6867 matches found
Symantec Endpoint Protection Manager CVE-2018-18368 Local Privilege Escalation Vulnerability
Description Symantec Endpoint Protection Manager is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. Symantec Endpoint Protection Manager versions prior to 14.2 RU1 are vulnerable. Technologies Affected Symantec Endpoint...
Symantec Endpoint Protection CVE-2019-12756 Local Security Bypass Vulnerability
Description Symantec Endpoint Protection is prone to a local security-bypass vulnerability. Local attackers can exploit this vulnerability to bypass certain security restrictions and gain access to possibly sensitive information. Versions prior to Symantec Endpoint Protection 14 RU2 are vulnerabl...
Teamviewer CVE-2019-18251 Remote Security Vulnerability
Description Teamviewer is prone to a remote security vulnerability. An attacker can leverage this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. Teamviewer 5.0.8703 QS is vulnerable. Technologies Affected Omron CX-Supervisor 3.4.1 Omron...
Multiple Symantec Products CVE-2019-12759 Local Privilege Escalation Vulnerability
Description Multiple Symantec Products are prone to an local privilege escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. The following products and versions are affected: Symantec Endpoint Protection Manager SEPM prior to versions 14.2 RU2 Symantec Ma...
WordPress Email Subscribers & Newsletters Plugin Multiple Security Bypass Vulnerabilities
Description The Email Subscribers Newsletters Plugin for WordPress is prone to multiple security-bypass vulnerabilities. Attackers can exploit these issues to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Versions prior to Email Subscriber...
Symfony Multiple Security Vulnerabilities
Description Symfony is prone to multiple security vulnerabilities: An attacker may leverage these issues to bypass certain security restrictions and perform unauthorized actions, execute arbitrary code, obtain sensitive information or cause denial-of-service conditions. Symfony versions 2.8.0...
Istio CVE-2019-18817 Remote Denial of Service Vulnerability
Description Istio is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. Istio versions prior to 1.3.5 are vulnerable. Technologies Affected Istio Istio 1.3.0 Istio Istio 1.3.1 Istio Istio...
WordPress Email Subscribers & Newsletters Plugin CVE-2019-19980 Security Bypass Vulnerability
Description The Email Subscribers Newsletters Plugin for WordPress is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Versions prior to Email Subscribers Newslette...
WordPress Email Subscribers & Newsletters Plugin Cross Site Request Forgery Vulnerability
Description The Email Subscribers Newsletters Plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. Versions prior to Ema...
Symfony CVE-2019-18889 Multiple Remote Code Execution Vulnerabilities
Description Symfony is prone to multiple remote code-execution vulnerabilities. Successfully exploiting these issues may result in the execution of arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Symfony versio...
Adobe Media Encoder APSB19-52 Multiple Information Disclosure Vulnerabilities
Description Adobe Media Encoder is prone to multiple information-disclosure vulnerabilities. An attacker can exploit these issues to gain access to sensitive information that may aid in further attacks. Adobe Media Encoder 13.1 is vulnerable; other versions may also be affected. Technologies...
Microsoft Windows Netlogon CVE-2019-1424 Security Bypass Vulnerability
Description Microsoft Windows Netlogon is prone to a security bypass vulnerability. Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks. Technologie...
Microsoft Windows Data Sharing Service CVE-2019-1379 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1809 for 32-bit Systems Microsoft Windows 10 Version 1809 for ARM64-based Systems Microsoft...
Microsoft Windows Hyper-V CVE-2019-1389 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10...
Microsoft Windows CVE-2019-1420 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges and execute arbitrary code. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-bas...
Microsoft Windows User Profile Service CVE-2019-1454 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to delete files and folders in an elevated context. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...
Microsoft Windows 'DirectWrite' API CVE-2019-1411 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Edge Chakra Scripting Engine CVE-2019-1428 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...
Intel PROSet/Wireless WiFi Software Multiple Security Vulnerabilities
Description Intel PROSet/Wireless WiFi Software is prone to multiple security vulnerabilities. A local attacker can leverage these issues to gain elevated privileges, obtain sensitive information or cause denial-of-service conditions. Versions prior to Intel PROSet/Wireless WiFi Software 21.40 ar...
SAP BusinessObjects BI Platform CVE-2019-0396 XML External Entity Injection Vulnerability
Description SAP BusinessObjects Business Intelligence Platform is prone to an XML External Entity injection vulnerability. Attackers can exploit this issue to gain access to sensitive information or cause denial-of-service condition. SAP BusinessObjects Business Intelligence Platform versions 4.1...
Microsoft Windows CVE-2019-1384 Security Bypass Vulnerability
Description Microsoft Windows is prone to a security bypass vulnerability. Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks. Technologies Affected Microsoft Windows 10 Version 1607 for...
Microsoft Edge Chakra Scripting Engine CVE-2019-1427 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...
