VYPR

CVEs

38,008 total · page 594 of 761

AllCriticalHighKEV
  • CVE-2019-16871CriDec 19, 2019
    Beckhoff
    Twincat
    risk 0.64cvss 9.8epss 0.05

    Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.

  • CVE-2019-8256CriDec 19, 2019
    Adobe Inc.
    Coldfusion
    risk 0.64cvss 9.8epss 0.04

    ColdFusion versions Update 6 and earlier have an insecure inherited permissions of default installation directory vulnerability. Successful exploitation could lead to privilege escalation.

  • CVE-2019-8255CriDec 19, 2019
    Adobe Inc.
    Brackets
    risk 0.64cvss 9.8epss 0.07

    Brackets versions 1.14 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

  • CVE-2019-19907CriDec 19, 2019
    Kopano
    Groupware Core
    risk 0.64cvss 9.8epss 0.02

    HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data.

  • CVE-2019-19905CriDec 19, 2019
    Nethack
    Nethack
    risk 0.57cvss 9.8epss 0.03

    NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that allow users to upload their own configuration files.

  • CVE-2019-16464CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16463CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to…

  • CVE-2019-16462CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16460CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to…

  • CVE-2019-16459CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16455CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to…

  • CVE-2019-16454CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary…

  • CVE-2019-16453CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.06

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16452CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.06

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16451CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.69cvss 9.8epss 0.35

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16450CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.04

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary…

  • CVE-2019-16448CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16446CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to…

  • CVE-2019-16445CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16444CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.03

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a binary planting (default folder privilege escalation) vulnerability. Successful…

  • CVE-2019-7482CriDec 19, 2019
    SonicWall
    SMA100
    risk 0.64cvss 9.8epss 0.09

    Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.

  • CVE-2019-19899CriDec 19, 2019
    Pebbletemplates
    Pebble Templates
    risk 0.64cvss 9.8epss 0.01

    Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to block access to instances of java.lang.Class) because getClass is accessible via the public static java.lang.Class java.lang.Class.forName(java.lang.Module,java.lang.String) signature.

  • CVE-2019-11131CriDec 18, 2019
    Intel
    AMT
    risk 0.64cvss 9.8epss 0.02

    Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

  • CVE-2019-11107CriDec 18, 2019
    Intel
    AMT
    risk 0.64cvss 9.8epss 0.02

    Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

  • CVE-2019-5080CriDec 18, 2019
    Wago
    Pfc100 Firmware
    risk 0.59cvss 9.1epss 0.02

    An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A single packet can cause a denial of service and weaken…

  • CVE-2019-5079CriDec 18, 2019
    Wago
    Pfc200 Firmware
    risk 0.64cvss 9.8epss 0.03

    An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a heap buffer…

  • CVE-2019-5078CriDec 18, 2019
    Wago
    Pfc200 Firmware
    risk 0.59cvss 9.1epss 0.02

    An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a denial of…

  • CVE-2019-5075CriDec 18, 2019
    Wago
    Pfc200 Firmware
    risk 0.64cvss 9.8epss 0.04

    An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets sent to the iocheckd service…

  • CVE-2019-18572CriDec 18, 2019
    Rsa
    Rsa Via Lifecycle And Governance
    risk 0.64cvss 9.8epss 0.02

    The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated…

  • CVE-2019-15599CriDec 18, 2019
    Tree Kill Project
    Tree Kill
    risk 0.57cvss 9.8epss 0.03

    A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.

  • CVE-2019-15598CriDec 18, 2019
    Treekill Project
    Treekill
    risk 0.57cvss 9.8epss 0.03

    A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.

  • CVE-2019-15597CriDec 18, 2019
    Node Df Project
    Node Df
    risk 0.64cvss 9.8epss 0.03

    A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input.

  • CVE-2019-5081CriDec 18, 2019
    Wago
    Pfc100 Firmware
    risk 0.64cvss 9.8epss 0.05

    An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a heap buffer…

  • CVE-2019-5077CriDec 18, 2019
    Wago
    Pfc200 Firmware
    risk 0.59cvss 9.1epss 0.02

    An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC 100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a denial…

  • CVE-2019-5074CriDec 18, 2019
    Wago
    Pfc200 Firmware
    risk 0.64cvss 9.8epss 0.03

    An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12) and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets…

  • CVE-2019-19690CriDec 18, 2019
    Trend Micro
    Mobile Security
    risk 0.64cvss 9.8epss 0.01

    Trend Micro Mobile Security for Android (Consumer) versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature.

  • CVE-2019-19844CriDec 18, 2019
    Djangoproject
    Django
    risk 0.64cvss 9.8epss 0.54

    Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token…

  • CVE-2019-8849CriDec 18, 2019
    Apple Inc.
    Swiftnio SSL
    risk 0.57cvss 9.8epss 0.02

    The issue was addressed by signaling that an executable stack is not required. This issue is fixed in SwiftNIO SSL 2.4.1. A SwiftNIO application using TLS may be able to execute arbitrary code.

  • CVE-2019-8779CriDec 18, 2019
    Apple Inc.
    Ipados
    risk 0.65cvss 10.0epss 0.01

    A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app extensions may not receive the correct sandbox restrictions.

  • CVE-2019-8750CriDec 18, 2019
    Apple Inc.
    watchOS
    risk 0.64cvss 9.8epss 0.02

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Multiple issues in libxslt.

  • CVE-2019-8662CriDec 18, 2019
    Apple Inc.
    tvOS
    risk 0.67cvss 9.8epss 0.10

    This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.

  • CVE-2019-8661CriDec 18, 2019
    Apple Inc.
    macOS
    risk 0.68cvss 9.8epss 0.10

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution.

  • CVE-2019-8660CriDec 18, 2019
    Apple Inc.
    tvOS
    risk 0.68cvss 9.8epss 0.14

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

  • CVE-2019-8648CriDec 18, 2019
    Apple Inc.
    tvOS
    risk 0.64cvss 9.8epss 0.03

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.

  • CVE-2019-8647CriDec 18, 2019
    Apple Inc.
    tvOS
    risk 0.68cvss 9.8epss 0.13

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.

  • CVE-2019-8641CriDec 18, 2019
    Apple Inc.
    Mac OS X
    risk 0.68cvss 9.8epss 0.17

    An out-of-bounds read was addressed with improved input validation.

  • CVE-2019-8617CriDec 18, 2019
    Apple Inc.
    iOS
    risk 0.62cvss 9.6epss 0.01

    An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 12.3. A sandboxed process may be able to circumvent sandbox restrictions.

  • CVE-2019-8613CriDec 18, 2019
    Apple Inc.
    tvOS
    risk 0.68cvss 9.8epss 0.13

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution.

  • CVE-2019-8600CriDec 18, 2019
    Apple Inc.
    iTunes
    risk 0.65cvss 9.8epss 0.20

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.

  • CVE-2019-8562CriDec 18, 2019
    Apple Inc.
    Safari
    risk 0.63cvss 9.6epss 0.01

    A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.