Vulnerabilities (CVE)

1,704 pages, showing 501–600, ordered by identifier.

CVE-2019-13608 — Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an...
CVE-2019-1367 — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects...
CVE-2019-13720 — Google Chrome WebAudio Use-After-Free Vulnerability Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit...
CVE-2019-1385 — Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs...
CVE-2019-1388 — Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run...
CVE-2019-1405 — Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
CVE-2019-1429 — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in...
CVE-2019-1458 — Microsoft Win32k Privilege Escalation Vulnerability A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in...
CVE-2019-15107 — Webmin Command Injection Vulnerability An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.
CVE-2019-15271 — Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small...
CVE-2019-15752 — Docker Desktop Community Edition Privilege Escalation Vulnerability Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by...
CVE-2019-1579 — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.
CVE-2019-15949 — Nagios XI Remote Code Execution Vulnerability Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and...
CVE-2019-16057 — D-Link DNS-320 Remote Code Execution Vulnerability The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution.
CVE-2019-16256 — SIMalliance Toolbox Browser Command Injection Vulnerability SIMalliance Toolbox Browser contains an command injection vulnerability that could allow remote attackers to...
CVE-2019-16278 — Nostromo nhttpd Directory Traversal Vulnerability Nostromo nhttpd contains a directory traversal vulnerability in the http_verify() function in a non-chrooted nhttpd...
CVE-2019-1652 — Cisco Small Business Routers Improper Input Validation Vulnerability A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN...
CVE-2019-1653 — Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs....
CVE-2019-16759 — vBulletin PHP Module Remote Code Execution Vulnerability The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the...
CVE-2019-16920 — D-Link Multiple Routers Command Injection Vulnerability Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system...
CVE-2019-16928 — Exim Out-of-bounds Write Vulnerability Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.
CVE-2019-17026 — Mozilla Firefox And Thunderbird Type Confusion Vulnerability Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the...
CVE-2019-17558 — Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code...
CVE-2019-17621 — D-Link DIR-859 Router Command Execution Vulnerability D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation...
CVE-2019-18187 — Trend Micro OfficeScan Directory Traversal Vulnerability Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a...
CVE-2019-18426 — WhatsApp Cross-Site Scripting Vulnerability A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.
CVE-2019-18935 — Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through...
CVE-2019-18988 — TeamViewer Desktop Bypass Remote Login Vulnerability TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different...
CVE-2019-19006 — Sangoma FreePBX Improper Authentication Vulnerability Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to...
CVE-2019-19356 — Netis WF2419 Devices Remote Code Execution Vulnerability Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution...
CVE-2019-19781 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability...
CVE-2019-20085 — TVT NVMS-1000 Directory Traversal Vulnerability TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests.
CVE-2019-20500 — D-Link DWL-2600AP Access Point Command Injection Vulnerability D-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration...
CVE-2019-2215 — Android Kernel Use-After-Free Vulnerability Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an...
CVE-2019-2616 — Oracle BI Publisher Unauthorized Access Vulnerability Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various...
CVE-2019-2725 — Oracle WebLogic Server, Injection Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).
CVE-2019-3010 — Oracle Solaris Privilege Escalation Vulnerability Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.
CVE-2019-3396 — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an...
CVE-2019-3398 — Atlassian Confluence Server and Data Center Path Traversal Vulnerability Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments...
CVE-2019-3568 — WhatsApp VOIP Stack Buffer Overflow Vulnerability A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of...
CVE-2019-3929 — Crestron Multiple Products Command Injection Vulnerability Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote,...
CVE-2019-4716 — IBM Planning Analytics Remote Code Execution Vulnerability IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as...
CVE-2019-5418 — Rails Ruby on Rails Path Traversal Vulnerability Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in...
CVE-2019-5544 — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that...
CVE-2019-5591 — Fortinet FortiOS Default Configuration Vulnerability Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the...
CVE-2019-5786 — Google Chrome Blink Use-After-Free Vulnerability Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out...
CVE-2019-5825 — Google Chromium V8 Out-of-Bounds Write Vulnerability Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially...
CVE-2019-6223 — Apple iOS and macOS Group Facetime Vulnerability Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the...
CVE-2019-6340 — Drupal Core Remote Code Execution Vulnerability In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP...
