Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (33609 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-6241 1 Bevywise 1 Mqttroute 2024-11-21 N/A
In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet combined with a malformed unsubscribe request packet can be used to cause a Denial of Service attack against the broker.
CVE-2019-6239 1 Apple 1 Mac Os X 2024-11-21 7.8 High
This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Mojave 10.14.4. A malicious application may bypass Gatekeeper checks.
CVE-2019-6222 1 Apple 1 Iphone Os 2024-11-21 4.3 Medium
A consistency issue was addressed with improved state handling. This issue is fixed in iOS 12.2. A website may be able to access the microphone without the microphone use indicator being shown.
CVE-2019-6203 1 Apple 3 Iphone Os, Mac Os X, Tvos 2024-11-21 9.8 Critical
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic.
CVE-2019-6191 1 Lenovo 1 Paper 2024-11-21 7.8 High
A potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow local privilege escalation.
CVE-2019-6188 1 Lenovo 784 130-14ikb, 130-14ikb Firmware, 130-15ikb and 781 more 2024-11-21 9.8 Critical
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.
CVE-2019-6186 1 Lenovo 1 System Interface Foundation 2024-11-21 8.8 High
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user.
CVE-2019-6184 1 Lenovo 1 Customer Engagement Service 2024-11-21 7.8 High
A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow local privilege escalation.
CVE-2019-6183 1 Lenovo 1 Energy Management 2024-11-21 7.5 High
A denial of service vulnerability has been reported in Lenovo Energy Management Driver for Windows 10 versions prior to 15.11.29.7 that could cause systems to experience a blue screen error. Lenovo Energy Management is a client utility. Lenovo XClarity Energy Manager is not affected.
CVE-2019-6178 1 Lenovo 12 Home Media Network Hard Drive, Home Media Network Hard Drive Firmware, Ix12-300r and 9 more 2024-11-21 5.3 Medium
An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their contents.
CVE-2019-6176 1 Lenovo 2 Thinkpad Usb-c Dock, Thinkpad Usb-c Dock Firmware 2024-11-21 7.5 High
A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service.
CVE-2019-6175 1 Lenovo 1 System Update 2024-11-21 7.5 High
A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow configuration files to be written to non-standard locations.
CVE-2019-6172 1 Lenovo 784 130-14ikb, 130-14ikb Firmware, 130-15ikb and 781 more 2024-11-21 6.4 Medium
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.
CVE-2019-6171 1 Lenovo 296 20a7, 20a7 Firmware, 20a8 and 293 more 2024-11-21 6.8 Medium
A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.
CVE-2019-6170 1 Lenovo 784 130-14ikb, 130-14ikb Firmware, 130-15ikb and 781 more 2024-11-21 6.4 Medium
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.
CVE-2019-6168 1 Lenovo 8 Ideacentre, Ideapad, Service Bridge and 5 more 2024-11-21 9.8 Critical
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
CVE-2019-6167 1 Lenovo 8 Ideacentre, Ideapad, Service Bridge and 5 more 2024-11-21 9.8 Critical
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
CVE-2019-6160 1 Lenovo 13 Home Media Network Hard Drive, Home Media Network Hard Drive Firmware, Ix12-300r and 10 more 2024-11-21 N/A
A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.
CVE-2019-6155 1 Ibm 8 Bladecenter Hs23, Bladecenter Hs23 Firmware, System X3530 M4 and 5 more 2024-11-21 N/A
A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service.
CVE-2019-6140 1 Forcepoint 1 Email Security 2024-11-21 9.8 Critical
A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnerable state if the hybrid registration process is not completed.