CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 15:29 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-1369 | SG Security Guardium Big Data Intelligence Ibm | 3.7 | May 29 | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters |
| CVE-2018-8864 | AF Alert4000 Firmware Atisystem | 3.1 | May 25 | In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vulnerability caused by specially crafted… |
| CVE-2018-8862 | AF Alert4000 Firmware Atisystem | 3.1 | May 25 | In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, an improper authentication vulnerability caused by specially crafted malicious… |
| CVE-2018-6674 | VE Virusscan Enterprise Mcafee | 3.9 | May 25 | Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated… |
| CVE-2017-9635 | AM Ampla Manufacturing Execution System Schneider-electric | 3.9 | May 18 | Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges |
| CVE-2017-2603 | JE Jenkins Jenkins | 3.5 | May 15 | Jenkins before versions 2.44, 2.32.2 is vulnerable to a user data leak in disconnected agents' config.xml API |
| CVE-2018-6254 | AN Android Google | 3.3 | May 10 | In Android before the 2018-05-05 security patch level, NVIDIA Media Server contains an out-of-bounds read (due to improper input validation) vulnerability which could lead to… |
| CVE-2013-4209 | AB Automatic Bug Reporting Tool Redhat | 3.3 | May 1 | Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums |
| CVE-2017-17314 | DF Dp300 Firmware Huawei | 3.7 | Apr 30 | Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10,… |
| CVE-2018-10521 | CM Cms Made Simple Cmsmadesimple | 2.7 | Apr 27 | In CMS Made Simple (CMSMS) through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS, exploitable by an… |
| CVE-2018-10424 | MI Minicms 1234n | 2.7 | Apr 26 | mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field |
| CVE-2018-10423 | MI Minicms 1234n | 2.7 | Apr 26 | mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting… |
| CVE-2018-2831 | VV VM Virtualbox Oracle | 3.8 | Apr 19 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) |
| CVE-2018-2792 | HM Hardware Management Pack Oracle | 3.8 | Apr 19 | Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite (subcomponent: Ipmitool) |
| CVE-2018-2790 | UL Ubuntu Linux Canonical | 3.1 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) |
| CVE-2018-2763 | SO Solaris Oracle | 3.3 | Apr 19 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NTPD) |
| CVE-2018-0532 | GA Garoon Cybozu | 2.7 | Apr 16 | Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors |
| CVE-2018-0966 | WI Windows Microsoft | 3.3 | Apr 12 | A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server… |
| CVE-2017-2826 | ZA Zabbix Zabbix | 3.7 | Apr 9 | An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X |
| CVE-2018-1315 | HI Hive Apache | 3.7 | Apr 5 | In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server can cause the file to be written to an… |
| CVE-2018-1284 | HI Hive Apache | 3.7 | Apr 5 | In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs (xpath/xpath_string/xpath_boolean/xpath_number/xpath_double/xpath_float/xpath_long/xpath_int/xpath_short) to… |
| CVE-2018-1000150 | RP Reverse Proxy Auth Jenkins | 3.3 | Apr 5 | An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealm#authContext that allows attackers with… |
| CVE-2017-6426 | AN Android Google | 3.3 | Apr 4 | An information disclosure vulnerability in the Qualcomm SPMI driver |
| CVE-2017-6425 | AN Android Google | 3.3 | Apr 4 | An information disclosure vulnerability in the Qualcomm video driver |
| CVE-2017-1733 | QS Qradar Security Information And Event Manager Ibm | 3.3 | Apr 4 | IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user |
| CVE-2016-10236 | AN Android Google | 3.3 | Apr 4 | An information disclosure vulnerability in the Qualcomm USB driver |
| CVE-2018-4123 | IO iOS Apple | 2.4 | Apr 3 | An issue was discovered in certain Apple products |
| CVE-2017-13877 | IO iOS Apple | 3.3 | Apr 3 | An issue was discovered in certain Apple products |
| CVE-2017-1756 | BP Business Process Manager Ibm | 3.3 | Mar 30 | IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system |
| CVE-2015-5045 | RL Rational License Key Server Ibm | 3.3 | Mar 26 | The Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors |
| CVE-2015-7449 | RC Rational Collaborative Lifecycle Management Ibm | 3.3 | Mar 20 | IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality… |
| CVE-2014-2884 | TR Truecrypt Truecrypt Project | 3.3 | Mar 19 | The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files… |
| CVE-2018-5552 | DT Dtisqlinstaller Docutracinc | 3.3 | Mar 19 | Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper" |
| CVE-2018-0942 | IE Internet Explorer Microsoft | 2.6 | Mar 14 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… |
| CVE-2018-0919 | OF Office Microsoft | 3.3 | Mar 14 | Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013… |
| CVE-2018-0878 | WI Windows Microsoft | 3.1 | Mar 14 | Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… |
| CVE-2017-17282 | DF Dp300 Firmware Huawei | 3.1 | Mar 9 | SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00,… |
| CVE-2016-0275 | FT Financial Transaction Manager Ibm | 3.3 | Mar 9 | IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for… |
| CVE-2017-17330 | AF Ar3200 Firmware Huawei | 3.3 | Mar 9 | Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00;… |
| CVE-2017-17329 | V8 Viewpoint 8660 Firmware Huawei | 3.3 | Mar 9 | Huawei ViewPoint 8660 V100R008C03 have a memory leak vulnerability |
| CVE-2017-17325 | HI Hicinema Huawei | 3.7 | Mar 9 | Huawei video applications HiCinema with software of 8.0.3.308; 8.0.4.300 have a permission control vulnerability |
| CVE-2017-17321 | EF Ensp Firmware Huawei | 3.3 | Mar 9 | Huawei eNSP software with software of versions earlier than V100R002C00B510 has a buffer overflow vulnerability |
| CVE-2017-17280 | LF Lon-al00b Firmware Huawei | 3.5 | Mar 9 | NFC (Near Field Communication) module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability |
| CVE-2017-17149 | HI Hiwallet Huawei | 3.9 | Mar 9 | Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability |
| CVE-2018-0218 | SA Secure Access Control Server Solution Engine Cisco | 3.3 | Mar 8 | A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access… |
| CVE-2018-0207 | SA Secure Access Control Server Solution Engine Cisco | 3.3 | Mar 8 | A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access… |
| CVE-2018-5730 | DL Debian Linux Debian | 3.8 | Mar 6 | MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a… |
| CVE-2017-8164 | EF Eva-al10 Firmware Huawei | 3.3 | Mar 5 | Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150;… |
| CVE-2017-17141 | SF S12700 Firmware Huawei | 3.7 | Mar 5 | Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00;… |
| CVE-2017-1654 | GP General Parallel File System Ibm | 3.3 | Mar 2 | IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files |