Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (327395 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-1020014 3 Canonical, Docker, Fedoraproject 3 Ubuntu Linux, Credential Helpers, Fedora 2024-11-21 5.5 Medium
docker-credential-helpers before 0.6.3 has a double free in the List functions.
CVE-2019-1020013 1 Parseplatform 1 Parse-server 2024-11-21 N/A
parse-server before 3.6.0 allows account enumeration.
CVE-2019-1020012 1 Parseplatform 1 Parse-server 2024-11-21 N/A
parse-server before 3.4.1 allows DoS after any POST to a volatile class.
CVE-2019-1020011 1 Charcoal-se 1 Smokedetector 2024-11-21 7.2 High
SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator authority.
CVE-2019-1020010 1 Misskey 1 Misskey 2024-11-21 N/A
Misskey before 10.102.4 allows hijacking a user's token.
CVE-2019-1020009 1 Kolide 1 Fleet 2024-11-21 N/A
Fleet before 2.1.2 allows exposure of SMTP credentials.
CVE-2019-1020008 1 Stacktable.js Project 1 Stacktable.js 2024-11-21 N/A
stacktable.js before 1.0.4 allows XSS.
CVE-2019-1020007 1 Owasp 1 Dependency-track 2024-11-21 N/A
Dependency-Track before 3.5.1 allows XSS.
CVE-2019-1020006 1 Inveniosoftware 1 Invenio-app 2024-11-21 N/A
invenio-app before 1.1.1 allows host header injection.
CVE-2019-1020005 1 Inveniosoftware 1 Invenio-communities 2024-11-21 N/A
invenio-communities before 1.0.0a20 allows XSS.
CVE-2019-1020004 1 Tridactyl Project 1 Tridactyl 2024-11-21 N/A
Tridactyl before 1.16.0 allows fake key events.
CVE-2019-1020003 1 Inveniosoftware 1 Invenio-records 2024-11-21 N/A
invenio-records before 1.2.2 allows XSS.
CVE-2019-1020002 1 Pterodactyl 1 Panel 2024-11-21 N/A
Pterodactyl before 0.7.14 with 2FA allows credential sniffing.
CVE-2019-1020001 1 Yardoc 1 Yard 2024-11-21 8.8 High
yard before 0.9.20 allows path traversal.
CVE-2019-1010319 5 Canonical, Debian, Fedoraproject and 2 more 5 Ubuntu Linux, Debian Linux, Fedora and 2 more 2024-11-21 5.5 Medium
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.
CVE-2019-1010317 5 Canonical, Debian, Fedoraproject and 2 more 5 Ubuntu Linux, Debian Linux, Fedora and 2 more 2024-11-21 5.5 Medium
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.
CVE-2019-1010316 1 Pyxtrlock Project 1 Pyxtrlock 2024-11-21 N/A
pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. The fixed version is: 0.4.
CVE-2019-1010315 5 Canonical, Debian, Fedoraproject and 2 more 5 Ubuntu Linux, Debian Linux, Fedora and 2 more 2024-11-21 5.5 Medium
WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig (dsdiff.c:282). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc.
CVE-2019-1010314 1 Gitea 1 Gitea 2024-11-21 N/A
Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, when the vulnerable repo page is loaded. The component is: repository's description. The attack vector is: victim must navigate to public and affected repo page.
CVE-2019-1010310 1 Glpi-project 1 Glpi 2024-11-21 N/A
GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Admins can phish any user or group of users for credentials / credit cards. The component is: Tools > Reminder > Description .. Set the description to any iframe/form tags and apply. The attack vector is: The attacker puts a login form, the user fills it and clicks on submit .. the request is sent to the attacker domain saving the data. The fixed version is: 9.4.1.