Microsoft Windows 'Win32k' CVE-2019-1408 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Microsoft ActiveX Installer Service CVE-2019-1382 Local Privilege Escalation Vulnerability
Description Microsoft ActiveX Installer Service is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain the elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...
SAP Netweaver Application Server Java CVE-2019-0389 Remote Privilege Escalation Vulnerability
Description SAP Netweaver Application Server Java is prone to a remote privilege-escalation vulnerability. Remote attackers can exploit this issue to gain elevated privileges. Technologies Affected SAP Netweaver Application Server Java 7.1 SAP Netweaver Application Server Java 7.2 SAP Netweaver...
Microsoft Windows CVE-2019-1423 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges and execute arbitrary code. Technologies Affected Microsoft Windows 10 Version 1903 for 32-bit Systems Microsoft Windows 10 Version 1903 for...
Microsoft Windows CVE-2019-1381 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
McAfee Total Protection CVE-2019-3648 Local Privilege Escalation Vulnerability
Description Multiple McAfee products are prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. McAfee Total Protection MTP version 16.0.R22 and prior are vulnerable. Technologies Affected McAfee Total Protection 16.0.R17 McAfee Total...
Microsoft Windows Win32k CVE-2019-1436 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Microsoft Internet Explorer VBScript Engine CVE-2019-1390 Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current user. Failed exploit attempts may result in a denial of service condition. Internet explorer 9, 10, and 11 are...
Microsoft Office CVE-2019-1402 Local Information Disclosure Vulnerability
Description Microsoft Office is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 32-bit edition SP2 Microsoft Office 2010 64-bit edition SP2...
Microsoft Windows 'ATMFD.dll' CVE-2019-1412 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Syste...
Microsoft Windows JET Database Engine CVE-2019-1406 Remote Code Execution Vulnerability
Description Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...
TIBCO EBX CVE-2019-17330 Multiple Unspecified Cross-Site Scripting Vulnerabilities
Description TIBCO EBX is prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...
Microsoft Windows Graphics Component CVE-2019-1435 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...
Intel Ethernet 700 Series Controllers CVE-2019-0140 Buffer Overflow Vulnerability
Description Intel Ethernet 700 Series Controllers are prone to a buffer-overflow vulnerability. An attacker can exploit this issue to obtain elevated privileges that may aid in further attacks. Intel Ethernet 700 Series Controllers versions prior to 7.0 are vulnerable. Technologies Affected Citri...
Microsoft Windows Remote Procedure Call CVE-2019-1409 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...
Microsoft Windows Win32k CVE-2019-1395 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Multiple Cisco Products CVE-2019-15992 Remote Code Execution Vulnerability
Description Multiple Cisco Products are prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the application. This issue is being tracked by Cisco Bug IDs CSCvr85295 and CSCvr96680 . Technologies...
Microsoft Windows Hyper-V CVE-2019-1309 Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1803 for x64-based Systems Microsoft Windows ...
SAP Treasury and Risk Management CVE-2019-0383 Remote Authorization Bypass Vulnerability
Description SAP Treasury and Risk Management is prone to an authorization-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks. Technologies Affected SAP EA-FINSERV 6.0 SAP EA-FINSERV 6.03 SAP EA-FINSE...
McAfee Advanced Threat Defense SB10304 Multiple Security Vulnerabilities
Description McAfee Advanced Threat Defense is prone to the following security vulnerabilities: 1. Multiple information disclosure vulnerabilities. 2. A remote command execution vulnerability 3. Directory-traversal vulnerability. 4. An SQL-injection vulnerability. 5. A security vulnerability...
McAfee Threat Intelligence Exchange Server CVE-2019-3641 Unauthorized Access Vulnerability
Description McAfee Threat Intelligence Exchange Server is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. McAfee Threat Intelligence Exchange Server 3.0.0 is vulnerable...
Adobe Bridge CC APSB19-53 Multiple Unspecified Memory Corruption Vulnerabilities
Description Adobe Bridge CC is prone to multiple unspecified memory-corruption vulnerabilities. Attackers can exploit these issues to obtain sensitive information that may aid in further attacks. Adobe Bridge CC 9.1 is vulnerable. Technologies Affected Adobe Bridge CC 9.1 Recommendations Deploy...
Microsoft Windows Hyper-V CVE-2019-0712 Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows ...
Microsoft Windows Win32k CVE-2019-1394 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Microsoft Office CVE-2019-1442 Security Bypass Vulnerability
Description Microsoft Office is prone to a security bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions; this may aid in launching further attacks. Technologies Affected Microsoft SharePoint Server 2019 Recommendations Run all software as a...
Microsoft Office CVE-2019-1449 Security Bypass Vulnerability
Description Microsoft Office is prone to a security bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions; this may aid in launching further attacks. Technologies Affected Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editio...
SAP Business Objects Business Intelligence Platform CVE-2019-0382 Cross Site Scripting Vulnerability
Description SAP Business Objects Business Intelligence Platform is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
Microsoft Windows Hyper-V CVE-2019-0719 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10...