VYPR

CVEs

407,162 total · page 6048 of 8,144

AllCriticalHighKEV
  • CVE-2018-11689MedJun 14, 2018
    Hanwha Techwin
    Web Viewer
    risk 0.40cvss 6.1epss 0.02

    Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.)

  • CVE-2018-11574CriJun 14, 2018
    PPPD
    PPPD
    risk 0.64cvss 9.8epss 0.02

    Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and…

  • CVE-2017-12070HigJun 14, 2018
    Opcfoundation
    DLLs
    risk 0.57cvss 8.8epss 0.01

    Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code.

  • CVE-2018-12421CriJun 14, 2018
    Ltb Project
    Self Service Password
    risk 0.64cvss 9.8epss 0.03

    LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old password) via a crafted POST request, because the ldap_bind return value is mishandled and the PHP data type is not constrained to be a string.

  • CVE-2018-12114HigJun 14, 2018
    Maccms
    Maccms
    risk 0.60cvss 8.8epss 0.03

    Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts.

  • CVE-2018-4848MedJun 14, 2018
    Siemens Foundation
    SCALANCE X-200 switch family
    risk 0.40cvss 6.1epss 0.01

    A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300…

  • CVE-2018-4842MedJun 14, 2018
    Siemens Foundation
    SCALANCE X-200IRT
    risk 0.31cvss 4.8epss 0.01

    A vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). A…

  • CVE-2018-4833HigJun 14, 2018
    Siemens Foundation
    RFID 181EIP
    risk 0.57cvss 8.8epss 0.01

    A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1),…

  • CVE-2018-12418MedJun 14, 2018
    Junrar Project
    Junrar
    risk 0.29cvss 5.5epss 0.01

    Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

  • CVE-2018-10821MedJun 14, 2018
    Blackcatdevelopment
    Blackcatcms
    risk 0.31cvss 4.8epss 0.01

    Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel.

  • CVE-2018-8927MedJun 14, 2018
    Synology
    Calendar
    risk 0.35cvss 5.4epss 0.01

    Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) cal_id or (2) original_cal_id parameter.

  • CVE-2017-17309HigJun 14, 2018
    Huawei
    HG255s
    risk 0.49cvss 7.5epss 0.07

    Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication.

  • CVE-2017-17173HigJun 14, 2018
    Huawei
    Mate 9 Pro Fimware
    risk 0.51cvss 7.8epss 0.01

    Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356(C00) has an arbitrary memory free vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and…

  • CVE-2017-17172HigJun 14, 2018
    Huawei
    LYO-L21
    risk 0.47cvss 7.3epss 0.00

    Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. An authenticated, local attacker can crafts malformed packets after tricking a user to install a malicious application and exploit this vulnerability when in the…

  • CVE-2018-8267HigJun 14, 2018
    Microsoft
    Internet Explorer
    risk 0.50cvss 7.5epss 0.16

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…

  • CVE-2018-8254MedJun 14, 2018
    Microsoft
    Project Server
    risk 0.35cvss 5.4epss 0.03

    An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server,…

  • CVE-2018-8252MedJun 14, 2018
    Microsoft
    Sharepoint Server
    risk 0.35cvss 5.4epss 0.03

    An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This…

  • CVE-2018-8251HigJun 14, 2018
    Microsoft
    Windows Server 2008
    risk 0.49cvss 7.5epss 0.08

    A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server…

  • CVE-2018-8249HigJun 14, 2018
    Microsoft
    Internet Explorer
    risk 0.50cvss 7.5epss 0.15

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0978.

  • CVE-2018-8248HigJun 14, 2018
    Microsoft
    Office
    risk 0.52cvss 7.8epss 0.21

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office.

  • CVE-2018-8247MedJun 14, 2018
    Microsoft
    Office Web Apps
    risk 0.35cvss 5.4epss 0.04

    An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Office Online Server. This CVE ID…

  • CVE-2018-8246MedJun 14, 2018
    Microsoft
    Office
    risk 0.37cvss 5.5epss 0.20

    An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

  • CVE-2018-8245HigJun 14, 2018
    Microsoft
    Publisher
    risk 0.52cvss 7.8epss 0.17

    A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.

