VYPR

CVEs

38,008 total · page 590 of 761

AllCriticalHighKEV
  • CVE-2015-5334CriJan 23, 2020
    LibreSSL
    LibreSSL
    risk 0.64cvss 9.8epss 0.03

    Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (program crash) or possible execute arbitrary code via a crafted X.509 certificate, which triggers a stack-based buffer overflow. Note: this vulnerability…

  • CVE-2013-1592CriJan 23, 2020
    SAP
    Netweaver
    risk 0.69cvss 9.8epss 0.24

    A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a…

  • CVE-2019-16517CriJan 23, 2020
    Connectwise
    Control
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a CORS misconfiguration, which reflected the Origin provided by incoming requests. This allowed JavaScript running on any domain to interact with the server APIs and…

  • CVE-2019-16153CriJan 23, 2020
    Fortinet
    FortiSIEM
    risk 0.64cvss 9.8epss 0.01

    A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.

  • CVE-2019-19839CriJan 23, 2020
    Ruckus
    Unleashed
    risk 0.64cvss 9.8epss 0.03

    emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploadFile attribute.

  • CVE-2019-19838CriJan 23, 2020
    Ruckus
    Unleashed
    risk 0.66cvss 9.8epss 0.24

    emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the uploadFile attribute.

  • CVE-2013-6792CriJan 23, 2020
    Google
    Android
    risk 0.67cvss 9.8epss 0.03

    Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability

  • CVE-2012-5867CriJan 23, 2020
    Ht Editor
    Ht Editor
    risk 0.64cvss 9.8epss 0.02

    HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability

  • CVE-2012-5699CriJan 23, 2020
    Babygekko
    Babygekko
    risk 0.67cvss 9.8epss 0.05

    BabyGekko before 1.2.4 allows PHP file inclusion.

  • CVE-2012-2087CriJan 23, 2020
    Ispconfig
    Ispconfig
    risk 0.64cvss 9.8epss 0.03

    ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.

  • CVE-2019-19842CriJan 22, 2020
    Ruckus
    Unleashed
    risk 0.64cvss 9.8epss 0.05

    emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to admin/_cmdstat.jsp via the mac attribute.

  • CVE-2019-19841CriJan 22, 2020
    Ruckus
    Unleashed
    risk 0.64cvss 9.8epss 0.03

    emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=packet-capture to admin/_cmdstat.jsp via the mac attribute.

  • CVE-2019-19840CriJan 22, 2020
    Ruckus
    Unleashed
    risk 0.64cvss 9.8epss 0.04

    A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.

  • CVE-2019-19843CriJan 22, 2020
    Ruckus
    Unleashed
    risk 0.64cvss 9.8epss 0.02

    Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and web/user/wps_tool_cache.

  • CVE-2019-19836CriJan 22, 2020
    Ruckus
    Unleashed
    risk 0.64cvss 9.8epss 0.04

    AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a specified filename.

  • CVE-2012-4919CriJan 22, 2020
    WordPress
    Gallery Plugin
    risk 0.64cvss 9.8epss 0.03

    Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability

  • CVE-2011-3621CriJan 22, 2020
    Fluxbb
    Fluxbb
    risk 0.64cvss 9.8epss 0.01

    A reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled.

  • CVE-2011-3614CriJan 22, 2020
    Vanilla Forums
    Vanilla Forums
    risk 0.64cvss 9.8epss 0.02

    An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9.

  • CVE-2020-7109CriJan 22, 2020
    WordPress
    Elementor Page Builder
    risk 0.64cvss 9.8epss 0.02

    The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template.

  • CVE-2020-6960CriJan 22, 2020
    MAXPRO
    MAXPRO VMS
    risk 0.64cvss 9.8epss 0.01

    The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6…

  • CVE-2020-6959CriJan 22, 2020
    MAXPRO
    MAXPRO VMS
    risk 0.64cvss 9.8epss 0.02

    The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6…

  • CVE-2019-10781CriJan 22, 2020
    Schema Inspector Project
    Schema Inspector
    risk 0.57cvss 9.8epss 0.01

    In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.

