Browse CVEs

HIGH 7.5 CVE-2018-13798 A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All v… Sicam A8000 Cp 8000 Firmware 2.00 / 14+ Fix from $1,9502019-03-21 HIGH 7.5 CVE-2019-6690EPSS 9% python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase… Python Gnupg No fix yet Fix from $1,9502019-03-21 HIGH 7.8 CVE-2018-20669 An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execb… Linux Kernel 4.14.185 / 4.19.129+ Fix from $1,9502019-03-21 CRITICAL 9.9 CVE-2018-20162 Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypa… Transport Lr54 Firmware 4.4.0.26+ Fix from $2,3002019-03-21 CRITICAL 9.8 CVE-2018-19524EPSS 51% An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 de… Dt740 Firmware No fix yet Fix from $2,3002019-03-21 HIGH 7.5 CVE-2018-15818 An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending… Repute Arforms after 3.5.1 Fix from $1,9502019-03-21 HIGH 8.1 CVE-2018-20106 In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backtic… Yast2 Printer after 4.0.2 Fix from $1,9502019-03-15 MEDIUM 5.4 CVE-2018-1658 IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by improper va… Rational Collaborative Lifecycle Management after 6.0.6 Fix from $1,6002019-03-14 MEDIUM 6.0 CVE-2018-12215 Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x… Graphics Driver Patch available Fix from $1,6002019-03-14 HIGH 8.2 CVE-2018-12216 Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x… Graphics Driver Patch available Fix from $1,9502019-03-14 MEDIUM 5.5 CVE-2018-12219 Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x… Graphics Driver Patch available Fix from $1,6002019-03-14 HIGH 7.8 CVE-2018-12221 Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x… Graphics Driver Patch available Fix from $1,9502019-03-14 MEDIUM 6.8 CVE-2018-12185 Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated use… Converged Security Management Engine Firmware 11.8.60 / 11.11.60+ Fix from $1,6002019-03-14 HIGH 7.5 CVE-2018-12187 Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow… Active Management Technology Firmware 11.8.60 / 11.11.60+ Fix from $1,9502019-03-14 MEDIUM 6.7 CVE-2018-12190 Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.… Converged Security Management Engine Firmware 3.1.60 / 4.0.10+ Fix from $1,6002019-03-14 MEDIUM 6.7 CVE-2018-12196 Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to p… Converged Security Management Engine Firmware 11.8.60 / 11.11.60+ Fix from $1,6002019-03-14 MEDIUM 6.0 CVE-2018-12198 Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to p… Server Platform Services Firmware Mitigation only Fix from $1,6002019-03-14 MEDIUM 6.5 CVE-2018-12211 Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5… Graphics Driver Patch available Fix from $1,6002019-03-14 MEDIUM 6.5 CVE-2018-20800 An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to 6.0.13 (also patchlevel updates) or 5.0.31 (only ma… Otrs Patch available Fix from $1,6002019-03-13 MEDIUM 6.5 CVE-2019-0271 ABAP Server (used in NetWeaver and Suite/ERP) and ABAP Platform does not sufficiently validate an XML document accepted from an untrusted source, lea… Advanced Business Application Programming Platform after 7.52 Fix from $1,6002019-03-12 HIGH 7.5 CVE-2019-1616 A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer over… Nx Os 6.2 / 7.0+ Fix from $1,9502019-03-11 HIGH 7.8 CVE-2018-4054 A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with … Renderman No fix yet Fix from $1,9502019-03-08 MEDIUM 5.5 CVE-2018-4055 A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with … Renderman No fix yet Fix from $1,6002019-03-08 HIGH 7.8 CVE-2019-1605 A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vul… Nx Os 6.0 / 7.0+ Fix from $1,9502019-03-08 HIGH 7.5 CVE-2019-1597 Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Sof… Firepower Extensible Operating System 2.0.1.201 / 2.2.2.54+ Fix from $1,9502019-03-07 HIGH 7.5 CVE-2019-1598 Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Sof… Firepower Extensible Operating System 2.0.1.201 / 2.2.2.54+ Fix from $1,9502019-03-07 HIGH 7.4 CVE-2019-1594 A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service … Nx Os 5.2 / 6.2+ Fix from $1,9502019-03-06 MEDIUM 5.9 CVE-2019-0657 A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing … .net Core Patch available Fix from $1,6002019-03-05 MEDIUM 6.1 CVE-2019-0670 A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing… Sharepoint Enterprise Server Patch available Fix from $1,6002019-03-05 MEDIUM 6.2 CVE-2019-0635 An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated… Windows 10 Patch available Fix from $1,6002019-03-05