  • CVE-2018-8244MedJun 14, 2018
    Microsoft
    Office
    risk 0.43cvss 6.5epss 0.06

    An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka "Microsoft Outlook Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Outlook.

  • CVE-2018-8243HigJun 14, 2018
    Microsoft
    Chakracore
    risk 0.50cvss 7.5epss 0.12

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8267.

  • CVE-2018-8239MedJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.40cvss 5.5epss 0.57

    An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

  • CVE-2018-8236HigJun 14, 2018
    Microsoft
    Edge
    risk 0.50cvss 7.5epss 0.15

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8110, CVE-2018-8111.

  • CVE-2018-8235MedJun 14, 2018
    Microsoft
    Edge
    risk 0.28cvss 4.3epss 0.03

    A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microsoft Edge.

  • CVE-2018-8234MedJun 14, 2018
    Microsoft
    Edge
    risk 0.28cvss 4.3epss 0.07

    An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0871.

  • CVE-2018-8233HigJun 14, 2018
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.

  • CVE-2018-8231HigJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.54cvss 8.1epss 0.17

    A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, aka "HTTP Protocol Stack Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

  • CVE-2018-8229HigJun 14, 2018
    Microsoft
    Edge
    risk 0.50cvss 7.5epss 0.71

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8227.

  • CVE-2018-8227HigJun 14, 2018
    Microsoft
    Edge
    risk 0.43cvss 7.5epss 0.17

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8229.

  • CVE-2018-8226HigJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.50cvss 7.5epss 0.14

    A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

  • CVE-2018-8225HigJun 14, 2018
    Microsoft
    Windows Server 2008
    risk 0.55cvss 8.1epss 0.25

    A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server…

  • CVE-2018-8224HigJun 14, 2018
    Microsoft
    Windows Server 2008
    risk 0.46cvss 7.0epss 0.01

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

  • CVE-2018-8221MedJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.35cvss 5.3epss 0.02

    A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10,…

  • CVE-2018-8219HigJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.57cvss 8.8epss 0.01

    An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "Hypervisor Code Integrity Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

  • CVE-2018-8218HigJun 14, 2018
    Microsoft
    Hyper-V Network Switch
    risk 0.51cvss 7.7epss 0.08

    A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability." This affects Windows 10, Windows 10 Servers.

  • CVE-2018-8217MedJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.35cvss 5.3epss 0.02

    A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10.…

  • CVE-2018-8216MedJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.35cvss 5.3epss 0.02

    A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10.…

  • CVE-2018-8215MedJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.35cvss 5.3epss 0.02

    A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10,…

  • CVE-2018-8214HigJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.49cvss 7.0epss 0.03

    An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique…

  • CVE-2018-8213HigJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.51cvss 7.8epss 0.09

    A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8210.

  • CVE-2018-8212MedJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.35cvss 5.3epss 0.02

    A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10,…

  • CVE-2018-8211MedJun 14, 2018
    Microsoft
    Windows 10 Servers
    risk 0.35cvss 5.3epss 0.02

    A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows 10 Servers, Windows 10.…

  • CVE-2018-8210HigJun 14, 2018
    Microsoft
    Windows Server 2012
    risk 0.53cvss 7.8epss 0.25

    A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10…

  • CVE-2018-8209HigJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.52cvss 8.0epss 0.03

    An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative user, aka "Windows Wireless Network Profile Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10…

  • CVE-2018-8208HigJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.49cvss 7.0epss 0.03

    An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique…

  • CVE-2018-8207MedJun 14, 2018
    Microsoft
    Windows Server 2008
    risk 0.31cvss 4.7epss 0.03

    An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,…