  • CVE-2019-10780CriJan 22, 2020
    Bibtex Ruby Project
    Bibtex Ruby
    risk 0.57cvss 9.8epss 0.03

    BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open.

  • CVE-2018-16272CriJan 22, 2020
    Samsung Mobile
    Galaxy Gear Firmware
    risk 0.64cvss 9.8epss 0.02

    The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interface, due to the lack of its D-Bus security policy configurations. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build…

  • CVE-2011-4943CriJan 22, 2020
    Impresspages
    Impresspages CMS
    risk 0.57cvss 9.8epss 0.02

    ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution (fixed in v1.0.13)

  • CVE-2016-11018CriJan 21, 2020
    WordPress
    gallery-images
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is huge_it_image_gallery_ajax_callback().

  • CVE-2015-2784CriJan 21, 2020
    Papercrop Project
    Papercrop
    risk 0.57cvss 9.8epss 0.02

    The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.

  • CVE-2020-7229CriJan 21, 2020
    Simplejobscript
    Simplejobscript
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL injection via the search engine. The parameter is landing_location. The function is countSearchedJobs(). The file is _lib/class.Job.php.

  • CVE-2019-19392CriJan 21, 2020
    forDNN
    UsersExportImport
    risk 0.64cvss 9.8epss 0.01

    The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.

  • CVE-2012-5190CriJan 21, 2020
    Prizm
    Content Connect
    risk 0.67cvss 9.8epss 0.05

    Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability

  • CVE-2011-4094CriJan 21, 2020
    Jara
    Jara
    risk 0.67cvss 9.8epss 0.03

    Jara 1.6 has a SQL injection vulnerability.

  • CVE-2019-14017CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,…

  • CVE-2019-14016CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009,…

  • CVE-2019-14014CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in Nicobar, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR2130

  • CVE-2019-14013CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

  • CVE-2019-14006CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2019-14005CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2019-14004CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

  • CVE-2019-10611CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2019-10581CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables…

  • CVE-2019-10579CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

  • CVE-2019-10532CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

  • CVE-2020-7233CriJan 19, 2020
    Kmc Controls
    BAC-A1616BC
    risk 0.64cvss 9.8epss 0.02

    KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR_NAME variable in the BC_Logon.swf file.

  • CVE-2014-5007CriJan 17, 2020
    Zohocorp
    Manageengine Desktop Central
    risk 0.70cvss 9.8epss 0.37

    Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. (dot…

  • CVE-2019-17634CriJan 17, 2020
    Eclipse
    Memory Analyzer
    risk 0.59cvss 9.0epss 0.02

    Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report from a malicious heap dump. The user must chose todownload, open the malicious heap dump and generate an HTML report for the problem to…

  • CVE-2019-15855CriJan 17, 2020
    Maarch
    RM
    risk 0.59cvss 9.1epss 0.02

    An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attacker to overwrite any files with a crafted POST request if the default installation procedure was followed. This results in a permanent Denial of Service.

  • CVE-2019-17361CriJan 17, 2020
    Saltstack
    Salt
    risk 0.65cvss 9.8epss 0.15

    In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.

  • CVE-2020-7048CriJan 16, 2020
    WordPress
    WP Database Reset
    risk 0.61cvss 9.1epss 0.23

    The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state (deleting all site content stored in that table), as demonstrated by a…

  • CVE-2019-10940CriJan 16, 2020
    SINEMA Server
    SINEMA Server
    risk 0.64cvss 9.9epss 0.01

    A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1). Incorrect session validation could allow an attacker with a valid session, with low privileges, to perform firmware updates and other administrative operations on connected devices. The…

  • CVE-2009-1120CriJan 15, 2020
    Dell
    Emc Replistor
    risk 0.64cvss 9.8epss 0.07

    EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where the vulnerability is caused by an error when the rep_srv.exe handles a…