CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3511 matches found

Prion•added 2020/03/10 8:15 p.m.•29 views

Information disclosure

In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a factory reset. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

2.1CVSS4.2AI score0.00147EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2020/03/10 7:55 p.m.•39 views

CVE-2020-0029

3.6AI score0.00147EPSS

SaveExploits0References1

CVE•added 2020/03/10 7:55 p.m.•65 views

CVE-2020-0029

CVE-2020-0029 affects Android 10 WiﬁConfigManager by allowing storage of location history that can only be erased via a factory reset. The issue enables local information disclosure with System-level privileges and requires no user interaction. The vulnerability is tied to the WifiConfigManager c...

2.3CVSS3.5AI score0.00147EPSS

SaveExploits0References1Affected Software1

ICS•added 2020/03/05 12:00 a.m.•63 views

WAGO I/O-CHECK

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: WAGO Equipment: I/O-CHECK Series PFC100 and Series PFC200 Vulnerabilities: Information Exposure Through Sent Data, Buffer Access with Incorrect Length Value, Missing Authentication for Critical...

10CVSS8.8AI score0.04521EPSS

SaveExploits5References5

OSV•added 2020/03/02 5:15 p.m.•9 views

CVE-2019-18903

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1...

9.8CVSS7.4AI score0.02416EPSS

SaveExploits0References1

NVD•added 2020/03/02 5:15 p.m.•34 views

CVE-2019-18902

9.8CVSS8.8AI score0.02416EPSS

SaveExploits0References1

OSV•added 2020/03/02 5:15 p.m.•5 views

CVE-2019-18902

9.8CVSS7.4AI score0.02416EPSS

SaveExploits0References1

Prion•added 2020/03/02 5:15 p.m.•24 views

Design/Logic Flaw

7.5CVSS9.4AI score0.02416EPSS

SaveExploits0References1Affected Software2

Cvelist•added 2020/03/02 4:45 p.m.•44 views

CVE-2019-18902 wicked: Use-after-free when receiving invalid DHCP6 client options

7.5CVSS9.5AI score0.02416EPSS

SaveExploits0References1

NVD•added 2020/03/02 4:15 p.m.•42 views

CVE-2019-18897

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master...

8.4CVSS8.2AI score0.00386EPSS

SaveExploits0References2

UbuntuCve•added 2020/03/02 4:15 p.m.•26 views

CVE-2019-18897

8.4CVSS7.1AI score0.00386EPSS

SaveExploits0References2

Cvelist•added 2020/03/02 3:20 p.m.•52 views

CVE-2019-18897 Local privilege escalation from user salt to root

8.4CVSS8.9AI score0.00386EPSS

SaveExploits0References2

CVE•added 2020/03/02 3:20 p.m.•182 views

CVE-2019-18897

CVE-2019-18897 is a local privilege escalation in Salt packaging on SUSE/OpenSUSE derivatives (SUSE SLES 12/15 and openSUSE Factory) due to a UNIX Symlink Following vulnerability in salt-master packaging. Affected: SUSE SLES 12 salt-master 2019.2.0-46.83.1 and prior; SLES 15 salt-master 2019.2.0-...

8.4CVSS7.7AI score0.00386EPSS

SaveExploits0References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2020/03/02 12:00 a.m.•4 views

CVE-2019-18897: Improper Link Resolution Before File Access

8.4CVSS7.7AI score0.00386EPSS

SaveExploits0References3

NVD•added 2020/02/28 2:15 p.m.•34 views

CVE-2019-3698

UNIX Symbolic Link Symlink Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linu...

7CVSS6AI score0.00684EPSS

SaveExploits1References3

osv-cve•added 2020/02/28 2:15 p.m.•32 views

CVE-2019-3698

7CVSS6.7AI score

SaveExploits0References3

Prion•added 2020/02/28 2:15 p.m.•26 views

Sql injection

6.9CVSS6.8AI score0.00684EPSS

SaveExploits1References3Affected Software3

CVE•added 2020/02/28 1:20 p.m.•182 views

CVE-2019-3698

CVE-2019-3698 is a local Symlink Following vulnerability in the cronjob used by Nagios on SUSE/OpenSUSE products. Affected: SUSE Linux Enterprise Server 12 Nagios 3.5.1-5.27 and earlier, SLES 11 Nagios 3.0.6-1.25.36.3.1 and earlier, and openSUSE Factory Nagios 4.4.5-2.1 and earlier. Root cause is...

7CVSS6.6AI score0.00684EPSS

SaveExploits1References3Affected Software1

CNVD•added 2020/02/25 12:00 a.m.•10 views

Shanghai Gesi Network Technology Co., Ltd Format Factory suffers from dll installation hijacking vulnerability

Format Factory Format Factory was founded by Shanghai Format Factory Network Co., Ltd. in February 2008, is the Internet software for global users. Ltd. Format Factory has a dll installation hijacking vulnerability, which can be exploited by attackers to cause the user's computer to be...

6.9AI score

SaveExploits0

RedhatCVE•added 2020/02/14 4:44 p.m.•38 views

CVE-2019-3699

UNIX Symbolic Link Symlink Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version...

7.8CVSS4.2AI score0.00409EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by