cve.bz

Matching records, newest first, page 115

Filter
  1. 6.1CVE-2014-4539ExploitEPSS 4.0%

    Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.

  2. 6.1CVE-2014-4592ExploitEPSS 4.0%

    Cross-site scripting (XSS) vulnerability in rss.class/scripts/magpie_debug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.

  3. 7.5CVE-2013-4985ExploitEPSS 9.0%

    Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream

  4. 9.8CVE-2013-4982ExploitEPSS 13%

    AVTECH AVN801 DVR has a security bypass via the administration login captcha

  5. 9.8CVE-2013-4976ExploitEPSS 36%

    Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials

  6. 8.8CVE-2013-4975ExploitEPSS 12%

    Hikvision DS-2CD7153-E IP Camera has Privilege Escalation

  7. 5.3CVE-2013-4868ExploitEPSS 5.0%

    Karotz API 12.07.19.00: Session Token Information Disclosure

  8. 6.3CVE-2013-4867ExploitEPSS 1.6%

    Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking

  9. 8.1CVE-2013-4859ExploitEPSS 7.0%

    INSTEON Hub 2242-222 lacks Web and API authentication

  10. 9.8CVE-2013-4743ExploitEPSS 8.4%

    Static HTTP Server 1.0 has a Local Overflow

  11. 6.1CVE-2013-4692ExploitEPSS 2.5%

    Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS

  12. 7.8CVE-2013-4695ExploitEPSS 5.3%

    Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution

  13. 6.5CVE-2013-4665ExploitEPSS 1.3%

    SPBAS Business Automation Software 2012 has CSRF.

  14. 6.1CVE-2013-4664ExploitEPSS 2.2%

    SPBAS Business Automation Software 2012 has XSS.

  15. 9.8CVE-2019-19781KEVExploitEPSS >99.9%

    An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

  16. 5.3CVE-2019-19985ExploitEPSS 71%

    The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.

  17. 9.9CVE-2019-10758KEVExploitEPSS 85%

    mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.

  18. 6.1CVE-2019-19908ExploitEPSS 21%

    phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.php is vulnerable.

  19. 9.8CVE-2019-16451ExploitEPSS 35%

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a heap overflow vulnerability. Successful explo…

  20. 9.8CVE-2019-19844ExploitEPSS 54%

    Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an atta…

  21. 8.8CVE-2019-8820ExploitEPSS 9.6%

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows…

  22. 8.8CVE-2019-8765ExploitEPSS 7.0%

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.

  23. 7.8CVE-2019-8717ExploitEPSS 1.3%

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.

  24. 6.1CVE-2019-8690ExploitEPSS 4.5%

    A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Window…

  25. 8.8CVE-2019-8689ExploitEPSS 14%

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Wi…

  26. 8.8CVE-2019-8672ExploitEPSS 11%

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Wi…

  27. 8.8CVE-2019-8671ExploitEPSS 8.5%

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. P…

  28. 5.3CVE-2019-8663ExploitEPSS 6.7%

    This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6. A remote attacker may be able to leak memory.

  29. 9.8CVE-2019-8662ExploitEPSS 9.8%

    This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.

  30. 9.8CVE-2019-8661ExploitEPSS 10%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution.

  31. 9.8CVE-2019-8660ExploitEPSS 14%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause unexpected application termination or arbitrary c…

  32. 6.1CVE-2019-8649ExploitEPSS 4.5%

    A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud fo…

  33. 9.8CVE-2019-8647ExploitEPSS 13%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.

  34. 7.5CVE-2019-8646ExploitEPSS 11%

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to leak memory.

  35. 9.8CVE-2019-8641ExploitEPSS 17%

    An out-of-bounds read was addressed with improved input validation.

  36. 7.5CVE-2019-8624ExploitEPSS 6.9%

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 5.3. A remote attacker may be able to leak memory.

  37. 8.8CVE-2019-8623ExploitEPSS 8.4%

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing …

  38. 8.8CVE-2019-8622ExploitEPSS 8.4%

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing …

  39. 9.8CVE-2019-8613ExploitEPSS 13%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution.

  40. 8.8CVE-2019-8611ExploitEPSS 8.5%

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously cra…

  41. 7.8CVE-2019-8605KEVExploitEPSS 18%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

  42. 7.1CVE-2019-8591ExploitEPSS 4.4%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.

  43. 7.0CVE-2019-8565ExploitEPSS 14%

    A race condition was addressed with additional validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to gain root privileges.

  44. 8.8CVE-2019-8558ExploitEPSS 7.5%

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web co…

  45. 8.8CVE-2019-8518ExploitEPSS 11%

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web co…

  46. 7.8CVE-2019-8514ExploitEPSS 3.1%

    A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. An application may be able to gain elevated privileges.

  47. 7.8CVE-2019-8513ExploitEPSS 2.9%

    This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to execute arbitrary shell commands.

  48. 8.8CVE-2019-8506KEVExploitEPSS 16%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may le…

  49. 7.8CVE-2019-7286KEVExploitEPSS 16%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.

  50. 6.5CVE-2019-19833ExploitEPSS 15%

    In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous access can be achieved in applications that do not have a user login area).