CVE-2019-6693 — Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher...
CVE-2019-7192 — QNAP Photo Station Improper Access Control Vulnerability QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to...
CVE-2019-7193 — QNAP QTS Improper Input Validation Vulnerability QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system.
CVE-2019-7194 — QNAP Photo Station Path Traversal Vulnerability QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote...
CVE-2019-7195 — QNAP Photo Station Path Traversal Vulnerability QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote...
CVE-2019-7238 — Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows...
CVE-2019-7256 — Nice Linear eMerge E3-Series OS Command Injection Vulnerability Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct...
CVE-2019-7286 — Apple Multiple Products Memory Corruption Vulnerability Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.
CVE-2019-7287 — Apple iOS Memory Corruption Vulnerability Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.
CVE-2019-7481 — SonicWall SMA100 SQL Injection Vulnerability SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to...
CVE-2019-7483 — SonicWall SMA100 Directory Traversal Vulnerability In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the...
CVE-2019-7609 — Kibana Arbitrary Code Execution Kibana contain an arbitrary code execution flaw in the Timelion visualizer.
CVE-2019-8394 — Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload...
CVE-2019-8506 — Apple Multiple Products Type Confusion Vulnerability A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content,...
CVE-2019-8526 — Apple macOS Use-After-Free Vulnerability Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation.
CVE-2019-8605 — Apple Multiple Products Use-After-Free Vulnerability A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute...
CVE-2019-8720 — WebKitGTK Memory Corruption Vulnerability WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.
CVE-2019-9082 — ThinkPHP Remote Code Execution Vulnerability ThinkPHP contains an unspecified vulnerability that allows for remote code execution via...
CVE-2019-9621 — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the...
CVE-2019-9670 — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability...
CVE-2019-9874 — Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF...
CVE-2019-9875 — Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF...
CVE-2019-9978 — WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code...
CVE-2020-0041 — Android Kernel Out-of-Bounds Write Vulnerability Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect...
CVE-2020-0069 — Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux...
CVE-2020-0601 — Microsoft Windows CryptoAPI Spoofing Vulnerability Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve...
CVE-2020-0618 — Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests...
CVE-2020-0638 — Microsoft Update Notification Manager Privilege Escalation Vulnerability Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.
CVE-2020-0646 — Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft .NET Framework contains an improper input validation vulnerability that allows for remote code execution.
CVE-2020-0674 — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles...
CVE-2020-0683 — Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links,...
CVE-2020-0688 — Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote...
CVE-2020-0787 — Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic...
CVE-2020-0796 — Microsoft SMBv3 Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3)...
CVE-2020-0878 — Microsoft Edge and Internet Explorer Memory Corruption Vulnerability Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code...
CVE-2020-0938 — Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted...
CVE-2020-0968 — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles...
CVE-2020-0986 — Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers...
CVE-2020-10148 — SolarWinds Orion Authentication Bypass Vulnerability SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute...
CVE-2020-10181 — Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability Sumavision Enhanced Multimedia Router (EMR) contains a cross-site request forgery (CSRF) vulnerability allowing the...
CVE-2020-10189 — Zoho ManageEngine Desktop Central File Upload Vulnerability Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.
CVE-2020-10199 — Sonatype Nexus Repository Remote Code Execution Vulnerability Sonatype Nexus Repository contains an unspecified vulnerability that allows for remote code execution.
CVE-2020-1020 — Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted...
CVE-2020-10221 — rConfig OS Command Injection Vulnerability rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote...
CVE-2020-1027 — Microsoft Windows Kernel Privilege Escalation Vulnerability An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An...
CVE-2020-1040 — Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing...
CVE-2020-1054 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly...
CVE-2020-10987 — Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system...
CVE-2020-11023 — JQuery Cross-Site Scripting (XSS) Vulnerability JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted...
CVE-2020-11261 — Qualcomm Multiple Chipsets Improper Input Validation Vulnerability Memory corruption due to improper check to return error when user application requests memory allocation of a huge...
CVE-2020-1147 — Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when...

Browse by topic

Every page in the corpus, grouped. Search finds one page; this shows what else is here.