VYPR

CVEs

100,075 total · page 696 of 2,002

AllCriticalHighKEV
  • CVE-2024-33608HigMay 8, 2024
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • CVE-2024-32049HigMay 8, 2024
    F5, Inc.
    Big IP Next Central Manager
    risk 0.48cvss 7.4epss 0.01

    BIG-IP Next Central Manager (CM) may allow an unauthenticated, remote attacker to obtain the BIG-IP Next LTM/WAF instance credentials.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • CVE-2024-31156HigMay 8, 2024
    F5, Inc.
    Big IP
    risk 0.52cvss 8.0epss 0.01

    A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of Technical Support…

  • CVE-2024-28883HigMay 8, 2024
    F5, Inc.
    BIG-IP APM
    risk 0.48cvss 7.4epss 0.00

    An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and Linux which may allow an attacker to bypass F5 endpoint inspection. Note: Software versions which have reached End of Technical Support (EoTS) are not…

  • CVE-2024-26026HigMay 8, 2024
    F5, Inc.
    Big IP Next Central Manager
    risk 0.49cvss 7.5epss 0.07

    An SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI).  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

  • CVE-2024-25560HigMay 8, 2024
    F5, Inc.
    BIG-IP AFM
    risk 0.49cvss 7.5epss 0.01

    When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • CVE-2024-25526HigMay 8, 2024
    RuvarOA
    RuvarOA
    risk 0.53cvss 8.1epss 0.01

    RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter at /ProjectManage/pm_gatt_inc.aspx.

  • CVE-2024-25515HigMay 8, 2024
    RuvarOA
    RuvarOA
    risk 0.47cvss 7.3epss 0.01

    RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_work_finish_file_down.aspx.

  • CVE-2024-21793HigMay 8, 2024
    F5, Inc.
    Big IP Next Central Manager
    risk 0.49cvss 7.5epss 0.07

    An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI).  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • CVE-2024-31270HigMay 8, 2024
    Reputeinfosystems
    Arforms Form Builder
    risk 0.49cvss 7.6epss 0.00

    Missing Authorization vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: from n/a through 1.6.1.

  • CVE-2024-1438HigMay 8, 2024
    WordPress
    Rolo Slider
    risk 0.50cvss 7.7epss 0.00

    Missing Authorization vulnerability in PressFore Rolo Slider.This issue affects Rolo Slider: from n/a through 1.0.9.

  • CVE-2024-34553HigMay 8, 2024
    Select Themes
    Stockholm Core
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm Core allows Reflected XSS.This issue affects Stockholm Core: from n/a through 2.4.1.

  • CVE-2024-3507HigMay 8, 2024
    Lunarcms
    Lunar CMS
    risk 0.50cvss 7.7epss 0.00

    Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information.

  • CVE-2024-4438HigMay 8, 2024
    Red Hat
    Openstack
    risk 0.49cvss 7.5epss 0.01

    The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one…

  • CVE-2024-4437HigMay 8, 2024
    Red Hat
    Openstack
    risk 0.49cvss 7.5epss 0.01

    The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Hat Enterprise Linux…

  • CVE-2024-4436HigMay 8, 2024
    Red Hat
    Openstack
    risk 0.49cvss 7.5epss 0.01

    The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2022-41723. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Hat Enterprise Linux…

  • CVE-2024-22264HigMay 8, 2024
    VMware
    AVI Load Balancer
    risk 0.47cvss 7.2epss 0.01

    VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious actor with admin privileges on VMware Avi Load Balancer can create, modify, execute and delete files as a root user on the host system.

  • CVE-2024-2860HigMay 8, 2024
    Brocade
    SANnav
    risk 0.51cvss 7.8epss 0.00

    The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw. An attacker accessing the VM where the Brocade SANnav is installed can gain access to sensitive data inside the PostgreSQL database.

  • CVE-2024-2746HigMay 8, 2024
    dnf
    libdnf5
    risk 0.57cvss 8.8epss 0.00

    Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary configuration parameters from unprivileged users, which allowed a local root exploit by tricking the daemon into loading a user controlled "plugin". All of this…

  • CVE-2024-1929HigMay 8, 2024
    dnf5daemon-server
    dnf5daemon-server
    risk 0.49cvss 7.5epss 0.00

    Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Confidentiality and Integrity via Configuration Dictionary. There are issues with the D-Bus interface long before Polkit is invoked. The…

  • CVE-2023-40490HigMay 7, 2024
    Maxon
    Cinema 4d
    risk 0.51cvss 7.8epss 0.00

    Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-35757HigMay 7, 2024
    Dlink
    DAP-2622
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to…

  • CVE-2023-35749HigMay 7, 2024
    Dlink
    DAP-2622
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to…

  • CVE-2023-35748HigMay 7, 2024
    Dlink
    DAP-2622
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not…

  • CVE-2023-27321HigMay 7, 2024
    Opcfoundation
    Ua .netstandard
    risk 0.49cvss 7.5epss 0.01

    OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard. Authentication is not required…

  • CVE-2022-43655HigMay 7, 2024
    Bentley
    View
    risk 0.51cvss 7.8epss 0.00

    Bentley View FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the…

  • CVE-2022-43654HigMay 7, 2024
    Netgear
    CAX30S
    risk 0.57cvss 8.8epss 0.01

    NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30S routers. Authentication is not required to exploit this vulnerability. The…

  • CVE-2022-43653HigMay 7, 2024
    Bentley
    Bentley View
    risk 0.51cvss 7.8epss 0.00

    Bentley View SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2022-43651HigMay 7, 2024
    Bentley
    Bentley View
    risk 0.51cvss 7.8epss 0.00

    Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2022-0369HigMay 7, 2024
    Trianglemicroworks
    SCADA Data Gateway
    risk 0.57cvss 8.8epss 0.02

    Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is…

  • CVE-2021-35002HigMay 7, 2024
    BMC Software
    Track It\!
    risk 0.57cvss 8.8epss 0.02

    BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within…

  • CVE-2021-34982HigMay 7, 2024
    Netgear
    Multiple Routers
    risk 0.57cvss 8.8epss 0.01

    NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this…

  • CVE-2021-34975HigMay 7, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34974HigMay 7, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2021-34971HigMay 7, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in…

  • CVE-2021-34968HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34967HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Line Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34966HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor FileAttachment Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2021-34965HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Squiggly Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34964HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34963HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34962HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Caret Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34961HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Ink Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34960HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34959HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Square Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34958HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Text Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34957HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Highlight Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34956HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2021-34955HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2021-34954HigMay 7, 2024
    Foxitsoftware
    PDF Editor
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Editor StrikeOut Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the…