0.06
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
CVE-2019-9576MedMar 5, 2019
WordPress
Blog2social
risk 0.40cvss 6.1epss 0.01
The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.
CVE-2019-9575MedMar 5, 2019
Quizandsurveymaster
Quiz And Survey Master
risk 0.40cvss 6.1epss 0.02
The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.
CVE-2019-9574HigMar 5, 2019
WordPress
Wp Human Resource Management
risk 0.49cvss 7.5epss 0.02
The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role.
CVE-2019-9573HigMar 5, 2019
WordPress
Wp Human Resource Management
risk 0.49cvss 7.5epss 0.02
The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications.
CVE-2019-3922CriMar 5, 2019
Alcatel Lucent
I-240W-Q GPON ONT
risk 0.64cvss 9.8epss 0.05
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, unauthenticated attacker to /GponForm/fsetup_Form. An attacker can leverage this vulnerability to potentially…
CVE-2019-3921HigMar 5, 2019
Alcatel Lucent
I-240W-Q GPON ONT
risk 0.62cvss 8.8epss 0.18
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially…
CVE-2019-3920HigMar 5, 2019
Alcatel Lucent
I-240W-Q GPON ONT
risk 0.58cvss 8.8epss 0.04
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?script/.